Exploitationis the phase where testersleverage identified vulnerabilitiestogain unauthorized accessto systems.
Exploitation (Correct Answer - B)
Attackers use techniques such as SQL injection, buffer overflow, or privilege escalation.
Example:A tester exploits a weak password to gain admin access.
Exfiltration (Incorrect - A)
The process of stealing dataaftergaining access.
Reconnaissance (Incorrect - C)
The initial stage where attackers gather information about the target.
Scanning (Incorrect - D)
Involves identifying open ports and services but does not involve actual attacks.
References:
ISACA CISA Review Manual
NIST 800-115 (Technical Guide to Security Testing)