Cyber Attack Stages CCOA Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   An attacker has crafted a malicious macro-enabled Word document. The attacker has learned from open-source intelligence that the target organization frequently shares documents with a specific partner company. The attacker sends the document via email, posing as an employee of that partner company. Which attack stage is the attacker performing?

   • AWeaponization
   • BExploitation
   • CDelivery
   • DReconnaissance
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A penetration tester is simulating an attack against a client's environment. The tester has identified that the client's employees frequently open email attachments. The tester creates a malicious PDF that exploits a known vulnerability in the client's PDF reader software. In which stage of the cyber attack lifecycle is the tester operating?

   • AWeaponization
   • BInstallation
   • CDelivery
   • DExploitation
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the primary purpose of the installation stage in a cyber attack?

   • ATo deliver the malicious payload to the victim
   • BTo scan the network for additional targets
   • CTo establish persistent access to the compromised system
   • DTo exfiltrate sensitive data from the network
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following is a common method used in the weaponization stage?

   • ASending a phishing email with a malicious link
   • BScanning a network for open ports
   • CCreating a malicious macro embedded in a Microsoft Office document
   • DInstalling a rootkit on a compromised system
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the purpose of the command and control (C2) stage in a cyber attack?

   • ATo exfiltrate data from the target network
   • BTo establish a communication channel between the attacker and the compromised system
   • CTo deliver the initial payload to the victim
   • DTo exploit a vulnerability to gain access
   Reveal Solution Discussion Select an answer first