nerdexam
CompTIA

CS0-003 · Question #659

A security operations (SOC) manager develops response mechanisms as part of playbook development efforts. The SOC manager needs to accomplish the following: - Document adversarial activities. - Map…

The correct answer is D. Cyber Kill Chain. The Cyber Kill Chain documents adversarial activities as a linear sequence of phases, providing a high-level view of threat progression without focusing on detailed tactics, techniques, or

Submitted by certguy· Mar 6, 2026Incident Response Management

Question

A security operations (SOC) manager develops response mechanisms as part of playbook development efforts. The SOC manager needs to accomplish the following:

  • Document adversarial activities.
  • Map adversarial activities to a linear progression of sequential

phases.

  • Provide broad coverage of threat actions without addressing specific

tactics, techniques, and procedures (TTPs). Which of the following is the most reliable source for this information?

Options

  • AMITRE ATT&CK
  • BCyber COBRA
  • CDiamond Model of Intrusion Analysis
  • DCyber Kill Chain

How the community answered

(56 responses)
  • A
    5% (3)
  • B
    2% (1)
  • C
    7% (4)
  • D
    86% (48)

Explanation

The Cyber Kill Chain documents adversarial activities as a linear sequence of phases, providing a high-level view of threat progression without focusing on detailed tactics, techniques, or

Topics

#Cyber Kill Chain#Threat intelligence frameworks#Adversarial tactics#Playbook development

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CS0-003 Practice