PUR301 Final Revision

Front

Red Teams use the MITRE ATT&CK Framework to simulate adversaries based on:

Back

Real-World tactics and techniques

Front

In a purple team engagement, the red team______________.

Back

Performs tasks that emulate real-world adversary attacks.

Front

The goal of precision is to have less of these.

Back

False Positives

Front

In purple team exercises, the blue team _______________.

Back

Evaluates and improves the organization's detection capabilities

Front

Optimizing precision means _____________.

Back

Reducing false alarms

Front

Hiding malicious software within system files is a technique under what tactic?

Back

defense evasion

Front

The term used to measure the percentage of true threats correctly identified in detection engineering.

Back

recall

Front

Detecting new and previously unknown threats is an advantage of which detection mechanism?

Back

anomaly-based detection

Front

A detection method used to identify behaviors that differ from the baseline or norms is called what?

Back

Anomaly-based detection

Front

Modifying the registry run keys or the startup folder are examples of this tactic from the MITRE ATT&CK Framework.

Back

persistence