1.2 Categorize Techniques Used by Malicious Actors as Defined by the MITRE ATT&CK Framework CYBERSECURITY-PRACTITIONER Practice Questions (Page 7)

Part of the Cybersecurity domain, which accounts for 19% of the CYBERSECURITY-PRACTITIONER exam.

37questions here

8free pages

13concepts

19%of the exam

13 Concepts in This Objective

MITRE ATT&CK framework overview
Initial Access techniques
Execution techniques
Persistence techniques
Privilege Escalation techniques
Defense Evasion techniques
Credential Access techniques
Discovery techniques
Lateral Movement techniques
Collection techniques
Command and Control techniques
Exfiltration techniques
Impact techniques

Questions 31–35

31foundation · easy
An attacker uses stolen credentials to authenticate to another system via Remote Desktop Protocol (RDP). Which MITRE ATT&CK tactic does this activity primarily represent?
Select an answer first
32foundation · easy
Which of the following is an example of a Defense Evasion technique?
Select an answer first
33foundation · easy
Which of the following is an example of a Credential Access technique?
Select an answer first
34foundation · easy
An attacker modifies a Windows registry run key to ensure that a malicious program starts every time the system boots. Which MITRE ATT&CK tactic does this activity primarily represent?
Select an answer first
35application · medium
A security analyst is investigating a compromised domain controller. The analyst finds that the attacker used a tool to extract password hashes from the Local Security Authority Subsystem Service (LSASS) process memory. Which MITRE ATT&CK technique is the attacker using?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CYBERSECURITY-PRACTITIONER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CYBERSECURITY-PRACTITIONER” is a trademark of its owner, used for identification only.

1.2 Categorize Techniques Used by Malicious Actors as Defined by the MITRE ATT&CK Framework CYBERSECURITY-PRACTITIONER Practice Questions (Page 7)

Questions 31–35

An attacker uses stolen credentials to authenticate to another system via Remote Desktop Protocol (RDP). Which MITRE ATT&CK tactic does this activity primarily represent?

Which of the following is an example of a Defense Evasion technique?

Which of the following is an example of a Credential Access technique?

An attacker modifies a Windows registry run key to ensure that a malicious program starts every time the system boots. Which MITRE ATT&CK tactic does this activity primarily represent?

A security analyst is investigating a compromised domain controller. The analyst finds that the attacker used a tool to extract password hashes from the Local Security Authority Subsystem Service (LSASS) process memory. Which MITRE ATT&CK technique is the attacker using?

Keep studying — Cybersecurity