ECCouncil Certified Threat Intelligence Analyst - 312-85 模擬練習
Cybersol Technologies initiated a cyber-threat intelligence program with a team of threat intelligence analysts. During the process, the analysts started converting the raw data into useful information by applying various techniques, such as machine-based techniques, and statistical methods.
In which of the following phases of the threat intelligence lifecycle is the threat intelligence team currently working?
In which of the following phases of the threat intelligence lifecycle is the threat intelligence team currently working?
正解: D
解説: (PassTest メンバーにのみ表示されます)
John, a threat intelligence analyst in CyberTech Company, was asked to obtain information that provides greater insight into the current cyber risks. To gather such information, John needs to find the answers to the following questions:
* Why the organization might be attacked?
* How the organization might be attacked?
* Who might be the intruders?Identify the type of security testing John is going to perform.
* Why the organization might be attacked?
* How the organization might be attacked?
* Who might be the intruders?Identify the type of security testing John is going to perform.
正解: C
解説: (PassTest メンバーにのみ表示されます)
Andrews and Sons Corp. has decided to share threat information among sharing partners. Garry, a threat analyst, working in Andrews and Sons Corp., has asked to follow a trust model necessary to establish trust between sharing partners. In the trust model used by him, the first organization makes use of a body of evidence in a second organization, and the level of trust between two organizations depends on the degree and quality of evidence provided by the first organization.
Which of the following types of trust model is used by Garry to establish the trust?
Which of the following types of trust model is used by Garry to establish the trust?
正解: D
解説: (PassTest メンバーにのみ表示されます)
Jacob, a professional hacker, created an exact replica of an online shopping website. He copied the entire contents of the original website onto the local system that enables him to create a dummy spam website for performing social engineering attacks over the employees.
What type of technique did Jacob use for cloning the website?
What type of technique did Jacob use for cloning the website?
正解: B
解説: (PassTest メンバーにのみ表示されます)
An XYZ organization hired Mr. Andrews, a threat analyst. In order to identify the threats and mitigate the effect of such threats, Mr. Andrews was asked to perform threat modeling. During the process of threat modeling, he collected important information about the treat actor and characterized the analytic behavior of the adversary that includes technological details, goals, and motives that can be useful in building a strong countermeasure.
What stage of the threat modeling is Mr. Andrews currently in?
What stage of the threat modeling is Mr. Andrews currently in?
正解: D
解説: (PassTest メンバーにのみ表示されます)
H&P, Inc. is a small-scale organization that has decided to outsource the network security monitoring due to lack of resources in the organization. They are looking for the options where they can directly incorporate threat intelligence into their existing network defense solutions.
Which of the following is the most cost-effective methods the organization can employ?
Which of the following is the most cost-effective methods the organization can employ?
正解: D
解説: (PassTest メンバーにのみ表示されます)
To extract useful intelligence from the gathered bulk data and to improve the efficiency of the composite bulk data, Sam, a threat analyst, follows a data analysis method where he creates a logical sequence of events based on the assumptions of an adversary's proposed actions, mechanisms, indicators, and implications. To develop accurate predictions, he further takes into consideration the important factors including bad actors, methods, vulnerabilities, targets, and so on.
Which of the following data analysis methods is used by Sam to extract useful intelligence out of bulk data?
Which of the following data analysis methods is used by Sam to extract useful intelligence out of bulk data?
正解: C
解説: (PassTest メンバーにのみ表示されます)
ABC is a well-established cyber-security company in the United States. The organization implemented the automation of tasks such as data enrichment and indicator aggregation. They also joined various communities to increase their knowledge about the emerging threats. However, the security teams can only detect and prevent identified threats in a reactive approach.
Based on threat intelligence maturity model, identify the level of ABC to know the stage at which the organization stands with its security and vulnerabilities.
Based on threat intelligence maturity model, identify the level of ABC to know the stage at which the organization stands with its security and vulnerabilities.
正解: C
解説: (PassTest メンバーにのみ表示されます)
Miley, an analyst, wants to reduce the amount of collected data and make the storing and sharing process easy. She uses filtering, tagging, and queuing technique to sort out the relevant and structured data from the large amounts of unstructured data.
Which of the following techniques was employed by Miley?
Which of the following techniques was employed by Miley?
正解: C
解説: (PassTest メンバーにのみ表示されます)