In the MITRE ATT&CK Framework (version 11 - the newest version released in April 2022), which of the following pair of tactics is not in the Enterprise: Windows matrix?

The correct answer is D. Reconnaissance and Resource Development. Reconnaissance and Resource Development are two tactics that are not in the Enterprise: Windows matrix of the MITRE ATT&CK Framework (version 11). These two tactics are part of the PRE-ATT&CK matrix, which covers the actions that adversaries take before compromising a target…

Threat Intelligence Frameworks

Question

Options

APersistence and Execution
BImpact and Collection
CPrivilege Escalation and Initial Access
DReconnaissance and Resource Development

How the community answered

(30 responses)

A
3% (1)
B
10% (3)
C
17% (5)
D
70% (21)

Explanation

Reconnaissance and Resource Development are two tactics that are not in the Enterprise: Windows matrix of the MITRE ATT&CK Framework (version 11). These two tactics are part of the PRE-ATT&CK matrix, which covers the actions that adversaries take before compromising a target. The Enterprise: Windows matrix covers the actions that adversaries take after gaining initial access to a Windows system. Persistence, Execution, Impact, Collection, Privilege Escalation, and Initial Access are all tactics that are in the Enterprise: Windows matrix.

Topics

#MITRE ATT&CK#Enterprise Windows matrix#tactics#ATT&CK v11

Community Discussion

No community discussion yet for this question.

Full CCFH-202B Practice