Cyber Attack Stages CCOA Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is a common technique used in the installation stage?

   • AExploiting a remote code execution vulnerability
   • BCreating a scheduled task to run malware at system startup
   • CEstablishing a command and control channel
   • DSending a spear-phishing email to an employee
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A security analyst is reviewing network traffic and notices that a compromised host is sending DNS queries to a domain that is not in the company's approved list. The domain has a short TTL and the queries are occurring at regular intervals. The analyst suspects the host is using DNS tunneling for C2. Which stage of the cyber attack lifecycle is the attacker in, and what is the primary purpose of the DNS tunneling?

   • AInstallation, to maintain persistence
   • BActions on Objectives, to exfiltrate data
   • CExploitation, to gain initial access
   • DCommand and Control, to communicate with the compromised host
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following is an example of active reconnaissance?

   • AMonitoring public DNS records to map the target's domain structure
   • BPort scanning the target's network to identify open services
   • CReviewing the target's social media profiles for employee names
   • DSearching public job postings for technology stack information
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following is an example of exploitation?

   • AUsing a buffer overflow to execute arbitrary code on a server
   • BInstalling a backdoor for persistent access
   • CSending a phishing email with a malicious link
   • DCreating a malicious payload with Metasploit
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the primary goal of the 'Actions on Objectives' stage in a cyber attack?

   • ATo establish persistence on the compromised system
   • BTo achieve the attacker's final goal, such as data exfiltration or disruption
   • CTo scan the network for additional targets
   • DTo deliver the malicious payload to the target
   Reveal Solution Discussion Select an answer first