A security operations center (SOC) analyst is reviewing an alert about a user who clicked a link in a phishing email. The link downloaded a file that, when opened, executed a macro that downloaded and ran a payload. The payload then created a scheduled task to maintain persistence. Which MITRE ATT&CK technique is the BEST match for the initial access vector?

Exploit Public-Facing Application

Palo Alto NetworksCertified Cybersecurity Practitioner

Domain 1Objective 2

1.2 Categorize Techniques Used by Malicious Actors as Defined by the MITRE ATT&CK Framework CYBERSECURITY-PRACTITIONER Practice Questions (Page 8)

Part of the Cybersecurity domain, which accounts for 19% of the CYBERSECURITY-PRACTITIONER exam.

37questions here

8free pages

13concepts

19%of the exam

13 Concepts in This Objective

MITRE ATT&CK framework overview
Initial Access techniques
Execution techniques
Persistence techniques
Privilege Escalation techniques
Defense Evasion techniques
Credential Access techniques
Discovery techniques
Lateral Movement techniques
Collection techniques
Command and Control techniques
Exfiltration techniques
Impact techniques

Questions 36–37

36expert · medium
A security operations center (SOC) analyst is reviewing an alert about a user who clicked a link in a phishing email. The link downloaded a file that, when opened, executed a macro that downloaded and ran a payload. The payload then created a scheduled task to maintain persistence. Which MITRE ATT&CK technique is the BEST match for the initial access vector?
Select an answer first
37foundation · easy
An attacker scans the network to identify open ports and running services. Which MITRE ATT&CK tactic does this activity primarily represent?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CYBERSECURITY-PRACTITIONER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Palo Alto Networks. “CYBERSECURITY-PRACTITIONER” is a trademark of its owner, used for identification only.

1.2 Categorize Techniques Used by Malicious Actors as Defined by the MITRE ATT&CK Framework CYBERSECURITY-PRACTITIONER Practice Questions (Page 8)

Questions 36–37

An attacker scans the network to identify open ports and running services. Which MITRE ATT&CK tactic does this activity primarily represent?

Keep studying — Cybersecurity