What differentiates a tactic from a technique in the context of an attack?

What differentiates a tactic from a technique in the context of an attack?

• A. A tactic is a specific tool, while a technique is a broad strategy
• B. A tactic is a strategy, while a technique is the method used
• C. A tactic is a tool for communication, while a technique is for decryption
• D. A tactic is a legal approach, while a technique is illegal

Answer: (B)

In the context of an attack, a tactic is understood as an overarching strategy or objective that guides the actions taken during the attack. It defines what the attacker aims to achieve. Techniques, on the other hand, refer to the specific methods or ways in which those tactics are implemented to accomplish the desired objective. For example, if the tactic is to gain unauthorized access to a system (the overall goal), the specific techniques used to achieve this could include phishing, exploiting vulnerabilities, or using brute force attacks. Understanding this distinction is crucial for security professionals, as it allows them to recognize the broader strategies employed by attackers as well as the specific methods used to execute those strategies. The other options do not accurately reflect the relationship between tactics and techniques. They confuse the definitions and do not align with the established terminology in cybersecurity and ethical hacking.

In the context of an attack, a tactic is understood as an overarching strategy or objective that guides the actions taken during the attack. It defines what the attacker aims to achieve. Techniques, on the other hand, refer to the specific methods or ways in which those tactics are implemented to accomplish the desired objective.

For example, if the tactic is to gain unauthorized access to a system (the overall goal), the specific techniques used to achieve this could include phishing, exploiting vulnerabilities, or using brute force attacks. Understanding this distinction is crucial for security professionals, as it allows them to recognize the broader strategies employed by attackers as well as the specific methods used to execute those strategies.

The other options do not accurately reflect the relationship between tactics and techniques. They confuse the definitions and do not align with the established terminology in cybersecurity and ethical hacking.