Linux Foundation KCSA Exam - Topic 1 Question 6 Discussion

Actual exam question for Linux Foundation's KCSA exam

Question #: 6
Topic #: 1

[All KCSA Questions]

Which security knowledge-base focuses specifically on offensive tools, techniques, and procedures?

AMITRE ATT&CK

BOWASP Top 10

CCIS Controls

DNIST Cybersecurity Framework

Show Suggested Answer

Suggested Answer: A

by Vi at Nov 23, 2025, 11:47 PM

Limited Time Offer

25%

Off

Get Premium KCSA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Shasta

2 months ago

NIST is great for frameworks, but not for offensive techniques.

upvoted 0 times

...

Earnestine

3 months ago

CIS Controls focus on defense, not offense. Definitely not that.

upvoted 0 times

...

Nelida

3 months ago

I feel confident about A too. It covers real-world attack scenarios.

upvoted 0 times

...

Dannie

3 months ago

OWASP Top 10 is more about web vulnerabilities, not offensive tools.

upvoted 0 times

...

Deonna

3 months ago

Agreed! MITRE ATT&CK is the go-to for that.

upvoted 0 times

...

Gregoria

3 months ago

I think it's A) MITRE ATT&CK. It's all about offensive tactics.

upvoted 0 times

...

Tabetha

4 months ago

CIS Controls is more about defense, not offense.

upvoted 0 times

...

Lenna

4 months ago

Wait, are we sure about that?

upvoted 0 times

...

Bette

4 months ago

Agree, MITRE ATT&CK is the go-to for offensive tactics.

upvoted 0 times

...

Novella

4 months ago

I thought it was OWASP Top 10?

upvoted 0 times

...

Tammara

5 months ago

MITRE ATT&CK? More like MITRE "Attack-the-Exam" framework. I'm all in!

upvoted 0 times

...

Dana

5 months ago

CIS Controls? More like "Clueless in Security" controls. MITRE ATT&CK is the real deal.

upvoted 0 times

...

Han

5 months ago

I'm feeling a bit "NIST-y" today, but MITRE ATT&CK is clearly the right choice.

upvoted 0 times

...

Alisha

5 months ago

I’m leaning towards MITRE ATT&CK too, but I wonder if the NIST framework could also be relevant in some way.

upvoted 0 times

...

Elvera

5 months ago

OWASP Top 10 seems more focused on web vulnerabilities, so I don't think that's it.

upvoted 0 times

...

Gilma

5 months ago

I feel like we went over something similar in class, but I can't recall if it was specifically about offensive tools.

upvoted 0 times

...

Stevie

6 months ago

I think the answer might be MITRE ATT&CK, but I'm not entirely sure. I remember it covers tactics used by attackers.

upvoted 0 times

...

Doretha

6 months ago

MITRE ATT&CK sounds right to me - it's the go-to resource for offensive security techniques and procedures.

upvoted 0 times

...

Armanda

6 months ago

It's definitely MITRE ATT&CK!

upvoted 0 times

...

Brandon

6 months ago

The CIS Controls and NIST Cybersecurity Framework seem more like defensive frameworks, so I'm leaning towards MITRE ATT&CK.

upvoted 0 times

...

Roselle

6 months ago

OWASP Top 10 is great, but it's more focused on defensive measures. MITRE ATT&CK is the answer here.

upvoted 0 times

...

Kenny

7 months ago

I'm a bit confused on the differences between these frameworks. I'll have to review my notes to make the best guess.

upvoted 0 times

...

Veronika

7 months ago

The MITRE ATT&CK framework is the way to go for offensive security knowledge.

upvoted 0 times

...

Lashaunda

7 months ago

I'm not totally sure, but I think the OWASP Top 10 is more focused on web app vulnerabilities, not general offensive tools.

upvoted 0 times

...

Leontine

7 months ago

Hmm, I think this is asking about offensive security knowledge, so I'd guess MITRE ATT&CK.

upvoted 0 times

Phuong

1 month ago

MITRE ATT&CK is the go-to for offensive techniques!

upvoted 0 times

...

Karina

2 months ago

CIS Controls focus on defensive measures, not offensive.

upvoted 0 times

...

Lezlie

2 months ago

OWASP is more about web security, not offensive tools.

upvoted 0 times

...

Fairy

2 months ago

Definitely! It's all about offensive tactics.

upvoted 0 times

...

Svetlana

2 months ago

I agree, MITRE ATT&CK seems right.

upvoted 0 times

...