The use of MITRE CAPEC helps in:

The correct answer is B. Modeling common attack patterns for software. MITRE CAPEC (Common Attack Pattern Enumeration and Classification) is a publicly available catalog that identifies and documents recurring attack patterns used by adversaries against software systems, making B correct - it gives security engineers a structured vocabulary for…

Threat Modeling Techniques

Question

Options

ADesigning user interfaces
BModeling common attack patterns for software
CManaging HR processes
DOptimizing network traffic

How the community answered

(54 responses)

A
7% (4)
B
87% (47)
C
4% (2)
D
2% (1)

Explanation

MITRE CAPEC (Common Attack Pattern Enumeration and Classification) is a publicly available catalog that identifies and documents recurring attack patterns used by adversaries against software systems, making B correct - it gives security engineers a structured vocabulary for understanding how attacks are commonly executed so they can design better defenses.

A is wrong because UI design is a software engineering concern handled by frameworks and design systems, not attack pattern databases. C is wrong because HR processes are an organizational/operational domain entirely unrelated to cybersecurity taxonomies. D is wrong because network traffic optimization involves protocols, QoS, and routing - not attack pattern modeling.

Memory tip: Break down the acronym - "Attack Pattern Enumeration and Classification" tells you exactly what it does. If the question mentions CAPEC, think "catalog of how attackers operate," not infrastructure, UI, or HR.

Topics

#MITRE CAPEC#Attack Patterns#Threat Modeling#Software Security

Community Discussion

No community discussion yet for this question.

Full 300-220 Practice