nerdexam
Fortinet

NSE7_SOC_AR-7.6 · Question #27

Which statement best describes the MITRE ATT&CK framework?

The correct answer is D. It contains some techniques or subtechniques that fall under more than one tactic. Although each technique has a primary tactic, ATT&CK cross‑lists certain techniques and sub‑techniques under multiple tactics when they serve more than one adversarial goal - for example, some execution techniques also appear under Defense Evasion.

SOC Best Practices and Incident Response

Question

Which statement best describes the MITRE ATT&CK framework?

Options

  • AIt provides a high-level description of common adversary activities, but lacks technical details
  • BIt covers tactics, techniques, and procedures, but does not provide information about
  • CIt describes attack vectors targeting network devices and servers, but not user endpoints.
  • DIt contains some techniques or subtechniques that fall under more than one tactic.

How the community answered

(27 responses)
  • B
    4% (1)
  • C
    7% (2)
  • D
    89% (24)

Explanation

Although each technique has a primary tactic, ATT&CK cross‑lists certain techniques and sub‑techniques under multiple tactics when they serve more than one adversarial goal - for example, some execution techniques also appear under Defense Evasion.

Topics

#MITRE ATT&CK#tactics#techniques#threat intelligence

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full NSE7_SOC_AR-7.6 Practice