The following list contains examples of Tactics, Techniques, and Procedures (TTPs): 1. Exploiting a remote service 2. Lateral movement 3. Use EternalBlue to exploit a remote SMB server In which…

Question

Options

• ATactic, Technique, Procedure
• BProcedure, Technique, Tactic
• CTechnique, Tactic, Procedure
• DTactic, Procedure, Technique

• A
  91% (20)
• B
  5% (1)
• C
  5% (1)

Explanation

Option A is correct because the three items escalate in specificity from abstract to concrete: "Exploiting a remote service" is a Tactic (a broad, high-level goal or category of adversarial behavior), "Lateral movement" is a Technique (a specific method used to achieve that goal), and "Use EternalBlue to exploit a remote SMB server" is a Procedure (a named, step-by-step implementation of that technique). Options B and D are wrong because they place "Procedure" before "Technique," reversing the specificity order - procedures are always the most granular level. Option C is wrong because it swaps Tactic and Technique, putting the mid-level concept first.

Memory tip: Think of TTPs like a military analogy - a Tactic is the general battle plan ("attack the flank"), a Technique is the method ("use flanking maneuver"), and a Procedure is the exact drill ("soldier A moves to grid X, fires three rounds"). Increasing specificity = Tactic → Technique → Procedure, or remember the mnemonic "Think Then Precisely" to keep them in order.

No community discussion yet for this question.