Which Kill Chain stage involves delivering the payload to the victim via email attachments, malicious links, vulnerable web applications, or USB drives?

• A. Delivery
• B. Exploitation
• C. Installation
• D. Reconnaissance

Answer: (A)

This item tests the Delivery stage of the cyber kill chain—the phase where the attacker brings the weaponized payload into the target’s environment. Delivering via email attachments, malicious links, compromised or vulnerable web applications, or USB drives are classic vectors used specifically to get the payload onto the victim’s system. Once the payload is delivered, exploitation follows, where a vulnerability or user action triggers code execution, and installation then installs malware for persistence. Reconnaissance is earlier in the process, focused on gathering information about the target before any delivery.