CrowdStrike Certified Falcon Hunter (CCFH) — Question 44

In which of the following stages of the Cyber Kill Chain does the actor not interact with the victim endpoint(s)?

Answer options

• A. Exploitation
• B. Weaponization
• C. Command & control
• D. Installation

Correct answer: B

Explanation

The correct answer is B, Weaponization, because this stage involves creating a malicious payload and does not require direct interaction with the target endpoint. In contrast, the other stages, such as Exploitation, Command & Control, and Installation, all necessitate some form of interaction with the victim's systems.