New 2021 Guaranteed Success with ValidBraindumps 312-85 Dumps ECCouncil PDF Questions
Exceptional Practice To Certified Threat Intelligence Analyst Pass the First Time
NEW QUESTION 15
Alison, an analyst in an XYZ organization, wants to retrieve information about a company's website from the time of its inception as well as the removed information from the target website.
What should Alison do to get the information he needs.
- A. Alison should recover cached pages of the website from the Google search engine cache to extract the required website information.
- B. Alison should run the Web Data Extractor tool to extract the required website information.
- C. Alison should use SmartWhois to extract the required website information.
- D. Alison should use https://archive.org to extract the required website information.
Answer: B
NEW QUESTION 16
In which of the following attacks does the attacker exploit vulnerabilities in a computer application before the software developer can release a patch for them?
- A. Zero-day attack
- B. Advanced persistent attack
- C. Active online attack
- D. Distributed network attack
Answer: A
NEW QUESTION 17
Lizzy, an analyst, wants to recognize the level of risks to the organization so as to plan countermeasures against cyber attacks. She used a threat modelling methodology where she performed the following stages:
Stage 1: Build asset-based threat profiles
Stage 2: Identify infrastructure vulnerabilities
Stage 3: Develop security strategy and plans
Which of the following threat modelling methodologies was used by Lizzy in the aforementioned scenario?
- A. OCTAVE
- B. TRIKE
- C. VAST
- D. DREAD
Answer: A
NEW QUESTION 18
Karry, a threat analyst at an XYZ organization, is performing threat intelligence analysis. During the data collection phase, he used a data collection method that involves no participants and is purely based on analysis and observation of activities and processes going on within the local boundaries of the organization.
Identify the type data collection method used by the Karry.
- A. Raw data collection
- B. Exploited data collection
- C. Passive data collection
- D. Active data collection
Answer: C
NEW QUESTION 19
Tracy works as a CISO in a large multinational company. She consumes threat intelligence to understand the changing trends of cyber security. She requires intelligence to understand the current business trends and make appropriate decisions regarding new technologies, security budget, improvement of processes, and staff. The intelligence helps her in minimizing business risks and protecting the new technology and business initiatives.
Identify the type of threat intelligence consumer is Tracy.
- A. Tactical users
- B. Operational users
- C. Strategic users
- D. Technical users
Answer: C
NEW QUESTION 20
What is the correct sequence of steps involved in scheduling a threat intelligence program?
1. Review the project charter
2. Identify all deliverables
3. Identify the sequence of activities
4. Identify task dependencies
5. Develop the final schedule
6. Estimate duration of each activity
7. Identify and estimate resources for all activities
8. Define all activities
9. Build a work breakdown structure (WBS)
- A. 1-->2-->3-->4-->5-->6-->7-->8-->9
- B. 1-->9-->2-->8-->3-->7-->4-->6-->5
- C. 1-->2-->3-->4-->5-->6-->9-->8-->7
- D. 3-->4-->5-->2-->1-->9-->8-->7-->6
Answer: B
NEW QUESTION 21
SecurityTech Inc. is developing a TI plan where it can drive more advantages in less funds. In the process of selecting a TI platform, it wants to incorporate a feature that ranks elements such as intelligence sources, threat actors, attacks, and digital assets of the organization, so that it can put in more funds toward the resources which are critical for the organization's security.
Which of the following key features should SecurityTech Inc. consider in their TI plan for selecting the TI platform?
- A. Workflow
- B. Scoring
- C. Open
- D. Search
Answer: B
NEW QUESTION 22
Sam works as an analyst in an organization named InfoTech Security. He was asked to collect information from various threat intelligence sources. In meeting the deadline, he forgot to verify the threat intelligence sources and used data from an open-source data provider, who offered it at a very low cost. Through it was beneficial at the initial stage but relying on such data providers can produce unreliable data and noise putting the organization network into risk.
What mistake Sam did that led to this situation?
- A. Sam did not use the proper standardization formats for representing threat data.
- B. Sam did not use the proper technology to use or consume the information.
- C. Sam used data without context.
- D. Sam used unreliable intelligence sources.
Answer: B
NEW QUESTION 23
Tim is working as an analyst in an ABC organization. His organization had been facing many challenges in converting the raw threat intelligence data into meaningful contextual information. After inspection, he found that it was due to noise obtained from misrepresentation of data from huge data collections. Hence, it is important to clean the data before performing data analysis using techniques such as data reduction. He needs to choose an appropriate threat intelligence framework that automatically performs data collection, filtering, and analysis for his organization.
Which of the following threat intelligence frameworks should he choose to perform such task?
- A. TC complete
- B. HighCharts
- C. SIGVERIF
- D. Threat grid
Answer: A
NEW QUESTION 24
A threat analyst obtains an intelligence related to a threat, where the data is sent in the form of a connection request from a remote host to the server. From this data, he obtains only the IP address of the source and destination but no contextual information. While processing this data, he obtains contextual information stating that multiple connection requests from different geo-locations are received by the server within a short time span, and as a result, the server is stressed and gradually its performance has reduced. He further performed analysis on the information based on the past and present experience and concludes the attack experienced by the client organization.
Which of the following attacks is performed on the client organization?
- A. MAC spoofing attack
- B. DHCP attacks
- C. Bandwidth attack
- D. Distributed Denial-of-Service (DDoS) attack
Answer: D
NEW QUESTION 25
Alice, a threat intelligence analyst at HiTech Cyber Solutions, wants to gather information for identifying emerging threats to the organization and implement essential techniques to prevent their systems and networks from such attacks. Alice is searching for online sources to obtain information such as the method used to launch an attack, and techniques and tools used to perform an attack and the procedures followed for covering the tracks after an attack.
Which of the following online sources should Alice use to gather such information?
- A. Financial services
- B. Job sites
- C. Social network settings
- D. Hacking forums
Answer: D
NEW QUESTION 26
In which of the following storage architecture is the data stored in a localized system, server, or storage hardware and capable of storing a limited amount of data in its database and locally available for data usage?
- A. Distributed storage
- B. Cloud storage
- C. Centralized storage
- D. Object-based storage
Answer: D
NEW QUESTION 27
An analyst is conducting threat intelligence analysis in a client organization, and during the information gathering process, he gathered information from the publicly available sources and analyzed to obtain a rich useful form of intelligence. The information source that he used is primarily used for national security, law enforcement, and for collecting intelligence required for business or strategic decision making.
Which of the following sources of intelligence did the analyst use to collect information?
- A. ISAC
- B. OPSEC
- C. OSINT
- D. SIGINT
Answer: C
NEW QUESTION 28
Which of the following types of threat attribution deals with the identification of the specific person, society, or a country sponsoring a well-planned and executed intrusion or attack over its target?
- A. Intrusion-set attribution
- B. Nation-state attribution
- C. Campaign attribution
- D. True attribution
Answer: D
NEW QUESTION 29
An analyst wants to disseminate the information effectively so that the consumers can acquire and benefit out of the intelligence.
Which of the following criteria must an analyst consider in order to make the intelligence concise, to the point, accurate, and easily understandable and must consist of a right balance between tables, narrative, numbers, graphics, and multimedia?
- A. The right time
- B. The right order
- C. The right presentation
- D. The right content
Answer: C
NEW QUESTION 30
......
312-85 EXAM DUMPS WITH GUARANTEED SUCCESS: https://www.validbraindumps.com/312-85-exam-prep.html
Best Quality ECCouncil 312-85 Exam Questions: https://drive.google.com/open?id=1AUIuiVJ4XzUalY_m7aikKiQj_cCNeKKU