1.2 Categorize Techniques Used by Malicious Actors as Defined by the MITRE ATT&CK Framework CYBERSECURITY-PRACTITIONER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   An attacker takes screenshots of the victim's desktop to capture sensitive information displayed on the screen. Which MITRE ATT&CK tactic does this activity primarily represent?

   • ACredential Access
   • BExfiltration
   • CDiscovery
   • DCollection
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following is an example of a Lateral Movement technique?

   • AObfuscation
   • BPass-the-Hash
   • CEmail Collection
   • DKeylogging
   Reveal Solution Discussion Select an answer first
4. 8expert · medium

   A security analyst is investigating a brute force attack on a web application. The attacker used a list of common passwords against a single user account. The analyst notices that the attacker also attempted to use the same password against multiple user accounts. Which MITRE ATT&CK technique is the attacker using?

   • ABrute Force
   • BPassword Spraying
   • CValid Accounts
   • DCredential Stuffing
   Reveal Solution Discussion Select an answer first
5. 9expert · medium

   A network analyst is reviewing firewall logs and finds that a compromised server is communicating with an IP address on port 4444. The traffic is encrypted and appears to be a reverse shell. Which MITRE ATT&CK technique is the attacker using for command and control?

   • AStandard Application Layer Protocol
   • BData Encoding
   • CNon-Standard Port
   • DWeb Service
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   An attacker uses HTTP requests to a compromised web server to send commands to malware on an internal host. Which MITRE ATT&CK tactic does this activity primarily represent?

   • AExecution
   • BExfiltration
   • CCollection
   • DCommand and Control
   Reveal Solution Discussion Select an answer first