Discuss Splunk SPLK-5001 Exam Topic 3 Question 35

Tactics, Techniques, and Procedures (TTPs) are methods or behaviors utilized by attackers. In which framework are these categorized?

ANIST 800-53

BISO 27000

CCIS18

DMITRE ATT&CK

Suggested Answer: D

Get Premium SPLK-5001 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

24 comments · newest first

Antonio 2 days ago

I feel confident about this one. TTPs fit perfectly in that framework.

Teddy 7 days ago

Agreed! MITRE ATT&CK is the go-to for attackers' methods.

Terrilyn 12 days ago

I think it's D) MITRE ATT&CK. It's all about TTPs.

Gilma 17 days ago

CIS18 focuses on best practices, not TTPs.

Samira 23 days ago

I remember studying TTPs in the context of MITRE.

Carmen 28 days ago

ISO 27000 is too broad for this.

Lashawnda 1 month ago

Definitely D. MITRE has detailed attacker behaviors.

Eden 1 month ago

NIST 800-53 is more about controls, not TTPs.

Pauline 1 month ago

I feel confident about this question.

Sherman 2 months ago

Agreed! MITRE is all about TTPs.

Ashlyn 2 months ago

I think it's D) MITRE ATT&CK. It fits perfectly.

Alaine 2 months ago

I’m not so sure about that, seems like they fit in multiple frameworks.

Tambra 2 months ago

Wait, are TTPs really only in that framework?

Phuong 2 months ago

Totally agree, D is the right answer!

Myra 2 months ago

I thought it was A) NIST 800-53.

Isabelle 3 months ago

It's definitely D) MITRE ATT&CK.

Coral 3 months ago

I’m a bit confused because NIST 800-53 covers controls, but I guess TTPs might fit under MITRE ATT&CK more closely.

Emogene 3 months ago

I feel like I’ve seen similar questions before, and I think they pointed to MITRE ATT&CK as well.

Darrin 3 months ago

I remember studying the MITRE ATT&CK framework specifically for TTPs, so I’m leaning towards D.

Kiley 3 months ago

I think TTPs are related to the MITRE ATT&CK framework, but I'm not entirely sure. It could also be something from NIST.

Malcolm 4 months ago

I’m a bit confused; I thought TTPs could fit into multiple frameworks, but MITRE seems to focus on them the most.

Elmira 5 months ago

I feel like we had a practice question about this, and I think the answer was D) MITRE ATT&CK.

Cortney 5 months ago

I remember studying NIST 800-53, but I don’t think it specifically categorizes TTPs like MITRE does.

Sonia 5 months ago

I think TTPs are mainly discussed in the MITRE ATT&CK framework, but I’m not completely sure.

Splunk SPLK-5001 Exam - Topic 3 Question 35 Discussion