NSE 7 - Security Operations 7.6 Architect Materials - Question #68 Discussion

Review the incident report. Shortly after being compromised, an infected host collected its own network configuration and connection details, then began sending low volume connection attempts to multiple internal addresses to identify responding hosts. Which two MITRE ATT&CK techniques best describe this activity? (Choose two answers)

• A. System Network Connections Discovery
• B. Network Sniffing
• C. Lateral Movement
• D. Active Scanning

Brave-Dump Community Votes