Which of the following would the tester MOST likely describe as a benefit of the framework?

A penetration tester is explaining the MITRE ATT&CK framework to a company’s chief legal counsel.

Which of the following would the tester MOST likely describe as a benefit of the framework?
A . Understanding the tactics of a security intrusion can help disrupt them.
B . Scripts that are part of the framework can be imported directly into SIEM tools.
C . The methodology can be used to estimate the cost of an incident better.
D . The framework is static and ensures stability of a security program overtime.

View Answer

Answer: A

Explanation:

Reference: https://attack.mitre.org/