312-85: Certified Threat Intelligence AnalystDemo

Question

John, a professional hacker, is attempting to conduct an APT attack against a target organization’s network. He gains access to one system in the target organization and attempts to obtain administrative login credentials, using various techniques, to gain further access to systems on the network.

Which phase of the advanced persistent threat lifecycle is John currently in?

A Initial intrusion
B Search and exfiltration
C Expansion
D Persistence

Explanation

The Expansion phase covers escalating privileges and obtaining credentials to extend access from an initially compromised system to additional systems in the target network.

312-85: Certified Threat Intelligence AnalystDemo

AstroTutor

Notes

Readiness

QuestionQ88

Community Discussion