CS0-003: CompTIA Cybersecurity Analyst (CySA+)

Question

Following a series of UEBA alerts, a company’s SOC notices a prolonged period of suspicious outbound traffic, all directed to the same destination. Which cyber kill chain step has this attack completed?

Explanation

The command-and-control phase involves compromised systems establishing and maintaining communications with attacker-controlled infrastructure. Extended suspicious outbound traffic to one destination is consistent with that activity.

CS0-003: CompTIA Cybersecurity Analyst (CySA+)

AstroTutor

Notes

Readiness

QuestionQ33

Community Discussion