The life-cycle stages imply that every attacker completes the mission quickly after initial compromise.

### Why this is right The material explicitly allows for attackers to maintain access over an extended period. The stages describe kinds of activity, not a fixed timetable. ### The concept An attacker may spend time establishing access, seeking greater privileges, learning about internal systems, and moving through an environment. A sequence can help defenders understand possible progress without predicting exactly how quickly it will happen. This is why detection and response at multiple stages matter. ### The other options - **True**: This incorrectly turns a sequence of stages into a guaranteed rapid schedule. It is tempting to assume that listed steps happen back-to-back, but the material says an attacker may persist over time. ### Terms - **Privilege escalation**: Seeking greater access or authority after obtaining an initial level of access. ### Remember A life-cycle sequence is not a stopwatch.