CompTIA CySA+ (CS0-003) — Question 156

Which of the following can be used to learn more about TTPs used by cybercriminals?

Answer options

• A. ZenMAP
• B. MITRE ATT&CK
• C. National Institute of Standards and Technology
• D. theHarvester

Correct answer: B

Explanation

The MITRE ATT&CK framework is specifically designed to document and share knowledge about the tactics, techniques, and procedures (TTPs) used by adversaries in cybersecurity. While ZenMAP is a network scanning tool, the National Institute of Standards and Technology provides guidelines and standards, and theHarvester is used for gathering information, none of these resources focus on TTPs like MITRE ATT&CK does.