MENU
Which security knowledge-base focuses specifically on offensive tools, techniques, and procedures?
Suggested Answer: A
Get Premium KCSA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
30 comments · newest first
SH
Shasta
7 months ago
NIST is great for frameworks, but not for offensive techniques.
EA
Earnestine
7 months ago
CIS Controls focus on defense, not offense. Definitely not that.
NE
Nelida
7 months ago
I feel confident about A too. It covers real-world attack scenarios.
DA
Dannie
7 months ago
OWASP Top 10 is more about web vulnerabilities, not offensive tools.
DE
Deonna
8 months ago
Agreed! MITRE ATT&CK is the go-to for that.
GR
Gregoria
8 months ago
I think it's A) MITRE ATT&CK. It's all about offensive tactics.
TA
Tabetha
8 months ago
CIS Controls is more about defense, not offense.
LE
Lenna
8 months ago
Wait, are we sure about that?
BE
Bette
9 months ago
Agree, MITRE ATT&CK is the go-to for offensive tactics.
NO
Novella
9 months ago
I thought it was OWASP Top 10?
TA
Tammara
9 months ago
MITRE ATT&CK? More like MITRE "Attack-the-Exam" framework. I'm all in!
DA
Dana
9 months ago
CIS Controls? More like "Clueless in Security" controls. MITRE ATT&CK is the real deal.
HA
Han
9 months ago
I'm feeling a bit "NIST-y" today, but MITRE ATT&CK is clearly the right choice.
AL
Alisha
10 months ago
I’m leaning towards MITRE ATT&CK too, but I wonder if the NIST framework could also be relevant in some way.
EL
Elvera
10 months ago
OWASP Top 10 seems more focused on web vulnerabilities, so I don't think that's it.
GI
Gilma
10 months ago
I feel like we went over something similar in class, but I can't recall if it was specifically about offensive tools.
ST
Stevie
10 months ago
I think the answer might be MITRE ATT&CK, but I'm not entirely sure. I remember it covers tactics used by attackers.
DO
Doretha
10 months ago
MITRE ATT&CK sounds right to me - it's the go-to resource for offensive security techniques and procedures.
AR
Armanda
10 months ago
It's definitely MITRE ATT&CK!
BR
Brandon
11 months ago
The CIS Controls and NIST Cybersecurity Framework seem more like defensive frameworks, so I'm leaning towards MITRE ATT&CK.
RO
Roselle
11 months ago
OWASP Top 10 is great, but it's more focused on defensive measures. MITRE ATT&CK is the answer here.
KE
Kenny
11 months ago
I'm a bit confused on the differences between these frameworks. I'll have to review my notes to make the best guess.
VE
Veronika
11 months ago
The MITRE ATT&CK framework is the way to go for offensive security knowledge.
LA
Lashaunda
11 months ago
I'm not totally sure, but I think the OWASP Top 10 is more focused on web app vulnerabilities, not general offensive tools.
LE
Leontine
12 months ago
Hmm, I think this is asking about offensive security knowledge, so I'd guess MITRE ATT&CK.
PH
Phuong
6 months ago
MITRE ATT&CK is the go-to for offensive techniques!
KA
Karina
6 months ago
CIS Controls focus on defensive measures, not offensive.
LE
Lezlie
6 months ago
OWASP is more about web security, not offensive tools.
FA
Fairy
6 months ago
Definitely! It's all about offensive tactics.
SV
Svetlana
7 months ago
I agree, MITRE ATT&CK seems right.