ECCouncil Certified Threat Intelligence Analyst - 312-85무료 덤프문제 풀어보기
Which component of risk management involves evaluating and ranking risks based on their significance, allowing organizations to focus resources on addressing the most critical threats?
정답: A
설명: (Fast2test 회원만 볼 수 있음)
Kira works as a security analyst in an organization. She was asked to define and set up the requirements before collecting threat intelligence information. The requirements should focus on what must be collected in order to fulfil production intelligence.
Which of the following categories of threat intelligence requirements should Kira focus on?
Which of the following categories of threat intelligence requirements should Kira focus on?
정답: C
설명: (Fast2test 회원만 볼 수 있음)
Marry wants to follow an iterative and incremental approach to prioritize requirements in order to protect the important assets of an organization against attacks. She wants to set the requirements based on the order of priority, where the most important requirement must be met first for a greater chance of success. She wants to apply prioritization tasks, scenarios, use cases, tests, and so on.
Which of the following methodologies should Marry use to prioritize the requirements?
Which of the following methodologies should Marry use to prioritize the requirements?
정답: B
설명: (Fast2test 회원만 볼 수 있음)
H&P, Inc. is a small-scale organization that has decided to outsource the network security monitoring due to lack of resources in the organization. They are looking for the options where they can directly incorporate threat intelligence into their existing network defense solutions.
Which of the following is the most cost-effective methods the organization can employ?
Which of the following is the most cost-effective methods the organization can employ?
정답: A
설명: (Fast2test 회원만 볼 수 있음)
A threat analyst obtains an intelligence related to a threat, where the data is sent in the form of a connection request from a remote host to the server. From this data, he obtains only the IP address of the source and destination but no contextual information. While processing this data, he obtains contextual information stating that multiple connection requests from different geo-locations are received by the server within a short time span, and as a result, the server is stressed and gradually its performance has reduced. He further performed analysis on the information based on the past and present experience and concludes the attack experienced by the client organization.
Which of the following attacks is performed on the client organization?
Which of the following attacks is performed on the client organization?
정답: D
설명: (Fast2test 회원만 볼 수 있음)
John, a professional hacker, is trying to perform APT attack on the target organization network. He gains access to a single system of a target organization and tries to obtain administrative login credentials to gain further access to the systems in the network using various techniques.
What phase of the advanced persistent threat lifecycle is John currently in?
What phase of the advanced persistent threat lifecycle is John currently in?
정답: A
설명: (Fast2test 회원만 볼 수 있음)
An attacker instructs bots to use camouflage mechanism to hide his phishing and malware delivery locations in the rapidly changing network of compromised bots. In this particular technique, a single domain name consists of multiple IP addresses.
Which of the following technique is used by the attacker?
Which of the following technique is used by the attacker?
정답: C
설명: (Fast2test 회원만 볼 수 있음)
While analyzing a series of security incidents, you notice a pattern of attacks originating from specific geographical locations. To gain deeper insight into the spatial aspects of these threats, what contextualization method would you employ to understand the geographic origin and distribution of the attacks?
정답: D
설명: (Fast2test 회원만 볼 수 있음)
Miley, an analyst, wants to reduce the amount of collected data and make the storing and sharing process easy. She uses filtering, tagging, and queuing technique to sort out the relevant and structured data from the large amounts of unstructured data.
Which of the following techniques was employed by Miley?
Which of the following techniques was employed by Miley?
정답: A
설명: (Fast2test 회원만 볼 수 있음)