ATT&CK Threat Hunting Practice Questions - MITRE ATT&CK Threat Hunting And Detection Engineering (MAD20) Exam

Access More Questions

Which of the following best describes the primary goal of a TTP-based threat hunt as taught in the MAD20 ATT&CK Threat Hunting methodology?

Proactively searching for adversary behaviors using ATT&CK techniques as the model of malicious activity Reactively investigating alerts generated by SIEM correlation rules Performing a vulnerability scan to identify unpatched systems Building firewall rules based on known malicious IP addresses

Correct Answer:

Proactively searching for adversary behaviors using ATT&CK techniques as the model of malicious activity

Access more questions from this quiz

Continue to ATT&CK Threat Hunting Practice Questions - MITRE ATT&CK Threat Hunting and Detection Engineering (MAD20) Exam for more practice questions and the full quiz experience.

Access More Questions