PCDRA practice question 4 of 15
Phishing belongs to which of the following MITRE ATT&CK tactics?
Full set: 91 questionsPhishing is a technique that belongs to two MITRE ATT&CK tactics: Reconnaissance and Initial Access. Reconnaissance is the process of gathering information about a target before launching an attack. Phishing for information is a sub-technique of Reconnaissance that involves sending phishing messages to elicit sensitive information that can be used during targeting. Initial Access is the process of gaining a foothold in a network or system. Phishing is a sub-technique of Initial Access that involves sending phishing messages to execute malicious code on victim systems. Phishing can be used for both Reconnaissance and Initial Access depending on the objective and content of the phishing message. Reference: Phishing, Technique T1566 - Enterprise | MITRE ATT&CK® 1 Phishing for Information, Technique T1598 - Enterprise | MITRE ATT&CK® 2 Phishing for information, Part 2: Tactics and techniques 3 PHISHING AND THE MITREATT&CK FRAMEWORK - EnterpriseTalk 4 Initial Access, Tactic TA0001 - Enterprise | MITRE ATT&CK® 5
Keep practicing
Take the free PCDRA practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other PCDRA practice questions
- Question 1Which of the following paths will successfully activate Remediation Suggestions?
- Question 2What is the purpose of targeting software vendors in a supply-chain attack?
- Question 5When using the “File Search and Destroy” feature, which of the following search hash type…
- Question 6Which type of BIOC rule is currently available in Cortex XDR?
- Question 7When creating a BIOC rule, which XQL query can be used?
- Question 8In incident-related widgets, how would you filter the display to only show incidents that…
