1.2 Identify and Describe the Stages of the Cyber Attack Lifecycle CYBERSECURITY-APPRENTICE Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A security analyst is reviewing an incident timeline. The attacker first performed a port scan of the company's network, then exploited a vulnerability in a web server, then installed a backdoor, and finally established a connection to an external server. Which stage of the cyber attack lifecycle is missing from this timeline?

   • AWeaponization
   • BActions on Objectives
   • CDelivery
   • DCommand and Control
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following best describes the purpose of the cyber attack lifecycle model?

   • ATo define a set of legal penalties for cybercriminals who are caught during an attack.
   • BTo provide a sequential framework that helps security professionals understand and anticipate attacker behavior at each phase of an attack.
   • CTo guarantee that all cyber attacks follow the exact same sequence of steps without variation.
   • DTo list the hardware and software tools that attackers commonly use in their operations.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary purpose of the installation stage in the cyber attack lifecycle?

   • ATo deliver the weaponized payload to the target
   • BTo exfiltrate data from the target system
   • CTo gather information about the target network
   • DTo install malware or backdoors to maintain persistence on the compromised system
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   After exploiting a vulnerability, an attacker creates a scheduled task that will re-establish access if the system is rebooted. This activity is best associated with which stage of the cyber attack lifecycle?

   • AInstallation
   • BCommand and Control
   • CActions on Objectives
   • DExploitation
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   A user clicks a link in a phishing email, and the malicious script exploits a browser vulnerability to run code on the user's computer. Which stage of the cyber attack lifecycle does this represent?

   • AExploitation
   • BDelivery
   • CInstallation
   • DWeaponization
   Reveal Solution Discussion Select an answer first