During a Security Assessment, Activities Were Divided into Two Phases

question 101

Multiple Choice

During a security assessment, activities were divided into two phases: internal and external exploitation. The security assessment team set a hard time limit on external activities before moving to a compromised box within the enterprise perimeter. Which of the following methods is the assessment team most likely to employ NEXT?

• A) Pivoting from the compromised, moving laterally through the enterprise, and trying to exfiltrate data and compromise devices.
• B) Conducting a social engineering attack attempt with the goal of accessing the compromised box physically.  
• C) Exfiltrating network scans from the compromised box as a precursor to social media reconnaissance
• D) Open-source intelligence gathering to identify the network perimeter and scope to enable further system compromises.

---

Definitions:

American Indian Movement

An advocacy group founded in 1968, focusing on Native American rights, sovereignty, and issues of injustice.

Nonviolent Protest

A method of expressing opposition through peaceful means, such as marches, sit-ins, or civil disobedience, without the use of violence.

British Invasion

A term primarily used to describe the influx of British rock and pop bands into the American music scene during the mid-1960s, significantly influencing global music culture.

Operation MONGOOSE

A covert operation initiated by the United States government in 1961 aimed at overthrowing Fidel Castro's government in Cuba.