Which statement is a correct description of the attack cycle?

Which statement is a correct description of the attack cycle?

• A. Target, Plan, Deploy, Attack, Escape, Exploit
• B. Assess, Plan, Build, Deliver
• C. Observe, React, Resolve
• D. Identify, Notify, Evacuate, Restore

Answer: (A)

The attack cycle is a sequence of actions an attacker typically follows to carry out an operation. It starts with identifying a target, then planning how to reach that target and what methods to use. After planning comes deployment, where the attacker mobilizes resources to carry out the plan. The attack itself is the execution of those steps against the target. If possible, the attacker will attempt to escape or remove themselves from the scene, and then exploit the outcome—taking advantage of disruption, access, or benefits gained from the attack. This flow—target, plan, deploy, attack, escape, exploit—captures the logical progression from initial target selection through post-attack consequences, which is why it best describes the attack cycle. The other options describe different kinds of cycles: one resembles product or project development stages (assess, plan, build, deliver); another is a general decision loop (observe, react, resolve); and the last mirrors typical incident response steps (identify, notify, evacuate, restore).

The attack cycle is a sequence of actions an attacker typically follows to carry out an operation. It starts with identifying a target, then planning how to reach that target and what methods to use. After planning comes deployment, where the attacker mobilizes resources to carry out the plan. The attack itself is the execution of those steps against the target. If possible, the attacker will attempt to escape or remove themselves from the scene, and then exploit the outcome—taking advantage of disruption, access, or benefits gained from the attack. This flow—target, plan, deploy, attack, escape, exploit—captures the logical progression from initial target selection through post-attack consequences, which is why it best describes the attack cycle.

The other options describe different kinds of cycles: one resembles product or project development stages (assess, plan, build, deliver); another is a general decision loop (observe, react, resolve); and the last mirrors typical incident response steps (identify, notify, evacuate, restore).