CyberRevision
Continue revision → ← Subjects
CEH v13 · 20 official modules

All 5,000 CEH questions.

Search original practice content, filter by EC-Council module or exam domain, and open any question in revision mode.

0 answered overall

Showing 51–100 of 5,000 matching questions

50 per page
0051
Module 1 · Foundation Domain 1 · Background Cyber Kill Chain Unanswered

During an authorized retail-company assessment (RET-LAB-M01-051), which risk is most directly associated with "Cyber Kill Chain"?

View answer choices
  1. Unmapped detections can leave important adversary techniques without coverage.
  2. Unknown or unnecessary exposure increases the number of possible entry points.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. A control focused on only one objective can leave the other security objectives exposed.
Practice →
0052
Module 1 · Foundation Domain 1 · Background Cyber Kill Chain Unanswered

During a hospital incident-response exercise (HLT-SOC-M01-052), which risk is most directly associated with "Cyber Kill Chain"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Unknown or unnecessary exposure increases the number of possible entry points.
  3. Unmapped detections can leave important adversary techniques without coverage.
  4. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
Practice →
0053
Module 1 · Foundation Domain 1 · Background Cyber Kill Chain Unanswered

During a university cyber-range engagement (EDU-RANGE-M01-053), which risk is most directly associated with "Cyber Kill Chain"?

View answer choices
  1. Unmapped detections can leave important adversary techniques without coverage.
  2. A control focused on only one objective can leave the other security objectives exposed.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. Unknown or unnecessary exposure increases the number of possible entry points.
Practice →
0054
Module 1 · Applied Domain 1 · Background Cyber Kill Chain Unanswered

During a financial-services purple-team test (FIN-PT-M01-054), which risk is most directly associated with "Cyber Kill Chain"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  3. Unknown or unnecessary exposure increases the number of possible entry points.
  4. Unmapped detections can leave important adversary techniques without coverage.
Practice →
0055
Module 1 · Applied Domain 1 · Background Cyber Kill Chain Unanswered

During a cloud startup security audit (CLD-AUDIT-M01-055), which risk is most directly associated with "Cyber Kill Chain"?

View answer choices
  1. Unmapped detections can leave important adversary techniques without coverage.
  2. Unknown or unnecessary exposure increases the number of possible entry points.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. A control focused on only one objective can leave the other security objectives exposed.
Practice →
0056
Module 1 · Applied Domain 1 · Background Cyber Kill Chain Unanswered

During a government risk-validation project (GOV-RISK-M01-056), which risk is most directly associated with "Cyber Kill Chain"?

View answer choices
  1. Unmapped detections can leave important adversary techniques without coverage.
  2. Unknown or unnecessary exposure increases the number of possible entry points.
  3. A control focused on only one objective can leave the other security objectives exposed.
  4. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
Practice →
0057
Module 1 · Applied Domain 1 · Background Cyber Kill Chain Unanswered

During an e-commerce application review (ECOM-WEB-M01-057), which risk is most directly associated with "Cyber Kill Chain"?

View answer choices
  1. Unmapped detections can leave important adversary techniques without coverage.
  2. A control focused on only one objective can leave the other security objectives exposed.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. Unknown or unnecessary exposure increases the number of possible entry points.
Practice →
0058
Module 1 · Advanced Domain 1 · Background Cyber Kill Chain Unanswered

During a manufacturing and OT security review (MFG-OT-M01-058), which risk is most directly associated with "Cyber Kill Chain"?

View answer choices
  1. Unknown or unnecessary exposure increases the number of possible entry points.
  2. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  3. A control focused on only one objective can leave the other security objectives exposed.
  4. Unmapped detections can leave important adversary techniques without coverage.
Practice →
0059
Module 1 · Advanced Domain 1 · Background Cyber Kill Chain Unanswered

During a mobile-services penetration test (MOB-TEST-M01-059), which risk is most directly associated with "Cyber Kill Chain"?

View answer choices
  1. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. Unknown or unnecessary exposure increases the number of possible entry points.
  4. A control focused on only one objective can leave the other security objectives exposed.
Practice →
0060
Module 1 · Advanced Domain 1 · Background Cyber Kill Chain Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M01-060), which risk is most directly associated with "Cyber Kill Chain"?

View answer choices
  1. Unmapped detections can leave important adversary techniques without coverage.
  2. Unknown or unnecessary exposure increases the number of possible entry points.
  3. A control focused on only one objective can leave the other security objectives exposed.
  4. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
Practice →
0061
Module 1 · Foundation Domain 1 · Background Cyber Kill Chain Unanswered

During an authorized retail-company assessment (RET-LAB-M01-061), which action most directly controls the risk related to "Cyber Kill Chain"?

View answer choices
  1. Place preventive and detective controls across multiple stages of the chain.
  2. Map each asset and threat to confidentiality, integrity, and availability requirements.
  3. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  4. Continuously inventory assets and remove or restrict unnecessary exposure.
Practice →
0062
Module 1 · Foundation Domain 1 · Background Cyber Kill Chain Unanswered

During a hospital incident-response exercise (HLT-SOC-M01-062), which action most directly controls the risk related to "Cyber Kill Chain"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Continuously inventory assets and remove or restrict unnecessary exposure.
  3. Place preventive and detective controls across multiple stages of the chain.
  4. Map controls and detections to relevant ATT&CK techniques and validate coverage.
Practice →
0063
Module 1 · Foundation Domain 1 · Background Cyber Kill Chain Unanswered

During a university cyber-range engagement (EDU-RANGE-M01-063), which action most directly controls the risk related to "Cyber Kill Chain"?

View answer choices
  1. Place preventive and detective controls across multiple stages of the chain.
  2. Continuously inventory assets and remove or restrict unnecessary exposure.
  3. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  4. Map each asset and threat to confidentiality, integrity, and availability requirements.
Practice →
0064
Module 1 · Applied Domain 1 · Background Cyber Kill Chain Unanswered

During a financial-services purple-team test (FIN-PT-M01-064), which action most directly controls the risk related to "Cyber Kill Chain"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Continuously inventory assets and remove or restrict unnecessary exposure.
  3. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  4. Place preventive and detective controls across multiple stages of the chain.
Practice →
0065
Module 1 · Applied Domain 1 · Background Cyber Kill Chain Unanswered

During a cloud startup security audit (CLD-AUDIT-M01-065), which action most directly controls the risk related to "Cyber Kill Chain"?

View answer choices
  1. Place preventive and detective controls across multiple stages of the chain.
  2. Map each asset and threat to confidentiality, integrity, and availability requirements.
  3. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  4. Continuously inventory assets and remove or restrict unnecessary exposure.
Practice →
0066
Module 1 · Applied Domain 1 · Background Cyber Kill Chain Unanswered

During a government risk-validation project (GOV-RISK-M01-066), which action most directly controls the risk related to "Cyber Kill Chain"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Place preventive and detective controls across multiple stages of the chain.
  3. Continuously inventory assets and remove or restrict unnecessary exposure.
  4. Map controls and detections to relevant ATT&CK techniques and validate coverage.
Practice →
0067
Module 1 · Applied Domain 1 · Background Cyber Kill Chain Unanswered

During an e-commerce application review (ECOM-WEB-M01-067), which action most directly controls the risk related to "Cyber Kill Chain"?

View answer choices
  1. Place preventive and detective controls across multiple stages of the chain.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Continuously inventory assets and remove or restrict unnecessary exposure.
  4. Map each asset and threat to confidentiality, integrity, and availability requirements.
Practice →
0068
Module 1 · Advanced Domain 1 · Background Cyber Kill Chain Unanswered

During a manufacturing and OT security review (MFG-OT-M01-068), which action most directly controls the risk related to "Cyber Kill Chain"?

View answer choices
  1. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  2. Continuously inventory assets and remove or restrict unnecessary exposure.
  3. Map each asset and threat to confidentiality, integrity, and availability requirements.
  4. Place preventive and detective controls across multiple stages of the chain.
Practice →
0069
Module 1 · Advanced Domain 1 · Background Cyber Kill Chain Unanswered

During a mobile-services penetration test (MOB-TEST-M01-069), which action most directly controls the risk related to "Cyber Kill Chain"?

View answer choices
  1. Place preventive and detective controls across multiple stages of the chain.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Map each asset and threat to confidentiality, integrity, and availability requirements.
  4. Continuously inventory assets and remove or restrict unnecessary exposure.
Practice →
0070
Module 1 · Advanced Domain 1 · Background Cyber Kill Chain Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M01-070), which action most directly controls the risk related to "Cyber Kill Chain"?

View answer choices
  1. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  2. Continuously inventory assets and remove or restrict unnecessary exposure.
  3. Place preventive and detective controls across multiple stages of the chain.
  4. Map each asset and threat to confidentiality, integrity, and availability requirements.
Practice →
0071
Module 1 · Foundation Domain 1 · Background Cyber Kill Chain Unanswered

During an authorized retail-company assessment (RET-LAB-M01-071), which evidence best supports an assessment of "Cyber Kill Chain"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. An external and internal asset inventory correlated with exposed services.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A detection matrix showing covered and uncovered ATT&CK techniques.
Practice →
0072
Module 1 · Foundation Domain 1 · Background Cyber Kill Chain Unanswered

During a hospital incident-response exercise (HLT-SOC-M01-072), which evidence best supports an assessment of "Cyber Kill Chain"?

View answer choices
  1. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. A risk register linking assets to CIA impact ratings.
  4. An external and internal asset inventory correlated with exposed services.
Practice →
0073
Module 1 · Foundation Domain 1 · Background Cyber Kill Chain Unanswered

During a university cyber-range engagement (EDU-RANGE-M01-073), which evidence best supports an assessment of "Cyber Kill Chain"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. An external and internal asset inventory correlated with exposed services.
  4. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
Practice →
0074
Module 1 · Applied Domain 1 · Background Cyber Kill Chain Unanswered

During a financial-services purple-team test (FIN-PT-M01-074), which evidence best supports an assessment of "Cyber Kill Chain"?

View answer choices
  1. A detection matrix showing covered and uncovered ATT&CK techniques.
  2. An external and internal asset inventory correlated with exposed services.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A risk register linking assets to CIA impact ratings.
Practice →
0075
Module 1 · Applied Domain 1 · Background Cyber Kill Chain Unanswered

During a cloud startup security audit (CLD-AUDIT-M01-075), which evidence best supports an assessment of "Cyber Kill Chain"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  3. An external and internal asset inventory correlated with exposed services.
  4. A detection matrix showing covered and uncovered ATT&CK techniques.
Practice →
0076
Module 1 · Applied Domain 1 · Background Cyber Kill Chain Unanswered

During a government risk-validation project (GOV-RISK-M01-076), which evidence best supports an assessment of "Cyber Kill Chain"?

View answer choices
  1. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  2. A risk register linking assets to CIA impact ratings.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. An external and internal asset inventory correlated with exposed services.
Practice →
0077
Module 1 · Applied Domain 1 · Background Cyber Kill Chain Unanswered

During an e-commerce application review (ECOM-WEB-M01-077), which evidence best supports an assessment of "Cyber Kill Chain"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. An external and internal asset inventory correlated with exposed services.
  4. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
Practice →
0078
Module 1 · Advanced Domain 1 · Background Cyber Kill Chain Unanswered

During a manufacturing and OT security review (MFG-OT-M01-078), which evidence best supports an assessment of "Cyber Kill Chain"?

View answer choices
  1. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  2. An external and internal asset inventory correlated with exposed services.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. A risk register linking assets to CIA impact ratings.
Practice →
0079
Module 1 · Advanced Domain 1 · Background Cyber Kill Chain Unanswered

During a mobile-services penetration test (MOB-TEST-M01-079), which evidence best supports an assessment of "Cyber Kill Chain"?

View answer choices
  1. An external and internal asset inventory correlated with exposed services.
  2. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  3. A risk register linking assets to CIA impact ratings.
  4. A detection matrix showing covered and uncovered ATT&CK techniques.
Practice →
0080
Module 1 · Advanced Domain 1 · Background Cyber Kill Chain Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M01-080), which evidence best supports an assessment of "Cyber Kill Chain"?

View answer choices
  1. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. A risk register linking assets to CIA impact ratings.
  4. An external and internal asset inventory correlated with exposed services.
Practice →
0081
Module 1 · Foundation Domain 1 · Background MITRE ATT&CK Unanswered

During an authorized retail-company assessment (RET-LAB-M01-081), which statement most accurately defines "MITRE ATT&CK"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. The total set of reachable interfaces, services, identities, and paths an attacker could target.
  4. A knowledge base that organizes adversary tactics and techniques from observed behavior.
Practice →
0082
Module 1 · Foundation Domain 1 · Background MITRE ATT&CK Unanswered

During a hospital incident-response exercise (HLT-SOC-M01-082), which statement most accurately defines "MITRE ATT&CK"?

View answer choices
  1. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. The total set of reachable interfaces, services, identities, and paths an attacker could target.
  4. The confidentiality, integrity, and availability objectives used to reason about information security.
Practice →
0083
Module 1 · Foundation Domain 1 · Background MITRE ATT&CK Unanswered

During a university cyber-range engagement (EDU-RANGE-M01-083), which statement most accurately defines "MITRE ATT&CK"?

View answer choices
  1. The total set of reachable interfaces, services, identities, and paths an attacker could target.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. The confidentiality, integrity, and availability objectives used to reason about information security.
  4. A staged model describing adversary activity from reconnaissance through actions on objectives.
Practice →
0084
Module 1 · Applied Domain 1 · Background MITRE ATT&CK Unanswered

During a financial-services purple-team test (FIN-PT-M01-084), which statement most accurately defines "MITRE ATT&CK"?

View answer choices
  1. A staged model describing adversary activity from reconnaissance through actions on objectives.
  2. The confidentiality, integrity, and availability objectives used to reason about information security.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. The total set of reachable interfaces, services, identities, and paths an attacker could target.
Practice →
0085
Module 1 · Applied Domain 1 · Background MITRE ATT&CK Unanswered

During a cloud startup security audit (CLD-AUDIT-M01-085), which statement most accurately defines "MITRE ATT&CK"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. The total set of reachable interfaces, services, identities, and paths an attacker could target.
  4. A knowledge base that organizes adversary tactics and techniques from observed behavior.
Practice →
0086
Module 1 · Applied Domain 1 · Background MITRE ATT&CK Unanswered

During a government risk-validation project (GOV-RISK-M01-086), which statement most accurately defines "MITRE ATT&CK"?

View answer choices
  1. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. The total set of reachable interfaces, services, identities, and paths an attacker could target.
  4. The confidentiality, integrity, and availability objectives used to reason about information security.
Practice →
0087
Module 1 · Applied Domain 1 · Background MITRE ATT&CK Unanswered

During an e-commerce application review (ECOM-WEB-M01-087), which statement most accurately defines "MITRE ATT&CK"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. The total set of reachable interfaces, services, identities, and paths an attacker could target.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. A staged model describing adversary activity from reconnaissance through actions on objectives.
Practice →
0088
Module 1 · Advanced Domain 1 · Background MITRE ATT&CK Unanswered

During a manufacturing and OT security review (MFG-OT-M01-088), which statement most accurately defines "MITRE ATT&CK"?

View answer choices
  1. A staged model describing adversary activity from reconnaissance through actions on objectives.
  2. The confidentiality, integrity, and availability objectives used to reason about information security.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. The total set of reachable interfaces, services, identities, and paths an attacker could target.
Practice →
0089
Module 1 · Advanced Domain 1 · Background MITRE ATT&CK Unanswered

During a mobile-services penetration test (MOB-TEST-M01-089), which statement most accurately defines "MITRE ATT&CK"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. The total set of reachable interfaces, services, identities, and paths an attacker could target.
  4. A knowledge base that organizes adversary tactics and techniques from observed behavior.
Practice →
0090
Module 1 · Advanced Domain 1 · Background MITRE ATT&CK Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M01-090), which statement most accurately defines "MITRE ATT&CK"?

View answer choices
  1. The total set of reachable interfaces, services, identities, and paths an attacker could target.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. The confidentiality, integrity, and availability objectives used to reason about information security.
  4. A staged model describing adversary activity from reconnaissance through actions on objectives.
Practice →
0091
Module 1 · Foundation Domain 1 · Background MITRE ATT&CK Unanswered

During an authorized retail-company assessment (RET-LAB-M01-091), which risk is most directly associated with "MITRE ATT&CK"?

View answer choices
  1. Unmapped detections can leave important adversary techniques without coverage.
  2. Unknown or unnecessary exposure increases the number of possible entry points.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. A control focused on only one objective can leave the other security objectives exposed.
Practice →
0092
Module 1 · Foundation Domain 1 · Background MITRE ATT&CK Unanswered

During a hospital incident-response exercise (HLT-SOC-M01-092), which risk is most directly associated with "MITRE ATT&CK"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Unknown or unnecessary exposure increases the number of possible entry points.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. Unmapped detections can leave important adversary techniques without coverage.
Practice →
0093
Module 1 · Foundation Domain 1 · Background MITRE ATT&CK Unanswered

During a university cyber-range engagement (EDU-RANGE-M01-093), which risk is most directly associated with "MITRE ATT&CK"?

View answer choices
  1. Unmapped detections can leave important adversary techniques without coverage.
  2. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  3. A control focused on only one objective can leave the other security objectives exposed.
  4. Unknown or unnecessary exposure increases the number of possible entry points.
Practice →
0094
Module 1 · Applied Domain 1 · Background MITRE ATT&CK Unanswered

During a financial-services purple-team test (FIN-PT-M01-094), which risk is most directly associated with "MITRE ATT&CK"?

View answer choices
  1. Unknown or unnecessary exposure increases the number of possible entry points.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. A control focused on only one objective can leave the other security objectives exposed.
  4. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
Practice →
0095
Module 1 · Applied Domain 1 · Background MITRE ATT&CK Unanswered

During a cloud startup security audit (CLD-AUDIT-M01-095), which risk is most directly associated with "MITRE ATT&CK"?

View answer choices
  1. Unmapped detections can leave important adversary techniques without coverage.
  2. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  3. Unknown or unnecessary exposure increases the number of possible entry points.
  4. A control focused on only one objective can leave the other security objectives exposed.
Practice →
0096
Module 1 · Applied Domain 1 · Background MITRE ATT&CK Unanswered

During a government risk-validation project (GOV-RISK-M01-096), which risk is most directly associated with "MITRE ATT&CK"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  3. Unknown or unnecessary exposure increases the number of possible entry points.
  4. Unmapped detections can leave important adversary techniques without coverage.
Practice →
0097
Module 1 · Applied Domain 1 · Background MITRE ATT&CK Unanswered

During an e-commerce application review (ECOM-WEB-M01-097), which risk is most directly associated with "MITRE ATT&CK"?

View answer choices
  1. Unmapped detections can leave important adversary techniques without coverage.
  2. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  3. A control focused on only one objective can leave the other security objectives exposed.
  4. Unknown or unnecessary exposure increases the number of possible entry points.
Practice →
0098
Module 1 · Advanced Domain 1 · Background MITRE ATT&CK Unanswered

During a manufacturing and OT security review (MFG-OT-M01-098), which risk is most directly associated with "MITRE ATT&CK"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Unknown or unnecessary exposure increases the number of possible entry points.
  3. Unmapped detections can leave important adversary techniques without coverage.
  4. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
Practice →
0099
Module 1 · Advanced Domain 1 · Background MITRE ATT&CK Unanswered

During a mobile-services penetration test (MOB-TEST-M01-099), which risk is most directly associated with "MITRE ATT&CK"?

View answer choices
  1. Unmapped detections can leave important adversary techniques without coverage.
  2. Unknown or unnecessary exposure increases the number of possible entry points.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. A control focused on only one objective can leave the other security objectives exposed.
Practice →
0100
Module 1 · Advanced Domain 1 · Background MITRE ATT&CK Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M01-100), which risk is most directly associated with "MITRE ATT&CK"?

View answer choices
  1. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  2. Unknown or unnecessary exposure increases the number of possible entry points.
  3. A control focused on only one objective can leave the other security objectives exposed.
  4. Unmapped detections can leave important adversary techniques without coverage.
Practice →