What is the purpose of command and control for network-aware malware?

Drag and drop the definition from the left onto the phase on the right to classify intrusion events according to the Cyber Kill Chain model.

Refer to the exhibit. An employee received an email from an unknown sender with an attachment and reported it as a phishing attempt. An engineer uploaded the file to Cuckoo for further analysis. What should an engineer interpret from the provided Cuckoo report?

What does an attacker use to determine which network ports are listening on a potential target device?

Refer to the exhibit. In which Linux log file is this output found?