New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CompTIA CS0-003 Exam - Topic 5 Question 10 Discussion

Actual exam question for CompTIA's CS0-003 exam
Question #: 10
Topic #: 5
[All CS0-003 Questions]

The security operations team is required to consolidate several threat intelligence feeds due to redundant tools and portals. Which of the following will best achieve the goal and maximize results?

Show Suggested Answer Hide Answer
Suggested Answer: D

The correct answer is D. MITRE ATT&CK.

MITRE ATT&CK is a framework that maps the tactics, techniques, and procedures (TTPs) of various threat actors and groups, based on real-world observations and data. MITRE ATT&CK can help a Chief Information Security Officer (CISO) to map all the attack vectors that the company faces each day, as well as to align their security controls around the most relevant and prevalent threats. MITRE ATT&CK can also help the CISO to assess the effectiveness and maturity of their security posture, as well as to identify and prioritize the gaps and improvements .

The other options are not the best recommendations for mapping all the attack vectors that the company faces each day. OSSTMM (Open Source Security Testing Methodology Manual) (A) is a methodology that provides guidelines and best practices for conducting security testing and auditing, but it does not map the TTPs of threat actors or groups. Diamond Model of Intrusion Analysis (B) is a model that analyzes the relationships and interactions between four elements of an intrusion: adversary, capability, infrastructure, and victim. The Diamond Model can help understand the characteristics and context of an intrusion, but it does not map the TTPs of threat actors or groups. OWASP (Open Web Application Security Project) is a project that provides resources and tools for improving the security of web applications, but it does not map the TTPs of threat actors or groups.


Contribute your Thoughts:

0/2000 characters
Valda
3 months ago
Not sure a single pane can handle all that info.
upvoted 0 times
...
Harrison
3 months ago
Surprised no one mentioned data enrichment!
upvoted 0 times
...
Charlene
3 months ago
Single sign-on? Not really relevant for this.
upvoted 0 times
...
Danica
4 months ago
I think deduplication is key here.
upvoted 0 times
...
Rebecka
4 months ago
A single pane of glass is the way to go!
upvoted 0 times
...
Ettie
4 months ago
Single sign-on seems more about access control than actually consolidating feeds, right? I’m leaning towards the single pane of glass.
upvoted 0 times
...
Leonor
4 months ago
Deduplication sounds like it could help, but I wonder if it really maximizes results or just cleans up the data.
upvoted 0 times
...
Troy
4 months ago
I remember a practice question that mentioned data enrichment, but I’m not clear on how it directly relates to consolidating feeds.
upvoted 0 times
...
Jules
5 months ago
I think a single pane of glass might be the best option since it centralizes everything, but I'm not entirely sure how it handles redundancy.
upvoted 0 times
...
Junita
5 months ago
Deduplication seems like a good strategy, but I'm not sure if that alone would be the most effective approach. I think I'll need to consider the other options as well to determine the best overall solution.
upvoted 0 times
...
Reuben
5 months ago
Ah, I see what they're getting at. A "single pane of glass" solution that integrates the various threat intelligence feeds into a unified interface is likely the best way to go. That would definitely help consolidate the tools and portals.
upvoted 0 times
...
Alaine
5 months ago
Hmm, I'm a bit unsure about this one. There are a few different approaches mentioned, and I'm not entirely sure which one would be the most effective for maximizing the results. I'll need to think this through carefully.
upvoted 0 times
...
Reyes
5 months ago
This seems like a straightforward question about consolidating threat intelligence feeds. I think the key is to look for the option that provides the most unified and streamlined approach.
upvoted 0 times
...
Deonna
5 months ago
I'm pretty sure the answer is D. The GLBA restricts the disclosure of customer account numbers by financial institutions to prevent unauthorized access.
upvoted 0 times
...
Sanda
5 months ago
I'm pretty confident I can handle this question. The SCA test framework should allow me to create tests for the various SCA components like reference bindings, service components, and wires.
upvoted 0 times
...
Mirta
5 months ago
I think the answer is "C" for line executives. That seems to match up with what we learned about authority in organizational hierarchies.
upvoted 0 times
...
Apolonia
5 months ago
Hmm, I'm a bit unsure on this one. I know digital display ads are a key part of digital marketing, but I'm not 100% sure which specific format is considered part of that.
upvoted 0 times
...
Ashlyn
5 months ago
I'm leaning towards the Power BI Service as the best option. Since the goal is to show the store name in all reports, the Service might have some built-in functionality to make that easier.
upvoted 0 times
...
Hermila
5 months ago
I remember practicing a question like this, and I think both Azure and AWS were mentioned as valid options.
upvoted 0 times
...
Deeanna
10 months ago
Ah yes, the age-old question: how many security tools can we cram into one pane of glass before it shatters?
upvoted 0 times
Nada
8 months ago
C) Data enrichment
upvoted 0 times
...
Von
9 months ago
B) Single sign-on
upvoted 0 times
...
German
9 months ago
A) Single pane of glass
upvoted 0 times
...
...
Leonida
10 months ago
I bet they're just trying to create the world's most depressing dashboard with all those threat feeds.
upvoted 0 times
Selma
9 months ago
C) Data enrichment
upvoted 0 times
...
Jolanda
9 months ago
B) Single sign-on
upvoted 0 times
...
Keith
10 months ago
A) Single pane of glass
upvoted 0 times
...
...
Dion
10 months ago
Single sign-on would be handy, but it's not directly solving the consolidation issue. Gotta focus on that first.
upvoted 0 times
...
Shawnee
10 months ago
Deduplication is important too, gotta get rid of all that redundant information.
upvoted 0 times
Myra
10 months ago
D) Deduplication
upvoted 0 times
...
Kati
10 months ago
C) Data enrichment
upvoted 0 times
...
Valentine
10 months ago
B) Single sign-on
upvoted 0 times
...
Eliseo
10 months ago
A) Single pane of glass
upvoted 0 times
...
...
Tori
10 months ago
Data enrichment could also be really useful to add more context and value to the consolidated threat data.
upvoted 0 times
Donette
9 months ago
C) Data enrichment
upvoted 0 times
...
Eladia
9 months ago
A) Single pane of glass
upvoted 0 times
...
...
Veronika
11 months ago
A single pane of glass would definitely be the way to go here. Consolidating all those threat feeds into one centralized interface is key.
upvoted 0 times
...
Tawny
11 months ago
I think C) Data enrichment could also be helpful in maximizing results by adding more context to the threat intelligence.
upvoted 0 times
...
Mitsue
11 months ago
I agree with Douglass, having a single pane of glass will make it easier to consolidate the threat intelligence feeds.
upvoted 0 times
...
Douglass
11 months ago
I think the best option is A) Single pane of glass.
upvoted 0 times
...

Save Cancel