1.2 Categorize Techniques Used by Malicious Actors as Defined by the MITRE ATT&CK Framework CYBERSECURITY-PRACTITIONER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is an example of a Discovery technique?

   • AFile and Directory Discovery
   • BClipboard Data
   • CPass-the-Hash
   • DData Encrypted for Impact
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   An attacker encodes a malicious payload to avoid signature-based detection. Which MITRE ATT&CK tactic does this activity primarily represent?

   • ADefense Evasion
   • BCredential Access
   • CExecution
   • DImpact
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A threat hunter discovers that a PowerShell script was executed on a compromised server. The script created a new local user account and added a registry run key to ensure the account persists across reboots. Which MITRE ATT&CK technique is the BEST match for the initial execution of the PowerShell script?

   • AScheduled Task/Job
   • BRegistry Run Keys / Startup Folder
   • CCommand and Scripting Interpreter
   • DCreate Account
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   An attacker exploits a local vulnerability to gain administrator privileges on a compromised host. Which MITRE ATT&CK tactic does this activity primarily represent?

   • AInitial Access
   • BExecution
   • CPersistence
   • DPrivilege Escalation
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is an example of an Impact technique?

   • ACredential Dumping
   • BData Destruction
   • CScheduled Task
   • DSystem Information Discovery
   Reveal Solution Discussion Select an answer first