Match each stage of the cyberattack life cycle to its corresponding activity: Stages: - Reconnaissance - Establish Foothold - Escalate Privileges - Lateral Movement - Complete Mission Activities: - Gathering intelligence and scanning the target environment - Ensuring persistent access after initial entry - Acquiring administrative rights or higher system permissions - Navigating through the internal network to compromise additional hosts - Achieving the final objective, such as exfiltrating or modifying critical data

### The pairs | Item | Matches | Why | |---|---|---| | Reconnaissance | Collecting information about a target | Information gathering can help an attacker prepare for entry. | | Establish foothold | Creating a position or continuing access after entry | A foothold gives the attacker a presence from which to continue activity. | | Escalate privileges | Seeking greater access or authority | Privilege escalation increases what the attacker’s access can permit. | | Move laterally | Moving through the environment to other systems | Lateral movement extends activity beyond the initial system. | | Complete mission | Removing, changing, destroying, or covertly stealing data | These are examples of mission outcomes listed in the material. | ### Terms - **Privilege**: The access or authority available to an account. - **Lateral movement**: Movement from one system or area of an environment to another. ### Remember The stages describe different attacker goals, from learning about a target to carrying out a mission.