PSAP Practice Questions - TCM Practical SOC Analyst Professional Exam

Access More Questions

A threat hunter is building a hypothesis before a hunt. Which input best drives a TTP-based hunting hypothesis according to the MITRE ATT&CK framework?

A specific ATT&CK technique observed in recent threat reports Known bad IP addresses from a threat feed Open vulnerability scanner findings Firewall block counts from the past 24 hours

Correct Answer:

A specific ATT&CK technique observed in recent threat reports

Access more questions from this quiz

Continue to PSAP Practice Questions - TCM Practical SOC Analyst Professional Exam for more practice questions and the full quiz experience.

Access More Questions