During the initial planning phase of a Red Team engagement, an operator is tasked with selecting which threat actor to model against a target enterprise. According to the adversary emulation fundamentals taught, which three attributes should the chosen adversary demonstrate to justify their selection?
Explanation
consuming cyber threat intelligence to identify and document an adversary that has the intent, opportunity, and capability to attack the
identify and document an adversary that has the intent, opportunity, and capability to attack the target organization
A security manager questions why the organization should invest in adversary emulation rather than continuing with only traditional penetration testing. Which distinction best describes the added value that adversary emulation provides over conventional penetration testing?
Explanation
Penetration testing is effective at enumerating vulnerabilities, but less effective in addressing personnel and processes on the defense side.
red teaming involves goal-oriented operations designed to simulate how an actual threat actor might breach a system, remain undetected, and achieve specific objectives
Locked question — unlock this exam to view it.
locked — unlock to review