Cyber Kill Chain Weaponization Stage Identification

Introduction to Ethical Hacking
Answer Correct answer: B — Creating a client-side backdoor payload for delivery is the Weaponization stage of the cyber kill chain.

You are a penetration tester working to test the user awareness of the employees of the client XYZ. You harvested two employees’ emails from some public sources and are creating a client-side backdoor to send it to the employees via email. Which stage of the cyber kill chain are you at?

  1. Reconnaissance
  2. Weaponization Correct Answer
  3. Command and control
  4. Exploitation

Community Votes

B
100%

100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

The trap lies in confusing the creation of the exploit (Weaponization) with its activation (Exploitation) or the final goal (Command and Control).

This question tests the identification of the Weaponization stage in the Cyber Kill Chain. The correct answer is B because creating a backdoor payload for delivery constitutes weaponization.

Many learners choose Exploitation (D), incorrectly believing that sending the email triggers the vulnerability immediately, whereas the act of crafting the malicious attachment is Weaponization.

Community Discussion (7 comments)

getaseadsss 👍 1 Selected: B
Weaponization
Stephanie0208 👍 1 Selected: B
I changed my mind… Based on the vulnerabilities identified during analysis, the adversary selects or creates a tailored deliverable malicious payload (remote-access malware weapon) using an exploit and a backdoor to send it to the victim. For example, the adversary may send a phishing email to an employee of the target organization, which may include a malicious attachment such as a virus or worm that, when downloaded, installs a backdoor on the system that allows remote access to the adversary.
Stephanie0208 👍 1 Selected: D
You ……are creating a client-side backdoor to send it to the employees via email. However, there is no “Delivery” option. Then I would suggest D. Exploitation. Exploitation After the weapon is transmitted to the intended victim, exploitation triggers the adversary’s malicious code to exploit a vulnerability in the operating system, application, or server on a target system. At this stage, the organization may face threats such as authentication and authorization attacks, arbitrary code execution, physical security threats, and security misconfiguration. Activities of the adversary include the following: o Exploiting software or hardware vulnerabilities to gain remote access to the target system
MHafizC 👍 1 Selected: B
It's weaponization. The stage preparing tools after gathering enough information.
cb56e21 👍 1 Selected: B
It is weaponization
935f9c3 👍 2 Selected: B
B. Weaponization
JOHNBOO 👍 1 Selected: B
B Weaponization is the correct option

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

The Cyber Kill Chain's Weaponization stage involves combining an exploit with a malicious payload to create a deliverable weapon. In this scenario, you are "creating a client-side backdoor" to be sent via email. This act of assembling the specific malware tool is the definition of Weaponization.

Why the Other Options Are Wrong

Reconnaissance (A) involves gathering information, which has already occurred. Command and Control (C) happens after the system is compromised. Exploitation (D) occurs when the payload is executed on the target; since the question focuses on the creation of the backdoor before/during distribution, it fits Weaponization best among the choices.

Community Comment Notes

The community overwhelmingly agrees on B. One user noted that while there is no "Delivery" option, the act of creating the tailored payload aligns with Weaponization. Another user suggested D but acknowledged the lack of a Delivery option makes B the logical choice for the preparation phase.

Official Reference

https://www.lockheedmartin.com/en-us/products/cyber-kill-chain.html

Exam Strategy

Focus on the action verbs: 'Creating' or 'Crafting' usually points to Weaponization. 'Sending' or 'Delivering' points to Delivery. 'Executing' or 'Triggering' points to Exploitation.

Frequently Asked Questions

Why isn't sending the email Delivery?

Delivery is the transmission step. Since it's not an option, and the question emphasizes 'creating' the backdoor, Weaponization is the intended focus.

What distinguishes Weaponization from Exploitation?

Weaponization is assembling the exploit and payload. Exploitation is the actual triggering of that payload on the target system.

More 312-50v13 FAQ →

Related Analysis

Clark is a professional hacker. He created and configured mu

S-Grade

Which of the following Metasploit post-exploitation modules

A-Grade

Which IOS jailbreaking technique patches the kernel during t

S-Grade

← Back to 312-50v13 Study Guide