Study. uk . com
  1. Home
  2. All questions
  3. Question 426

CompTIA Security+ study material · question 426 of 611

What do ATT&CK data sources tell a detection team?

  1. Which mitigations are mandatory
  2. What telemetry a detection needs, so the team can tell whether it could detect a technique at all
  3. How severe each technique is
  4. Which vendors sell the required tooling
Show the answer

Answer: B. What telemetry a detection needs, so the team can tell whether it could detect a technique at all

A technique cannot be detected without the underlying data, so the mapping shows where visibility gaps lie.

Challenge yourself on this topic → Study as cards