What does the Pyramid of Pain illustrate?

Question

Options

• AThe hierarchy of cybersecurity needs
• BThe difficulty of remediating different types of indicators of compromise
• CThe organizational structure of a SOC
• DThe cost of cybersecurity tools

• B
  90% (18)
• C
  5% (1)
• D
  5% (1)

Explanation

Option B is correct because the Pyramid of Pain, created by David Bianco, visually represents how much pain (difficulty) it causes an attacker when defenders successfully detect and respond to different types of indicators of compromise (IOCs) - ranging from easy-to-change items like hash values at the base, up to hard-to-change tactics, techniques, and procedures (TTPs) at the apex.

Why the distractors are wrong:

• A is wrong - Maslow's hierarchy or frameworks like NIST cover "cybersecurity needs"; the Pyramid of Pain is specifically about IOC response difficulty, not organizational needs.
• C is wrong - SOC structure is described by role-based models (e.g., tiered analyst levels), not this pyramid.
• D is wrong - Tool cost is a procurement/budgeting concern with no relationship to this model.

Memory tip: Think of it literally - the higher up the pyramid you force the attacker (disrupting their TTPs vs. just blocking a hash), the more pain you cause them. If you're blocking hashes, you're causing the attacker zero pain; if you're countering their TTPs, you're making their life very hard.

No community discussion yet for this question.