Linux Foundation KCSA Exam - Topic 1 Question 6 Discussion

Actual exam question for Linux Foundation's KCSA exam

Question #: 6
Topic #: 1

[All KCSA Questions]

Which security knowledge-base focuses specifically on offensive tools, techniques, and procedures?

AMITRE ATT&CK

BOWASP Top 10

CCIS Controls

DNIST Cybersecurity Framework

Show Suggested Answer

Suggested Answer: A

by Vi at Nov 23, 2025, 11:47 PM

Limited Time Offer

25%

Off

Get Premium KCSA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Shasta

25 days ago

NIST is great for frameworks, but not for offensive techniques.

upvoted 0 times

...

Earnestine

1 month ago

CIS Controls focus on defense, not offense. Definitely not that.

upvoted 0 times

...

Nelida

1 month ago

I feel confident about A too. It covers real-world attack scenarios.

upvoted 0 times

...

Dannie

1 month ago

OWASP Top 10 is more about web vulnerabilities, not offensive tools.

upvoted 0 times

...

Deonna

2 months ago

Agreed! MITRE ATT&CK is the go-to for that.

upvoted 0 times

...

Gregoria

2 months ago

I think it's A) MITRE ATT&CK. It's all about offensive tactics.

upvoted 0 times

...

Tabetha

2 months ago

CIS Controls is more about defense, not offense.

upvoted 0 times

...

Lenna

2 months ago

Wait, are we sure about that?

upvoted 0 times

...

Bette

3 months ago

Agree, MITRE ATT&CK is the go-to for offensive tactics.

upvoted 0 times

...

Novella

3 months ago

I thought it was OWASP Top 10?

upvoted 0 times

...

Tammara

3 months ago

MITRE ATT&CK? More like MITRE "Attack-the-Exam" framework. I'm all in!

upvoted 0 times

...

Dana

3 months ago

CIS Controls? More like "Clueless in Security" controls. MITRE ATT&CK is the real deal.

upvoted 0 times

...

Han

3 months ago

I'm feeling a bit "NIST-y" today, but MITRE ATT&CK is clearly the right choice.

upvoted 0 times

...

Alisha

4 months ago

I’m leaning towards MITRE ATT&CK too, but I wonder if the NIST framework could also be relevant in some way.

upvoted 0 times

...

Elvera

4 months ago

OWASP Top 10 seems more focused on web vulnerabilities, so I don't think that's it.

upvoted 0 times

...

Gilma

4 months ago

I feel like we went over something similar in class, but I can't recall if it was specifically about offensive tools.

upvoted 0 times

...

Stevie

4 months ago

I think the answer might be MITRE ATT&CK, but I'm not entirely sure. I remember it covers tactics used by attackers.

upvoted 0 times

...

Doretha

4 months ago

MITRE ATT&CK sounds right to me - it's the go-to resource for offensive security techniques and procedures.

upvoted 0 times

...

Armanda

4 months ago

It's definitely MITRE ATT&CK!

upvoted 0 times

...

Brandon

5 months ago

The CIS Controls and NIST Cybersecurity Framework seem more like defensive frameworks, so I'm leaning towards MITRE ATT&CK.

upvoted 0 times

...

Roselle

5 months ago

OWASP Top 10 is great, but it's more focused on defensive measures. MITRE ATT&CK is the answer here.

upvoted 0 times

...

Kenny

5 months ago

I'm a bit confused on the differences between these frameworks. I'll have to review my notes to make the best guess.

upvoted 0 times

...

Veronika

5 months ago

The MITRE ATT&CK framework is the way to go for offensive security knowledge.

upvoted 0 times

...

Lashaunda

5 months ago

I'm not totally sure, but I think the OWASP Top 10 is more focused on web app vulnerabilities, not general offensive tools.

upvoted 0 times

...

Leontine

6 months ago

Hmm, I think this is asking about offensive security knowledge, so I'd guess MITRE ATT&CK.

upvoted 0 times

Karina

4 days ago

CIS Controls focus on defensive measures, not offensive.

upvoted 0 times

...

Lezlie

9 days ago

OWASP is more about web security, not offensive tools.

upvoted 0 times

...

Fairy

15 days ago

Definitely! It's all about offensive tactics.

upvoted 0 times

...

Svetlana

20 days ago

I agree, MITRE ATT&CK seems right.

upvoted 0 times

...