Which sequence correctly lists the stages of the cyber kill chain from reconnaissance to actions on objectives?

• A. Reconnaissance, weaponization, delivery, exploitation, installation, C2, and actions on objectives.
• B. Delivery, reconnaissance, weaponization, installation, C2, actions on objectives, exploitation.
• C. Reconnaissance, delivery, weaponization, installation, exploitation, C2, actions on objectives.
• D. Exploitation, installation, reconnaissance, weaponization, C2, actions on objectives, delivery.

Answer: (A)

Understanding the sequence of actions in the cyber kill chain helps you see how an attacker progresses from information gathering to achieving their goal. The correct order starts with reconnaissance, where the attacker gathers details about the target. Next is weaponization, preparing a malware payload to exploit a vulnerability. Then comes delivery, the method used to bring that payload to the target. After delivery, exploitation occurs, triggering the vulnerability to run code. Installation follows, placing malware so the attacker has a foothold. Then comes command and control, establishing a channel to communicate with the compromised system. Finally, actions on objectives are carried out to accomplish the attacker’s goals. Other sequences mix up these steps or place critical stages in the wrong order, breaking the logical progression from initial access to achieving objectives.