A penetration tester wants to use multiple TTPs to assess the reactions (alerted, blocked, and others) by the client's current security tools. The threat-modeling team indicates the TTPs in the list…

Question

Options

• AUse a BAS tool to test multiple TTPs based on the input from the threat-modeling team.
• BPerform an internal vulnerability assessment with credentials to review the internal attack surface.
• CUse a generic vulnerability scanner to test the TTPs and review the results with the threat-
• DPerform a full internal penetration test to review all the possible exploits that could affect the

• A
  74% (29)
• B
  3% (1)
• C
  8% (3)
• D
  15% (6)

Explanation

BAS (Breach and Attack Simulation) tools are specifically designed to emulate multiple TTPs (Tactics, Techniques, and Procedures) used by adversaries. These tools can simulate various attack vectors in a controlled manner to test the effectiveness of an organization's security defenses and response mechanisms. Controlled Testing Environment: BAS tools provide a controlled environment where multiple TTPs can be tested without causing unintended damage to the internal systems and servers. This is critical when the threat-modeling team indicates potential impacts on internal systems. Comprehensive Coverage: BAS tools are designed to cover a wide range of TTPs, allowing the penetration tester to simulate various attack scenarios. This helps in assessing the reactions (alerted, blocked, and others) by the client's security tools comprehensively. Feedback and Reporting: These tools provide detailed feedback and reporting on the effectiveness of the security measures in place, including which TTPs were detected, blocked, or went unnoticed. This information is invaluable for the threat-modeling team to understand the current security posture and areas for improvement.

No community discussion yet for this question.