Your question is Kill Chain Detection and Response. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
Tell me about how you would think like an attacker and walk through the cyber kill chain for a vulnerable system, and then how you would detect those actions at each step.