Study. uk . com
  1. Home
  2. All questions
  3. Question 427

CompTIA Security+ study material · question 427 of 611

A team publishes an ATT&CK coverage map with no version recorded. Why is this a problem?

  1. Tactic and sub-technique lists change between releases, so the map cannot be interpreted later
  2. Technique identifiers are reassigned each release
  3. Coverage maps must be approved by MITRE
  4. Data sources are removed each release
Show the answer

Answer: A. Tactic and sub-technique lists change between releases, so the map cannot be interpreted later

Technique identifiers persist, but the surrounding structure moves, so the version is part of the evidence.

Challenge yourself on this topic → Study as cards