CyberRevision
Continue revision → ← Subjects
CEH v13 · 20 official modules

All 5,000 CEH questions.

Search original practice content, filter by EC-Council module or exam domain, and open any question in revision mode.

0 answered overall

Showing 2,401–2,450 of 5,000 matching questions

50 per page
2401
Module 7 · Foundation Domain 1 · Background botnet Unanswered

During an authorized retail-company assessment (RET-LAB-M07-2401), which statement most accurately defines "botnet"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. A staged model describing adversary activity from reconnaissance through actions on objectives.
  4. A group of compromised devices remotely controlled as a coordinated network.
Practice →
2402
Module 7 · Foundation Domain 1 · Background botnet Unanswered

During a hospital incident-response exercise (HLT-SOC-M07-2402), which statement most accurately defines "botnet"?

View answer choices
  1. A group of compromised devices remotely controlled as a coordinated network.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. A staged model describing adversary activity from reconnaissance through actions on objectives.
  4. The confidentiality, integrity, and availability objectives used to reason about information security.
Practice →
2403
Module 7 · Foundation Domain 1 · Background botnet Unanswered

During a university cyber-range engagement (EDU-RANGE-M07-2403), which statement most accurately defines "botnet"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A group of compromised devices remotely controlled as a coordinated network.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. A staged model describing adversary activity from reconnaissance through actions on objectives.
Practice →
2404
Module 7 · Applied Domain 1 · Background botnet Unanswered

During a financial-services purple-team test (FIN-PT-M07-2404), which statement most accurately defines "botnet"?

View answer choices
  1. A staged model describing adversary activity from reconnaissance through actions on objectives.
  2. The confidentiality, integrity, and availability objectives used to reason about information security.
  3. A group of compromised devices remotely controlled as a coordinated network.
  4. A knowledge base that organizes adversary tactics and techniques from observed behavior.
Practice →
2405
Module 7 · Applied Domain 1 · Background botnet Unanswered

During a cloud startup security audit (CLD-AUDIT-M07-2405), which statement most accurately defines "botnet"?

View answer choices
  1. A staged model describing adversary activity from reconnaissance through actions on objectives.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. The confidentiality, integrity, and availability objectives used to reason about information security.
  4. A group of compromised devices remotely controlled as a coordinated network.
Practice →
2406
Module 7 · Applied Domain 1 · Background botnet Unanswered

During a government risk-validation project (GOV-RISK-M07-2406), which statement most accurately defines "botnet"?

View answer choices
  1. A staged model describing adversary activity from reconnaissance through actions on objectives.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. A group of compromised devices remotely controlled as a coordinated network.
  4. The confidentiality, integrity, and availability objectives used to reason about information security.
Practice →
2407
Module 7 · Applied Domain 1 · Background botnet Unanswered

During an e-commerce application review (ECOM-WEB-M07-2407), which statement most accurately defines "botnet"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A group of compromised devices remotely controlled as a coordinated network.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. A staged model describing adversary activity from reconnaissance through actions on objectives.
Practice →
2408
Module 7 · Advanced Domain 1 · Background botnet Unanswered

During a manufacturing and OT security review (MFG-OT-M07-2408), which statement most accurately defines "botnet"?

View answer choices
  1. A group of compromised devices remotely controlled as a coordinated network.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. The confidentiality, integrity, and availability objectives used to reason about information security.
  4. A knowledge base that organizes adversary tactics and techniques from observed behavior.
Practice →
2409
Module 7 · Advanced Domain 1 · Background botnet Unanswered

During a mobile-services penetration test (MOB-TEST-M07-2409), which statement most accurately defines "botnet"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. A staged model describing adversary activity from reconnaissance through actions on objectives.
  4. A group of compromised devices remotely controlled as a coordinated network.
Practice →
2410
Module 7 · Advanced Domain 1 · Background botnet Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M07-2410), which statement most accurately defines "botnet"?

View answer choices
  1. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  2. A group of compromised devices remotely controlled as a coordinated network.
  3. The confidentiality, integrity, and availability objectives used to reason about information security.
  4. A staged model describing adversary activity from reconnaissance through actions on objectives.
Practice →
2411
Module 7 · Foundation Domain 1 · Background botnet Unanswered

During an authorized retail-company assessment (RET-LAB-M07-2411), which risk is most directly associated with "botnet"?

View answer choices
  1. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. Botnets enable DDoS, credential attacks, spam, proxying, and large-scale abuse.
  4. A control focused on only one objective can leave the other security objectives exposed.
Practice →
2412
Module 7 · Foundation Domain 1 · Background botnet Unanswered

During a hospital incident-response exercise (HLT-SOC-M07-2412), which risk is most directly associated with "botnet"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. Botnets enable DDoS, credential attacks, spam, proxying, and large-scale abuse.
Practice →
2413
Module 7 · Foundation Domain 1 · Background botnet Unanswered

During a university cyber-range engagement (EDU-RANGE-M07-2413), which risk is most directly associated with "botnet"?

View answer choices
  1. Botnets enable DDoS, credential attacks, spam, proxying, and large-scale abuse.
  2. A control focused on only one objective can leave the other security objectives exposed.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. Unmapped detections can leave important adversary techniques without coverage.
Practice →
2414
Module 7 · Applied Domain 1 · Background botnet Unanswered

During a financial-services purple-team test (FIN-PT-M07-2414), which risk is most directly associated with "botnet"?

View answer choices
  1. Unmapped detections can leave important adversary techniques without coverage.
  2. Botnets enable DDoS, credential attacks, spam, proxying, and large-scale abuse.
  3. A control focused on only one objective can leave the other security objectives exposed.
  4. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
Practice →
2415
Module 7 · Applied Domain 1 · Background botnet Unanswered

During a cloud startup security audit (CLD-AUDIT-M07-2415), which risk is most directly associated with "botnet"?

View answer choices
  1. Botnets enable DDoS, credential attacks, spam, proxying, and large-scale abuse.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. A control focused on only one objective can leave the other security objectives exposed.
Practice →
2416
Module 7 · Applied Domain 1 · Background botnet Unanswered

During a government risk-validation project (GOV-RISK-M07-2416), which risk is most directly associated with "botnet"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  3. Unmapped detections can leave important adversary techniques without coverage.
  4. Botnets enable DDoS, credential attacks, spam, proxying, and large-scale abuse.
Practice →
2417
Module 7 · Applied Domain 1 · Background botnet Unanswered

During an e-commerce application review (ECOM-WEB-M07-2417), which risk is most directly associated with "botnet"?

View answer choices
  1. Botnets enable DDoS, credential attacks, spam, proxying, and large-scale abuse.
  2. A control focused on only one objective can leave the other security objectives exposed.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. Unmapped detections can leave important adversary techniques without coverage.
Practice →
2418
Module 7 · Advanced Domain 1 · Background botnet Unanswered

During a manufacturing and OT security review (MFG-OT-M07-2418), which risk is most directly associated with "botnet"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. Botnets enable DDoS, credential attacks, spam, proxying, and large-scale abuse.
  4. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
Practice →
2419
Module 7 · Advanced Domain 1 · Background botnet Unanswered

During a mobile-services penetration test (MOB-TEST-M07-2419), which risk is most directly associated with "botnet"?

View answer choices
  1. Botnets enable DDoS, credential attacks, spam, proxying, and large-scale abuse.
  2. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  3. Unmapped detections can leave important adversary techniques without coverage.
  4. A control focused on only one objective can leave the other security objectives exposed.
Practice →
2420
Module 7 · Advanced Domain 1 · Background botnet Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M07-2420), which risk is most directly associated with "botnet"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  3. Unmapped detections can leave important adversary techniques without coverage.
  4. Botnets enable DDoS, credential attacks, spam, proxying, and large-scale abuse.
Practice →
2421
Module 7 · Foundation Domain 1 · Background botnet Unanswered

During an authorized retail-company assessment (RET-LAB-M07-2421), which action most directly controls the risk related to "botnet"?

View answer choices
  1. Disrupt command-and-control communication and remediate infected endpoints.
  2. Place preventive and detective controls across multiple stages of the chain.
  3. Map each asset and threat to confidentiality, integrity, and availability requirements.
  4. Map controls and detections to relevant ATT&CK techniques and validate coverage.
Practice →
2422
Module 7 · Foundation Domain 1 · Background botnet Unanswered

During a hospital incident-response exercise (HLT-SOC-M07-2422), which action most directly controls the risk related to "botnet"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Disrupt command-and-control communication and remediate infected endpoints.
  4. Place preventive and detective controls across multiple stages of the chain.
Practice →
2423
Module 7 · Foundation Domain 1 · Background botnet Unanswered

During a university cyber-range engagement (EDU-RANGE-M07-2423), which action most directly controls the risk related to "botnet"?

View answer choices
  1. Place preventive and detective controls across multiple stages of the chain.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Disrupt command-and-control communication and remediate infected endpoints.
  4. Map each asset and threat to confidentiality, integrity, and availability requirements.
Practice →
2424
Module 7 · Applied Domain 1 · Background botnet Unanswered

During a financial-services purple-team test (FIN-PT-M07-2424), which action most directly controls the risk related to "botnet"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Place preventive and detective controls across multiple stages of the chain.
  3. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  4. Disrupt command-and-control communication and remediate infected endpoints.
Practice →
2425
Module 7 · Applied Domain 1 · Background botnet Unanswered

During a cloud startup security audit (CLD-AUDIT-M07-2425), which action most directly controls the risk related to "botnet"?

View answer choices
  1. Disrupt command-and-control communication and remediate infected endpoints.
  2. Map each asset and threat to confidentiality, integrity, and availability requirements.
  3. Place preventive and detective controls across multiple stages of the chain.
  4. Map controls and detections to relevant ATT&CK techniques and validate coverage.
Practice →
2426
Module 7 · Applied Domain 1 · Background botnet Unanswered

During a government risk-validation project (GOV-RISK-M07-2426), which action most directly controls the risk related to "botnet"?

View answer choices
  1. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  2. Disrupt command-and-control communication and remediate infected endpoints.
  3. Map each asset and threat to confidentiality, integrity, and availability requirements.
  4. Place preventive and detective controls across multiple stages of the chain.
Practice →
2427
Module 7 · Applied Domain 1 · Background botnet Unanswered

During an e-commerce application review (ECOM-WEB-M07-2427), which action most directly controls the risk related to "botnet"?

View answer choices
  1. Disrupt command-and-control communication and remediate infected endpoints.
  2. Place preventive and detective controls across multiple stages of the chain.
  3. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  4. Map each asset and threat to confidentiality, integrity, and availability requirements.
Practice →
2428
Module 7 · Advanced Domain 1 · Background botnet Unanswered

During a manufacturing and OT security review (MFG-OT-M07-2428), which action most directly controls the risk related to "botnet"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Place preventive and detective controls across multiple stages of the chain.
  3. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  4. Disrupt command-and-control communication and remediate infected endpoints.
Practice →
2429
Module 7 · Advanced Domain 1 · Background botnet Unanswered

During a mobile-services penetration test (MOB-TEST-M07-2429), which action most directly controls the risk related to "botnet"?

View answer choices
  1. Disrupt command-and-control communication and remediate infected endpoints.
  2. Map each asset and threat to confidentiality, integrity, and availability requirements.
  3. Place preventive and detective controls across multiple stages of the chain.
  4. Map controls and detections to relevant ATT&CK techniques and validate coverage.
Practice →
2430
Module 7 · Advanced Domain 1 · Background botnet Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M07-2430), which action most directly controls the risk related to "botnet"?

View answer choices
  1. Place preventive and detective controls across multiple stages of the chain.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Disrupt command-and-control communication and remediate infected endpoints.
  4. Map each asset and threat to confidentiality, integrity, and availability requirements.
Practice →
2431
Module 7 · Foundation Domain 1 · Background botnet Unanswered

During an authorized retail-company assessment (RET-LAB-M07-2431), which evidence best supports an assessment of "botnet"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. Many hosts beaconing to common infrastructure with coordinated timing.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
Practice →
2432
Module 7 · Foundation Domain 1 · Background botnet Unanswered

During a hospital incident-response exercise (HLT-SOC-M07-2432), which evidence best supports an assessment of "botnet"?

View answer choices
  1. Many hosts beaconing to common infrastructure with coordinated timing.
  2. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  3. A risk register linking assets to CIA impact ratings.
  4. A detection matrix showing covered and uncovered ATT&CK techniques.
Practice →
2433
Module 7 · Foundation Domain 1 · Background botnet Unanswered

During a university cyber-range engagement (EDU-RANGE-M07-2433), which evidence best supports an assessment of "botnet"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. Many hosts beaconing to common infrastructure with coordinated timing.
Practice →
2434
Module 7 · Applied Domain 1 · Background botnet Unanswered

During a financial-services purple-team test (FIN-PT-M07-2434), which evidence best supports an assessment of "botnet"?

View answer choices
  1. Many hosts beaconing to common infrastructure with coordinated timing.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A risk register linking assets to CIA impact ratings.
Practice →
2435
Module 7 · Applied Domain 1 · Background botnet Unanswered

During a cloud startup security audit (CLD-AUDIT-M07-2435), which evidence best supports an assessment of "botnet"?

View answer choices
  1. A detection matrix showing covered and uncovered ATT&CK techniques.
  2. Many hosts beaconing to common infrastructure with coordinated timing.
  3. A risk register linking assets to CIA impact ratings.
  4. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
Practice →
2436
Module 7 · Applied Domain 1 · Background botnet Unanswered

During a government risk-validation project (GOV-RISK-M07-2436), which evidence best supports an assessment of "botnet"?

View answer choices
  1. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  2. A risk register linking assets to CIA impact ratings.
  3. Many hosts beaconing to common infrastructure with coordinated timing.
  4. A detection matrix showing covered and uncovered ATT&CK techniques.
Practice →
2437
Module 7 · Applied Domain 1 · Background botnet Unanswered

During an e-commerce application review (ECOM-WEB-M07-2437), which evidence best supports an assessment of "botnet"?

View answer choices
  1. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. A risk register linking assets to CIA impact ratings.
  4. Many hosts beaconing to common infrastructure with coordinated timing.
Practice →
2438
Module 7 · Advanced Domain 1 · Background botnet Unanswered

During a manufacturing and OT security review (MFG-OT-M07-2438), which evidence best supports an assessment of "botnet"?

View answer choices
  1. Many hosts beaconing to common infrastructure with coordinated timing.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A risk register linking assets to CIA impact ratings.
Practice →
2439
Module 7 · Advanced Domain 1 · Background botnet Unanswered

During a mobile-services penetration test (MOB-TEST-M07-2439), which evidence best supports an assessment of "botnet"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. Many hosts beaconing to common infrastructure with coordinated timing.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
Practice →
2440
Module 7 · Advanced Domain 1 · Background botnet Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M07-2440), which evidence best supports an assessment of "botnet"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. Many hosts beaconing to common infrastructure with coordinated timing.
Practice →
2441
Module 7 · Foundation Domain 1 · Background computer virus Unanswered

During an authorized retail-company assessment (RET-LAB-M07-2441), which statement most accurately defines "computer virus"?

View answer choices
  1. Malware that attaches to a host file or program and replicates when that host executes.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. The confidentiality, integrity, and availability objectives used to reason about information security.
  4. A knowledge base that organizes adversary tactics and techniques from observed behavior.
Practice →
2442
Module 7 · Foundation Domain 1 · Background computer virus Unanswered

During a hospital incident-response exercise (HLT-SOC-M07-2442), which statement most accurately defines "computer virus"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. Malware that attaches to a host file or program and replicates when that host executes.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. A staged model describing adversary activity from reconnaissance through actions on objectives.
Practice →
2443
Module 7 · Foundation Domain 1 · Background computer virus Unanswered

During a university cyber-range engagement (EDU-RANGE-M07-2443), which statement most accurately defines "computer virus"?

View answer choices
  1. Malware that attaches to a host file or program and replicates when that host executes.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. The confidentiality, integrity, and availability objectives used to reason about information security.
Practice →
2444
Module 7 · Applied Domain 1 · Background computer virus Unanswered

During a financial-services purple-team test (FIN-PT-M07-2444), which statement most accurately defines "computer virus"?

View answer choices
  1. A staged model describing adversary activity from reconnaissance through actions on objectives.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. The confidentiality, integrity, and availability objectives used to reason about information security.
  4. Malware that attaches to a host file or program and replicates when that host executes.
Practice →
2445
Module 7 · Applied Domain 1 · Background computer virus Unanswered

During a cloud startup security audit (CLD-AUDIT-M07-2445), which statement most accurately defines "computer virus"?

View answer choices
  1. Malware that attaches to a host file or program and replicates when that host executes.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. The confidentiality, integrity, and availability objectives used to reason about information security.
  4. A knowledge base that organizes adversary tactics and techniques from observed behavior.
Practice →
2446
Module 7 · Applied Domain 1 · Background computer virus Unanswered

During a government risk-validation project (GOV-RISK-M07-2446), which statement most accurately defines "computer virus"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. Malware that attaches to a host file or program and replicates when that host executes.
  4. A staged model describing adversary activity from reconnaissance through actions on objectives.
Practice →
2447
Module 7 · Applied Domain 1 · Background computer virus Unanswered

During an e-commerce application review (ECOM-WEB-M07-2447), which statement most accurately defines "computer virus"?

View answer choices
  1. Malware that attaches to a host file or program and replicates when that host executes.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. The confidentiality, integrity, and availability objectives used to reason about information security.
Practice →
2448
Module 7 · Advanced Domain 1 · Background computer virus Unanswered

During a manufacturing and OT security review (MFG-OT-M07-2448), which statement most accurately defines "computer virus"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. A staged model describing adversary activity from reconnaissance through actions on objectives.
  4. Malware that attaches to a host file or program and replicates when that host executes.
Practice →
2449
Module 7 · Advanced Domain 1 · Background computer virus Unanswered

During a mobile-services penetration test (MOB-TEST-M07-2449), which statement most accurately defines "computer virus"?

View answer choices
  1. Malware that attaches to a host file or program and replicates when that host executes.
  2. The confidentiality, integrity, and availability objectives used to reason about information security.
  3. A staged model describing adversary activity from reconnaissance through actions on objectives.
  4. A knowledge base that organizes adversary tactics and techniques from observed behavior.
Practice →
2450
Module 7 · Advanced Domain 1 · Background computer virus Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M07-2450), which statement most accurately defines "computer virus"?

View answer choices
  1. Malware that attaches to a host file or program and replicates when that host executes.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. The confidentiality, integrity, and availability objectives used to reason about information security.
Practice →