QUESTION NO: 1
What is a common challenge when integrating external threat feeds with internal log data?
Response:
What is a common challenge when integrating external threat feeds with internal log data?
Response:
Correct Answer: C
Vote an answer
QUESTION NO: 2
In the Diamond Model of Intrusion Analysis, which vertex represents the tools and techniques used by the adversary?
Response:
In the Diamond Model of Intrusion Analysis, which vertex represents the tools and techniques used by the adversary?
Response:
Correct Answer: B
Vote an answer
QUESTION NO: 3
Which phase of the Cyber Kill Chain involves the adversary sending the weapon to the target?
Response:
Which phase of the Cyber Kill Chain involves the adversary sending the weapon to the target?
Response:
Correct Answer: B
Vote an answer
QUESTION NO: 4
Which of the following stages is part of the Cyber Kill Chain?
Response:
Which of the following stages is part of the Cyber Kill Chain?
Response:
Correct Answer: C
Vote an answer
QUESTION NO: 5
What is an important practice when sharing intelligence across different organizations?
Response:
What is an important practice when sharing intelligence across different organizations?
Response:
Correct Answer: C
Vote an answer
QUESTION NO: 6
What is the primary function of threat hunting in cyber threat intelligence?
Response:
What is the primary function of threat hunting in cyber threat intelligence?
Response:
Correct Answer: A
Vote an answer
QUESTION NO: 7
The Courses of Action Matrix helps analysts determine the best way to __________ a threat.
Response:
The Courses of Action Matrix helps analysts determine the best way to __________ a threat.
Response:
Correct Answer: D
Vote an answer
QUESTION NO: 8
What is a common pitfall in the process of campaign attribution?
Response:
What is a common pitfall in the process of campaign attribution?
Response:
Correct Answer: C
Vote an answer
QUESTION NO: 9
You are tasked with investigating a suspected intrusion in a corporate network. Logs from the Intrusion Detection System (IDS) show an unusual increase in inbound traffic from a foreign IP address, but no malicious signatures have been detected. What steps should you take to enhance your analysis?
(Select three)
Response:
You are tasked with investigating a suspected intrusion in a corporate network. Logs from the Intrusion Detection System (IDS) show an unusual increase in inbound traffic from a foreign IP address, but no malicious signatures have been detected. What steps should you take to enhance your analysis?
(Select three)
Response:
Correct Answer: C,D,E
Vote an answer
QUESTION NO: 10
Which tool is commonly used for pivot analysis in domain investigations?
Response:
Which tool is commonly used for pivot analysis in domain investigations?
Response:
Correct Answer: B
Vote an answer
QUESTION NO: 11
Which two techniques help intelligence analysts apply cyber threat intelligence to improve incident response?
Response:
Which two techniques help intelligence analysts apply cyber threat intelligence to improve incident response?
Response:
Correct Answer: B,C
Vote an answer
QUESTION NO: 12
Which technology provides intelligence analysts with valuable data through network traffic analysis?
Response:
Which technology provides intelligence analysts with valuable data through network traffic analysis?
Response:
Correct Answer: B
Vote an answer
QUESTION NO: 13
What is a primary consideration when storing intelligence from various sources?
Response:
What is a primary consideration when storing intelligence from various sources?
Response:
Correct Answer: C
Vote an answer
QUESTION NO: 14
Why is it important to validate data from threat feeds before storing it?
Response:
Why is it important to validate data from threat feeds before storing it?
Response:
Correct Answer: B
Vote an answer
QUESTION NO: 15
What is the primary objective of using a sandbox in malware analysis?
Response:
What is the primary objective of using a sandbox in malware analysis?
Response:
Correct Answer: A
Vote an answer