Which of the following is not a category used in the ATT&CK matrix when profiling threat actors and activities? Select one: a. Location b. Initial Access c. Defense Evasion d. Discovery Which of the following refers to recovering resources from backup after a security incident? Select one a. Reconstitution of Resources b. Restoration of Permissions C. Restoration of Capabilities and Services d. Patching eletes fo epecific astination

There is a significant difference between a vulnerability scan and a penetration test. Which tools work best for each of these methods?

In this section, you will prepare a risk mitigation plan using SimpleRisk. Before using SimpleRisk, you will create a paper-based plan. You will need to create three security controls in your risk mitigation plan: one control that reduces the asset value, one that reduces the vulnerability severity, and one that reduces the threat impact. Your security controls should also include examples of both strategic and tactical controls. You can refer to the following table for a clearer picture of the requirements. Security Control Reduces Level (strategic/tactical)   Asset value       Vulnerability severity       Threat Impact     Define three security controls designed to mitigate the risk associated with a recent leak of sensitive information that was stored in cleartext files.   Once you have identified your security controls, use SimpleRisk to create a Risk Mitigation plan. You do not need to perform a management review in this section.