1.2 Categorize Techniques Used by Malicious Actors as Defined by the MITRE ATT&CK Framework CYBERSECURITY-PRACTITIONER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following is an example of a Collection technique?

   • AData Transfer Size Limits
   • BClipboard Data
   • CService Creation
   • DSystem Information Discovery
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   An attacker encrypts all files on a victim's system and demands a ransom for the decryption key. Which MITRE ATT&CK tactic does this activity primarily represent?

   • ADefense Evasion
   • BCollection
   • CImpact
   • DExfiltration
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is an example of an Initial Access technique?

   • ADumping credentials from memory
   • BCreating a new user account for persistence
   • CExploiting a vulnerability in a public-facing web application
   • DScanning the network for open ports
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following is an example of an Execution technique?

   • ARegistry Run Key
   • BKeylogging
   • CScheduled Task
   • DPass-the-Hash
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary purpose of the MITRE ATT&CK framework?

   • ATo define a set of mandatory security controls that all organizations must implement.
   • BTo provide a standardized taxonomy of adversary behaviors observed in the real world.
   • CTo provide a scoring system for the severity of individual malware samples.
   • DTo replace traditional vulnerability scanning and penetration testing methodologies.
   Reveal Solution Discussion Select an answer first