Which attribution evidence will have the lowest confidence level when evaluating assets to determine if they belong to an organization's attack surface?

The correct answer is A. An asset attributed to the organization because the Subject Organization field contains the. Matching the company name in a certificate's Subject Organization field is a heuristic text match and provides the weakest attribution confidence compared with registrar records, name server ownership, or manual analyst validation.

Attack Surface Management

Question

Options

AAn asset attributed to the organization because the Subject Organization field contains the
BAn asset attributed to the organization because the name server domain contains the company
CAn asset discovered through registration information attributed to the organization
DAn asset manually approved by a Cortex Xpanse analyst

How the community answered

(16 responses)

A
44% (7)
B
19% (3)
C
31% (5)
D
6% (1)

Explanation

Matching the company name in a certificate's Subject Organization field is a heuristic text match and provides the weakest attribution confidence compared with registrar records, name server ownership, or manual analyst validation.

Topics

#attack surface management#asset attribution#Cortex Xpanse#confidence levels

Community Discussion

No community discussion yet for this question.

Full XSIAM-ANALYST Practice