nerdexam
CompTIA

CS0-003 · Question #47

Which of the following would a security analyst most likely use to compare TTPs between different known adversaries of an organization?

The correct answer is A. MITRE ATT&CK. MITRE ATT&CK is a framework and knowledge base that describes the tactics, techniques, and procedures (TTPs) used by various adversaries in cyberattacks. MITRE ATT&CK can help security analysts compare TTPs between different known adversaries of an organization, as well as…

Submitted by ahmad_uae· Mar 6, 2026Security operations

Question

Which of the following would a security analyst most likely use to compare TTPs between different known adversaries of an organization?

Options

  • AMITRE ATT&CK
  • BCyber Kill Cham
  • COWASP
  • DSTIX/TAXII

How the community answered

(29 responses)
  • A
    86% (25)
  • B
    7% (2)
  • C
    3% (1)
  • D
    3% (1)

Explanation

MITRE ATT&CK is a framework and knowledge base that describes the tactics, techniques, and procedures (TTPs) used by various adversaries in cyberattacks. MITRE ATT&CK can help security analysts compare TTPs between different known adversaries of an organization, as well as identify patterns, gaps, or trends in adversary behavior. MITRE ATT&CK can also help security analysts improve threat detection, analysis, and response capabilities, as well as share threat intelligence with other organizations or communities.

Topics

#MITRE ATT&CK#TTPs#threat intelligence#adversary emulation

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice