SY0-701 · Question #392
A security administrator is hardening corporate systems and applying appropriate mitigations by consulting a real-world knowledge base for adversary behavior. Which of the following would be best…
The correct answer is A. MITRE ATT&CK. MITRE ATT&CK is a comprehensive and widely used framework that categorizes and describes the various tactics, techniques and procedures (TTPs) employed by adversaries, it is used for threat intelligence, defensive strategy etc.
Question
A security administrator is hardening corporate systems and applying appropriate mitigations by consulting a real-world knowledge base for adversary behavior. Which of the following would be best for the administrator to reference?
Options
- AMITRE ATT&CK
- BCSIRT
- CCVSS
- DSOAR
How the community answered
(53 responses)- A87% (46)
- B8% (4)
- C2% (1)
- D4% (2)
Explanation
MITRE ATT&CK is a comprehensive and widely used framework that categorizes and describes the various tactics, techniques and procedures (TTPs) employed by adversaries, it is used for threat intelligence, defensive strategy etc.
Community Discussion
No community discussion yet for this question.