During Phase 3 Gaining Access, which action is described as gaining initial access?

During Phase 3 Gaining Access, which action is described as gaining initial access?

• A. Escalate privileges
• B. Get access to OS
• C. Password cracking
• D. Install malware

Answer: (B)

In this phase, the attacker is moving from planning to actually entering the target system. Gaining initial access means establishing a foothold on the operating system itself—the moment you have a session or control on the victim’s machine. That’s the entry point that lets the attacker do further actions, such as exploring the system, collecting data, or preparing for deeper access. Getting access to the OS directly describes that foothold. The other options represent actions that typically occur after that initial entry: escalating privileges is about increasing rights once inside, password cracking is a technique that might be used to obtain that initial access but doesn’t by itself define the act of gaining entry, and installing malware usually happens after access is already gained to deploy additional capabilities or persistence.

In this phase, the attacker is moving from planning to actually entering the target system. Gaining initial access means establishing a foothold on the operating system itself—the moment you have a session or control on the victim’s machine. That’s the entry point that lets the attacker do further actions, such as exploring the system, collecting data, or preparing for deeper access.

Getting access to the OS directly describes that foothold. The other options represent actions that typically occur after that initial entry: escalating privileges is about increasing rights once inside, password cracking is a technique that might be used to obtain that initial access but doesn’t by itself define the act of gaining entry, and installing malware usually happens after access is already gained to deploy additional capabilities or persistence.