Certified Ethical Hacker (CEH v11) — Question 55

At what stage of the cyber kill chain theory model does data exfiltration occur?

Answer options

• A. Weaponization
• B. Actions on objectives
• C. Command and control
• D. Installation

Correct answer: B

Explanation

Data exfiltration occurs during the 'Actions on objectives' phase, where attackers carry out their goals, which often includes stealing sensitive information. The other stages, such as Weaponization, Command and Control, and Installation, involve different aspects of the attack process, such as preparing the attack, establishing control over the target system, and installing malware, respectively.