Palo Alto Networks Cybersecurity Entry-Level Technician (PCCET) — Question 104

In which phase of the cyberattack lifecycle do attackers establish encrypted communication channels back to servers across the internet so that they can modify their attack objectives and methods?

Answer options

• A. exploitation
• B. actions on the objective
• C. command and control
• D. installation

Correct answer: C

Explanation

The correct answer is C, command and control, as this phase involves establishing communication channels that allow attackers to remotely manage and modify their operations. The other options do not pertain to the establishment of communication links; exploitation refers to gaining access, actions on the objective involve executing the attack's goals, and installation is about placing malware on the target system.