During a Security Assessment, Activities Were Divided into Two Phases

question 101

Multiple Choice

During a security assessment, activities were divided into two phases: internal and external exploitation. The security assessment team set a hard time limit on external activities before moving to a compromised box within the enterprise perimeter. Which of the following methods is the assessment team most likely to employ NEXT?

• A) Pivoting from the compromised, moving laterally through the enterprise, and trying to exfiltrate data and compromise devices.
• B) Conducting a social engineering attack attempt with the goal of accessing the compromised box physically.  
• C) Exfiltrating network scans from the compromised box as a precursor to social media reconnaissance
• D) Open-source intelligence gathering to identify the network perimeter and scope to enable further system compromises.

---

Definitions:

Cost Centers

Departments or segments within an organization that do not directly generate revenue but incur costs.

Profit Centers

Divisions or units within an organization that are directly responsible for generating its profit.

Statements Of Activities

Financial reports that summarize an organization's revenues, expenses, and changes in net assets for a specific period.

Statements Of Cash Flows

Financial statements that detail the inflow and outflow of cash within an organization over a specific period of time.