312-85 practice questions 61–67

1. Question 61 · 67 in bank

   You are the leading cybersecurity analyst at financial institutions. An anomaly is detected in the network, suggesting a potential security threat. To proactively investigate and mitigate the risk, arrange the following steps in the correct sequence as part of the threat hunting process: 1) Investigation 2) Collect and process data 3) Response 4) Hypothesis 5) Trigger a) 5 –> 3 –> 1 –> 4 –> 2 b) 3 –> 2 –> 5 –> 1 –> 4 c) 4 –> 1 –> 3 –> 5 –> 2 d) 4 –> 2 –> 5 –> 1 –> 3

   • Ac
   • Bd
   • Ca
   • Db

   Show answer

   Answer: B

   Next question

2. Question 62 · 67 in bank

   Mario is working as an analyst in an XYZ organization in the United States. He has been asked to prepare a threat landscape report to provide in-depth awareness and greater insight into the threats his organization is facing. Which of the following details should she include to prepare a threat landscape report?

   • AHistory of an attack and location where it was performed
   • BAttacker’s motivation and intention behind the attack
   • CAttribution of an attack to specific threat actor or group
   • DA summary of threat actors most likely targeting the organization along with their motivations, intentions, and TTPs.

   Show answer

   Answer: D

   Next question

3. Question 63 · 67 in bank

   Philip, a professional hacker, is planning to attack an organization. In order to collect information, he covertly collects information from the target person by maintaining a personal or other relationship with the target person. Which of the following intelligence sources is used by Philip to collect information about the target organization?

   • ASOCMINT
   • BFLU
   • CCHIS
   • DMASINT

   Show answer

   Answer: C

   Next question

4. Question 64 · 67 in bank

   Marie, a threat analyst at an organization named TechSavvy, was asked to perform operational threat intelligence analysis to get contextual information about security events and incidents. Which of the following sources does Marie need to use to perform operational threat intelligence analysis?

   • AAttack group reports, attack campaign reports, incident reports, malware samples
   • BActivity-related attacks, social media sources, chat room conversations
   • COSINT, security industry white papers, human contacts
   • DMalware indicators, network indicators, e-mail indicators

   Show answer

   Answer: B

   Next question

5. Question 65 · 67 in bank

   Two cybersecurity teams from different organizations joined forces to combat a rapidly evolving malware campaign targeting their industry. They exchange real-time information about the attackers’ techniques, compromised systems, and immediate defensive actions. What type of threat intelligence sharing characterizes this collaboration?

   • ASharing technical threat intelligence
   • BSharing strategic threat intelligence
   • CSharing operational threat intelligence
   • DSharing tactical threat intelligence

   Show answer

   Answer: D

   Next question

6. Question 66 · 67 in bank

   An organization, namely, Highlander, Inc., decided to integrate threat intelligence into the incident response process for rapid detection and recovery from various security incidents. In which of the following phases of the incident response management does the organization utilize operational and tactical threat intelligence to provide context to the alerts generated by various security mechanisms?

   • APhase 2: event
   • BPhase 1: preplanning
   • CPhase 3: incident
   • DPhase 4: breach

   Show answer

   Answer: A

   Next question

7. Question 67 · 67 in bank

   James, a senior threat intelligence officer, was tasked with assessing the success and failure of the threat intelligence program established by the organization. As part of the assessment, James reviewed the outcome of the intelligence program, determined if any improvements were required in the program, and identified the past learnings that can be applied to the future program. Identify the activity performed by James in the above scenario.

   • ADetermine the costs and benefits associated with the program
   • BDetermine the fulfillment of stakeholders
   • CReport findings and recommendations
   • DConduct a gap analysis

   Show answer

   Answer: C

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

312-85 practice, question 61. 67 questions available.