Study. uk . com
  1. Home
  2. All questions
  3. Question 591

CompTIA Security+ study material · question 591 of 611

A team looks for a one-to-one mapping between ATT&CK mitigations and products to buy. Why does this not work?

  1. Mitigations are advisory and carry no identifiers
  2. Mitigations apply only to the Mobile matrix
  3. Mitigations are classes of control, so one covers many techniques and each technique needs several
  4. Mitigations are updated too frequently
Show the answer

Answer: C. Mitigations are classes of control, so one covers many techniques and each technique needs several

The relationship is many-to-many by design, which is what makes the mapping useful for coverage rather than procurement.

Challenge yourself on this topic → Study as cards