Cyber Kill Chain Weaponization Stage Identification

312-50v13 By islever Editorial Last updated

Introduction to Ethical Hacking

Short answer

B Creating a client-side backdoor payload for delivery is the Weaponization stage of the cyber kill chain.

Question

You are a penetration tester working to test the user awareness of the employees of the client XYZ. You harvested two employees’ emails from some public sources and are creating a client-side backdoor to send it to the employees via email. Which stage of the cyber kill chain are you at?
  1. Reconnaissance
  2. Weaponization Correct Answer
  3. Command and control
  4. Exploitation

Key Takeaways

The trap lies in confusing the creation of the exploit (Weaponization) with its activation (Exploitation) or the final goal (Command and Control).

This question tests the identification of the Weaponization stage in the Cyber Kill Chain. The correct answer is B because creating a backdoor payload for delivery constitutes weaponization.

Common mistake: Many learners choose Exploitation (D), incorrectly believing that sending the email triggers the vulnerability immediately, whereas the act of crafting the malicious attachment is Weaponization.

Expert Analysis

Why the Answer Is Correct

The Cyber Kill Chain's Weaponization stage involves combining an exploit with a malicious payload to create a deliverable weapon. In this scenario, you are "creating a client-side backdoor" to be sent via email. This act of assembling the specific malware tool is the definition of Weaponization.

Why the Other Options Are Wrong

Reconnaissance (A) involves gathering information, which has already occurred. Command and Control (C) happens after the system is compromised. Exploitation (D) occurs when the payload is executed on the target; since the question focuses on the creation of the backdoor before/during distribution, it fits Weaponization best among the choices.

Community Comment Notes

The community overwhelmingly agrees on B. One user noted that while there is no "Delivery" option, the act of creating the tailored payload aligns with Weaponization. Another user suggested D but acknowledged the lack of a Delivery option makes B the logical choice for the preparation phase.

Exam Strategy

Focus on the action verbs: 'Creating' or 'Crafting' usually points to Weaponization. 'Sending' or 'Delivering' points to Delivery. 'Executing' or 'Triggering' points to Exploitation.

Frequently Asked Questions

Why isn't sending the email Delivery?

Delivery is the transmission step. Since it's not an option, and the question emphasizes 'creating' the backdoor, Weaponization is the intended focus.

What distinguishes Weaponization from Exploitation?

Weaponization is assembling the exploit and payload. Exploitation is the actual triggering of that payload on the target system.

More 312-50v13 FAQ →

Community Votes

B
100%

100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 7 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 7

  1. Stephanie0208 👍 1 Answered D
    You ……are creating a client-side backdoor to send it to the employees via email. However, there is no “Delivery” option. Then I would suggest D. Exploitation. Exploitation After the weapon is transmitted to the intended victim, exploitation triggers the adversary’s malicious code to exploit a vulnerability in the operating system, application, or server on a target system. At this stage, the organization may face threats such as authentication and authorization attacks, arbitrary code execution, physical security threats, and security misconfiguration. Activities of the adversary include the following: o Exploiting software or hardware vulnerabilities to gain remote access to the target system
  2. Stephanie0208 👍 1 Answered B
    I changed my mind… Based on the vulnerabilities identified during analysis, the adversary selects or creates a tailored deliverable malicious payload (remote-access malware weapon) using an exploit and a backdoor to send it to the victim. For example, the adversary may send a phishing email to an employee of the target organization, which may include a malicious attachment such as a virus or worm that, when downloaded, installs a backdoor on the system that allows remote access to the adversary.
  3. MHafizC 👍 1 Answered B
    It's weaponization. The stage preparing tools after gathering enough information.
  4. JOHNBOO 👍 1 Answered B
    B Weaponization is the correct option
  5. 935f9c3 👍 2 Answered B
    B. Weaponization
Show 2 more comments
  1. cb56e21 👍 1 Answered B
    It is weaponization
  2. getaseadsss 👍 1 Answered B
    Weaponization

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Agent-Based vs Network-Based Vulnerability Scanners

S-grade

Network Sniffing Techniques for Penetration Testing

S-grade

File-less Malware Bypassing Application Whitelisting

S-grade

SQL Injection Bypass in Login Forms

S-grade

← Back to 312-50v13 Study Guide