CrowdStrike Certified Falcon Hunter (CCFH) — Question 84

In the MITRE ATT&CK Framework (version 11 - the newest version released in April 2022), which of the following pair of tactics is not in the Enterprise: Windows matrix?

Answer options

• A. Persistence and Execution
• B. Impact and Collection
• C. Privilege Escalation and Initial Access
• D. Reconnaissance and Resource Development

Correct answer: D

Explanation

The correct answer is D, as Reconnaissance and Resource Development are not included in the Enterprise: Windows matrix. The other pairs, A, B, and C, represent tactics that are indeed part of that specific matrix, thereby making them incorrect options.