Splunk Observability Cloud Certified Metrics User — Question 1

The following list contains examples of Tactics, Techniques, and Procedures (TTPs):
1. Exploiting a remote service
2. Lateral movement
3. Use EternalBlue to exploit a remote SMB server
In which order are they listed below?

Answer options

• A. Tactic, Technique, Procedure
• B. Procedure, Technique, Tactic
• C. Technique, Tactic, Procedure
• D. Tactic, Procedure, Technique

Correct answer: A

Explanation

The first item, 'Exploiting a remote service', represents a Tactic, which is a broad goal. The second item, 'Lateral movement', is a Technique, which describes how to achieve that goal. The third item, 'Use EternalBlue to exploit a remote SMB server', is a specific Procedure that falls under the Technique. Therefore, the correct order is Tactic, Technique, Procedure.