CS0-003: CompTIA Cybersecurity Analyst (CySA+)

Question

A security analyst is responding to an alert involving identity and access management activity in the cloud environment. The attacker is currently attempting to gain access from one isolated cloud subscription to another by using a compromised user role. Which aspect of the MITRE ATT&CK framework is the attacker trying to perform?

Explanation

Lateral Movement describes an adversary moving through an environment to access and control additional systems, commonly by pivoting through systems or accounts. Using a compromised role to reach another isolated cloud subscription is a cross-environment pivot and therefore represents lateral movement.

Learn more

Lateral Movement, Tactic TA0008 – Enterprise | MITRE ATT&CK

CS0-003: CompTIA Cybersecurity Analyst (CySA+)

AstroTutor

Notes

Readiness

QuestionQ25

Community Discussion