A data loss prevention (DLP) analyst is reviewing network logs and finds that a compromised workstation is sending large amounts of data to a file-sharing website using HTTPS. The data appears to be sensitive documents. Which MITRE ATT&CK technique is the attacker using to steal data?

Exfiltration Over Alternative Protocol

An attacker transfers stolen data out of the network by embedding it in DNS queries to a domain they control. Which MITRE ATT&CK tactic does this activity primarily represent?

Exfiltration Over Alternative Protocol

Which of the following is an example of a Persistence technique?

Exploiting a vulnerability to gain admin rights

Using a keylogger to capture keystrokes

Using RDP to move to another host

Which of the following is an example of a Command and Control technique?

Using non-standard ports for communication

Palo Alto NetworksCertified Cybersecurity Practitioner

Domain 1Objective 2

1.2 Categorize Techniques Used by Malicious Actors as Defined by the MITRE ATT&CK Framework CYBERSECURITY-PRACTITIONER Practice Questions (Page 5)

Part of the Cybersecurity domain, which accounts for 19% of the CYBERSECURITY-PRACTITIONER exam.

37questions here

8free pages

13concepts

19%of the exam

13 Concepts in This Objective

MITRE ATT&CK framework overview
Initial Access techniques
Execution techniques
Persistence techniques
Privilege Escalation techniques
Defense Evasion techniques
Credential Access techniques
Discovery techniques
Lateral Movement techniques
Collection techniques
Command and Control techniques
Exfiltration techniques
Impact techniques

Questions 21–25

21application · medium
A data loss prevention (DLP) analyst is reviewing network logs and finds that a compromised workstation is sending large amounts of data to a file-sharing website using HTTPS. The data appears to be sensitive documents. Which MITRE ATT&CK technique is the attacker using to steal data?
Select an answer first
22foundation · easy
An attacker sends a convincing email with a malicious attachment to an employee, and the employee opens it, executing the malware. Which MITRE ATT&CK tactic does this activity primarily represent?
Select an answer first
23foundation · easy
An attacker transfers stolen data out of the network by embedding it in DNS queries to a domain they control. Which MITRE ATT&CK tactic does this activity primarily represent?
Select an answer first
24foundation · easy
Which of the following is an example of a Persistence technique?
Select an answer first
25foundation · easy
Which of the following is an example of a Command and Control technique?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CYBERSECURITY-PRACTITIONER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CYBERSECURITY-PRACTITIONER” is a trademark of its owner, used for identification only.