Which of the following provides a matrix of common tactics and techniques used by attackers along with recommended mitigations?

The correct answer is C. MITRE ATT&CK framework. The MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) framework is a globally accessible knowledge base that organizes real-world adversary behaviors into a matrix of tactics (the 'why') and techniques (the 'how'), along with detection strategies and…

Attacks and Exploits

Question

Options

ANIST SP 800-53
BOWASP Top 10
CMITRE ATT&CK framework
DPTES technical guidelines

How the community answered

(49 responses)

A
2% (1)
B
2% (1)
C
92% (45)
D
4% (2)

Explanation

The MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) framework is a globally accessible knowledge base that organizes real-world adversary behaviors into a matrix of tactics (the 'why') and techniques (the 'how'), along with detection strategies and recommended mitigations. NIST SP 800-53 (A) is a catalog of security and privacy controls for federal information systems. OWASP Top 10 (B) focuses specifically on the most critical web application security risks. PTES technical guidelines (D) define the penetration testing execution process. ATT&CK is the only option that provides a structured matrix specifically mapping attacker TTPs to defensive mitigations.

Topics

#MITRE ATT&CK#Cybersecurity frameworks#Attacker TTPs#Threat intelligence

Community Discussion

No community discussion yet for this question.

Full PT0-002 Practice