Study. uk . com
  1. Home
  2. All questions
  3. Question 424

CompTIA Security+ study material · question 424 of 611

Why does MITRE catalogue Valid Accounts as a technique in its own right?

  1. Because stolen accounts always have administrative rights
  2. Because valid accounts cannot be logged
  3. Because using legitimate credentials looks like normal activity and evades malware-focused controls
  4. Because it applies only to cloud environments
Show the answer

Answer: C. Because using legitimate credentials looks like normal activity and evades malware-focused controls

Nothing malicious is deployed, so detection depends on behaviour rather than on recognising a payload.

Challenge yourself on this topic → Study as cards