Study. uk . com
  1. Home
  2. All questions
  3. Question 492

CompTIA Security+ study material · question 492 of 611

During an incident, defenders find their own administrative accounts have been disabled. Which ATT&CK tactic does this serve?

  1. Discovery
  2. Persistence
  3. Defense Evasion
  4. Impact
Show the answer

Answer: D. Impact

Account access removal slows the response as effectively as encrypting data, which is why it sits under Impact.

Challenge yourself on this topic → Study as cards