CompTIA CySA+ CS0-003 Practice Question

In the Cyber Kill Chain framework, the 'Intrusion' stage (also known as 'Exploitation') involves an adversary successfully leveraging vulnerabilities to gain access and establish a foothold in the system. During this stage, the key focus should be on identifying and neutralizing the threat to prevent further exploitation, which aligns with monitoring network activity and isolating compromised systems. The 'Reconnaissance' stage involves initial research and probing for vulnerabilities but does not yet indicate active exploitation. 'Delivery' refers to the delivery of malicious payloads. The 'Installation' stage is where adversaries deploy malware or tools within the network.