Câu 289: 312-50V13: Certified Ethical Hacker v13

In an advanced persistent threat scenario, an adversary follows a detailed set of procedures in the cyber kill chain. During one such instance, the adversary has successfully gained access to a corporate network and now attempts to obfuscate malicious traffic within legitimate network traffic. Which of the following actions would most likely be part of the adversary's current procedures?

1. A. Employing data staging techniques to collect and aggregate sensitive data.
2. B. Initiating DNS tunneling to communicate with the command-and-control server. — đáp án hiện tại
3. C. Establishing a command-and-control server to communicate with compromised systems.
4. D. Conducting internal reconnaissance using PowerShell scripts.