A penetration tester is explaining the MITRE ATT&CK framework to a company’s chief legal counsel.

CompTIA PT0-002 Question Answer

Which of the following would the tester MOST likely describe as a benefit of the framework?

Understanding the tactics of a security intrusion can help disrupt them.

Scripts that are part of the framework can be imported directly into SIEM tools.

The methodology can be used to estimate the cost of an incident better.

The framework is static and ensures stability of a security program overtime.

PT0-002 PDF/Engine

Get 65% Discount on All Products, Use Coupon: "ac4s65"