What does the MITRE ATT&CK framework catalog?

The correct answer is A. Techniques utilized in cyber attacks. MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) is a globally accessible knowledge base that catalogs the specific techniques and tactics that adversaries use during real-world cyber attacks - making A correct. Option B is wrong because vulnerability…

Threat Response

Question

Options

ATechniques utilized in cyber attacks
BPatterns of system vulnerabilities
CModels of threat intelligence sharing
DStandards for information security management

How the community answered

(33 responses)

A
91% (30)
B
6% (2)
D
3% (1)

Explanation

MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) is a globally accessible knowledge base that catalogs the specific techniques and tactics that adversaries use during real-world cyber attacks - making A correct. Option B is wrong because vulnerability patterns are the domain of databases like CVE/NVD, not ATT&CK. Option C is wrong because threat intelligence sharing models are addressed by frameworks like STIX/TAXII. Option D is wrong because information security management standards belong to ISO/IEC 27001 or NIST SP 800-53.

Memory tip: Break down the acronym - the "TT" in ATT&CK stands for Tactics and Techniques, which is exactly what it catalogs. If you remember "ATT&CK = attack techniques," the correct answer is always A.

Topics

#MITRE ATT&CK#Attack Techniques#Threat Intelligence#Security Frameworks

Community Discussion

No community discussion yet for this question.

Full 300-740 Practice