A security engineer on an application design team must choose a framework of attack patterns to evaluate during threat modeling. Which framework provides the common set of attacks?

The correct answer is C. MITRE CAPEC. MITRE CAPEC (Common Attack Pattern Enumeration and Classification) provides a standardized catalog of attack patterns. It is specifically designed for use in threat modeling and application design, allowing security engineers to anticipate and evaluate common attacks.

Security Concepts and Design Principles

Question

Options

ACisco SAFE
BGDPR
CMITRE CAPEC
DSOC2

How the community answered

(50 responses)

A
6% (3)
B
10% (5)
C
82% (41)
D
2% (1)

Explanation

MITRE CAPEC (Common Attack Pattern Enumeration and Classification) provides a standardized catalog of attack patterns. It is specifically designed for use in threat modeling and application design, allowing security engineers to anticipate and evaluate common attacks.

Topics

#threat modeling#MITRE CAPEC#attack patterns#security frameworks

Community Discussion

No community discussion yet for this question.

Full 300-745 Practice