Certified Ethical Hacker (CEH v12) — Question 107

At what stage of the cyber kill chain theory model does data exfiltration occur?

Answer options

• A. Weaponization
• B. Actions on objectives
• C. Command and control
• D. Installation

Correct answer: B

Explanation

Data exfiltration happens during the 'Actions on objectives' phase, where attackers aim to achieve their goals, which often includes stealing sensitive information. The other stages, such as 'Weaponization' and 'Installation,' are focused on preparing and establishing access, rather than executing the final objectives.