MENU
The Use Case Manager app has an option to see MITRE heat map.
Which two (2) factors are responsible for the different colors in MITRE heat map?
Suggested Answer: C, D
Get Premium C1000-162 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The MITRE heat map in the Use Case Manager app within QRadar uses several factors to determine the colors displayed, among which the number of rules mapped to MITRE ATT&CK tactics and techniques and the level of mapping confidence are crucial. These factors help visualize the coverage and reliability of rule mappings against the comprehensive MITRE ATT&CK framework, aiding in the identification of potential gaps or areas for improvement in threat detection capabilities.
12 comments · newest first
WA
Wade
1 month ago
I agree with Malika. Confidence levels really affect the heat map colors.
AD
Adelina
1 month ago
I feel like B and C are more relevant. Events and rules show the real picture.
MA
Malika
1 month ago
I think it's A and D. Offenses and confidence matter.
JA
Jaime
2 months ago
I agree with A, but I’m leaning towards E too.
ZI
Zita
2 months ago
A and D make sense, but B is also important.
JU
Jules
2 months ago
Wait, is D really a factor? That’s surprising!
MA
Malissa
2 months ago
I thought it was B and C, not sure about A.
CH
Chantell
2 months ago
It's definitely A and D!
AR
Arlyne
3 months ago
From what I studied, I believe the number of log sources associated might not directly affect the heat map colors, but I could be mistaken.
TO
Tonette
3 months ago
I'm a bit confused about this one. I feel like the number of rules mapped could influence the heat map, but I can't recall if it's one of the main factors.
YV
Yvette
3 months ago
I remember practicing a question similar to this, and I think the number of events associated with an offense could also play a role in the color coding.
SA
Sage
3 months ago
I think the colors in the MITRE heat map might relate to the number of offenses generated and the level of mapping confidence, but I'm not entirely sure.