Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA CySA+ Cybersecurity Analyst · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The best answer is D. MITRE ATT&CK. A Chief Information Security Officer (CISO) wanting to map all the attack vectors the company faces each day needs a comprehensive, real-world-derived knowledge base of adversary tactics, techniques, and procedures (TTPs) — essentially the full spectrum of known attack vectors across the intrusion lifecycle.
D. MITRE ATT&CK. The MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) framework is a comprehensive knowledge base that provides detailed information about various attack techniques and tactics employed by adversaries. It categorizes and describes different attack vectors, tactics, and techniques used in real-world cyberattacks. Organizations can use the MITRE ATT&CK framework to understand the threats they face, map security controls to specific attack techniques, and develop effective defensive strategies. While options A (OSSTMM), B (Diamond Model of Intrusion Analysis), and C (OWASP) are valuable resources for specific aspects of cybersecurity and threat analysis, they do not provide the same level of detailed attack vector mapping and coverage as the MITRE ATT&CK framework, which is specifically designed for this purpose.
This seems to be the correct answer