When using the MITRE ATT&CK framework to model threats, changes in ________ are critical for understanding evolving attack strategies.

The correct answer is A. tactics, techniques, and procedures. Tactics, techniques, and procedures (TTPs) are the core vocabulary of the MITRE ATT&CK framework - tactics describe the adversary's high-level goals (e.g., persistence, exfiltration), techniques describe how they achieve those goals, and procedures are the specific real-world…

Threat Modeling Techniques

Question

Options

Atactics, techniques, and procedures
Bencryption algorithms
Csoftware development methodologies
Dorganizational policies

How the community answered

(17 responses)

A
94% (16)
C
6% (1)

Explanation

Tactics, techniques, and procedures (TTPs) are the core vocabulary of the MITRE ATT&CK framework - tactics describe the adversary's high-level goals (e.g., persistence, exfiltration), techniques describe how they achieve those goals, and procedures are the specific real-world implementations observed in the wild. Tracking changes in TTPs directly reveals how threat actors are adapting their playbooks, making it essential for defenders to stay current. Encryption algorithms (B) are a technical implementation detail, not a behavioral modeling concept in ATT&CK. Software development methodologies (C) relate to how software is built, not how attacks are carried out. Organizational policies (D) are internal governance documents, irrelevant to modeling adversary behavior.

Memory tip: Think "ATT&CK = TTPs" - the framework's name even mirrors the concept: Adversarial Tactics, Techniques & Common Knowledge. If a question mentions ATT&CK and threat evolution, TTPs is almost always the answer.

Topics

#MITRE ATT&CK#TTPs#Threat Modeling#Attack Strategies

Community Discussion

No community discussion yet for this question.

Full 300-220 Practice