Exam CAS-004 topic 1 question 258 discussion

Answer has to be ISO. Key phrase in the question: "security methodologies". Examples) ISO27001: Information Security Management System (ISMS), ISO/IEC 27005: Information Security Risk Management. MITRE ATT&CK is a knowledge base of adversary tactics and techniques.

ISO is more broad, Mitre will focus on the TTP to defend your enterprise and is a tool mostly use by cybersecurity.

MITRE ATT&CK is generally considered more effective than ISO standards because it provides a detailed, real-time view of attacker tactics, techniques, and procedures (TTPs), enabling more targeted defense strategies compared to the broader, compliance-focused ISO guidelines.

ISO standards are reviewed and updated regularly.

B, as ISO is a methodology, MITRE is a framework.

C. MITRE ATT&CK

From the MITRE Corporation website: "MITRE ATT&CK® is a knowledge base that helps model cyber adversaries' tactics and techniques—and then shows how to detect or stop them." So this would satisfy the need for methodologies for the security analyst. Also, they are more up-to-date than ISO. ISO does focus on security too, but they review their standards every 5 years.

I'm going with B since ISO releases standards specific to helping with strengthening cybersecurity posture. MITRE is more about detailing tactics of adversaries. MITRE can help see what types of attacks need to be defended against, but ISO standards would be more specific to building a strong cybersecurity posture.

This one is weird. I guess it should be MITRE but only because the others don't really make sense...OWASP is for web applications, OSINT is open source intelligence gathering and ISO is for standardization.

I believe the answer is C. I was going back and forth between MITRE and OWASP, but after reading what the official Comptia study guide said regarding the 2, I chose MITRE