An endpoint begins periodic outbound communications to receive attacker instructions after compromise. What should the responder suspect?

A trainee is matching terms and sees a weakness in software or configuration that attackers could ab...

A learner sees code or a method used to take advantage of a known weakness. Which term fits?...

A server is missing a critical patch, but no attack has occurred yet. What should the learner identi...

A proof-of-concept uses a bug to gain unauthorized access. What should the learner call the proof-of...

A defender is organizing reconnaissance, intrusion, control, and objective-focused activity into a s...