Câu 6: 300-220: Conducting Threat Hunting and Defending using Cisco Technologies for Cybersecurity

A task has been assigned to enhance defenses against APT actors within a mid-sized technology company. Attacks by the adversaries are sophisticated and prolonged, and they use various tactics to infiltrate and persist within target networks. The company is focusing on the tactics used by the adversaries to significantly improve overall security posture. A review of the Pyramid of Pain model has been conducted, highlighting different levels of threat indicators, from simple hash values to complex TTPs. The objective is to enhance detection capabilities. Which approach should be taken to detect APT activity at the Tactics level of the Pyramid of Pain?

1. A. monitoring all available network logs for specific IPs linked to known APT activities
2. B. blocking newly registered domains that have not been accessed before by company personnel
3. C. analyzing logs to identify patterns of behavior matching APT tactics from MITRE ATT&CK — đáp án hiện tại
4. D. using hash values to identify known malware files used in previous APT campaigns