212-82: Certified Cybersecurity TechnicianDemo

By ECCouncil · Question Mode

QuestionQ91

Information Security Threats and Attacks

A large financial institution was targeted by a sophisticated cyberattack that resulted in substantial data leakage and financial loss. The attack was distinctive in its execution, involving multiple stages and techniques that evaded traditional security measures. During post-incident analysis, the institution’s cybersecurity team found that the attackers followed a complex methodology aligned with a well-known hacking framework. Identifying the framework used by the attackers is essential for the institution to revise its defense strategies. Which of the following hacking frameworks or methodologies most likely corresponds to the observed attack pattern?

  • A OWASP Top Ten, focusing on web application security risks
  • B MITRE ATT&CK, encompassing a wide range of tactics and techniques used in real-world attacks
  • C NIST Cybersecurity Framework, primarily used for managing cybersecurity risks
  • D ISO/IEC 27001, focusing on information security management systems
Explanation

MITRE ATT&CK is a knowledge base of adversary behavior derived from real-world observations. It organizes an attack lifecycle into tactics and the techniques used to achieve them, including initial access, execution, persistence, defense evasion, collection, exfiltration, and impact. This makes it appropriate for analyzing a complex, multi-stage attack and improving defensive coverage.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!