- Home
- All questions
- Question 492
CompTIA Security+ study material · question 492 of 611
During an incident, defenders find their own administrative accounts have been disabled. Which ATT&CK tactic does this serve?
Show the answer
Answer: D. Impact
Account access removal slows the response as effectively as encrypting data, which is why it sits under Impact.