MITRE ATT&CK Framework CEH Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which ATT&CK matrix is specifically designed to cover adversarial behaviors against industrial control systems (ICS) such as PLCs, RTUs, and SCADA systems?

   • ACloud Matrix
   • BMobile Matrix
   • CICS Matrix
   • DEnterprise Matrix
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   After compromising a system, an attacker creates a scheduled task to re-establish access if the system is rebooted. Which ATT&CK tactic best describes this behavior?

   • ALateral Movement
   • BPersistence
   • CDefense Evasion
   • DDiscovery
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   An attacker sends a spear-phishing email with a malicious attachment to gain an initial foothold in a network. Which ATT&CK tactic does this behavior primarily map to?

   • APersistence
   • BExecution
   • CInitial Access
   • DExfiltration
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A security analyst is explaining the MITRE ATT&CK framework to a new team member. The analyst wants to emphasize the importance of understanding the relationship between tactics and techniques. Which statement best describes this relationship?

   • ATactics and techniques are interchangeable terms that describe the same concept.
   • BTactics are the 'why' of an attack, while techniques are the 'how'.
   • CTactics are the 'how' of an attack, while techniques are the 'why'.
   • DTactics are specific to individual techniques, while techniques are broad categories.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A security team is using the ATT&CK Navigator to manage their detection coverage. They have created a layer that shows their current coverage and a second layer that shows their planned coverage for the next quarter. They want to compare the two layers to identify which techniques will be newly covered. Which feature of the ATT&CK Navigator is most appropriate for this comparison?

   • AExport both layers as JSON files and manually compare them in a text editor.
   • BCreate a new layer that combines both layers and use the scoring feature to identify the differences.
   • CUse the layer comparison feature to overlay the two layers and highlight the differences.
   • DUse the Navigator's annotation feature to mark the techniques that are different between the two layers.
   Reveal Solution Discussion Select an answer first