PRCC Network Security Practice Exam – Practice Test & Study Guide

The correct answer is the "Attack surface," as it does not belong to the Cyber Kill Chain framework. The Cyber Kill Chain is a model developed by Lockheed Martin that outlines the stages of a cyber attack, helping defenders understand and mitigate threats effectively.

The model consists of several specific phases that describe the progression of an attack from initial reconnaissance to the culmination of an attack. The recognized stages include:

- **Reconnaissance phase**: This is where attackers gather information about the target system or network, looking for vulnerabilities and planning their attack strategy.

- **Delivery phase**: In this phase, attackers transmit the weaponized payload to the target. This could be through email, web downloads, or other vector strategies.

- **Exploitation phase**: Here, the attacker makes use of the vulnerabilities to execute their code and gain access to the target system.

These components are essential for understanding the dynamics of cyber attacks and how they unfold. "Attack surface," however, refers to the totality of vulnerabilities in a given system that could be exploited by attackers. While it is a critical concept in understanding security posture, it is not a defined phase in the Cyber Kill Chain framework. This distinction is important for anyone studying network security, as knowing the phases