Palo Alto Networks Certified Detection and Remediation Analyst (PCDRA) — Question 28

Phishing belongs which of the following MITRE ATT&CK tactics?

Answer options

• A. Initial Access, Persistence
• B. Persistence, Command and Control
• C. Reconnaissance, Persistence
• D. Reconnaissance, Initial Access

Correct answer: D

Explanation

Phishing is primarily used to gain unauthorized access to systems, which aligns with the Initial Access tactic. While it may also involve elements of reconnaissance, the main focus of phishing is on facilitating initial access rather than maintaining persistence or establishing command and control.