Certified Ethical Hacker (CEH v13) — Question 264

At what stage of the cyber kill chain theory model does data exfiltration occur?

Answer options

• A. Weaponization
• B. Actions on objectives
• C. Command and control
• D. Installation

Correct answer: B

Explanation

Data exfiltration happens during the 'Actions on objectives' stage, where attackers achieve their goals, such as stealing sensitive information. The other stages, like 'Weaponization' and 'Installation,' focus on preparing and setting up the attack rather than executing the data theft.