Which statement describes a phase that is NOT part of the Hacking Cycle?

Which statement describes a phase that is NOT part of the Hacking Cycle?

• A. Post-exploitation and Cleanup
• B. Reconnaissance and Scanning
• C. Gaining Access and Maintaining Access
• D. None of the above

Answer: (A)

In this framework, the Hacking Cycle is defined by the stages attackers go through to breach a system and establish control: Reconnaissance and Scanning to gather information and identify weaknesses, followed by Gaining Access to breach, and Maintaining Access to keep that foothold. Post-exploitation and Cleanup refer to actions taken after you’ve already gained access—such as expanding your reach, extracting data, or erasing traces—which aren’t treated as a formal phase of the cycle in this context. That’s why the statement describing a phase not part of the Hacking Cycle is Post-exploitation and Cleanup. The other stages listed are indeed part of the cycle.

In this framework, the Hacking Cycle is defined by the stages attackers go through to breach a system and establish control: Reconnaissance and Scanning to gather information and identify weaknesses, followed by Gaining Access to breach, and Maintaining Access to keep that foothold. Post-exploitation and Cleanup refer to actions taken after you’ve already gained access—such as expanding your reach, extracting data, or erasing traces—which aren’t treated as a formal phase of the cycle in this context. That’s why the statement describing a phase not part of the Hacking Cycle is Post-exploitation and Cleanup. The other stages listed are indeed part of the cycle.