Study. uk . com
  1. Home
  2. All questions
  3. Question 11

CompTIA Security+ study material · question 11 of 611

A threat report describes how a group gains access, moves laterally and exfiltrates data, without naming any specific tool. What is being described?

  1. Indicators of compromise
  2. A control baseline
  3. Tactics, techniques and procedures
  4. A vulnerability disclosure
Show the answer

Answer: C. Tactics, techniques and procedures

TTPs characterise how an adversary operates, which outlasts any particular tool or indicator.

Source: NIST SP 800-30 Rev. 1 (NIST) — SP 800-30 Rev. 1 § 2.3.1 Threats

Challenge yourself on this topic → Study as cards