Q1: An organization suffered many major attacks and lost critical information, such as employee records, and financial information. Therefore, the management decides to hire a threat analyst to extract the strategic threat intelligence that provides high-level information regarding current cyber-security posture, threats, details on the financial impact of various cyber-activities, and so on. Which of the following sources will help the analyst to collect the required intelligence?

A: Active campaigns, attacks on other organizations, data feeds from external third parties

B: OSINT, CTI vendors, ISAO/ISACs

C: Campaign reports, malware, incident reports, attack group reports, human intelligence

D: Human, social media, chat rooms

Answer

Correct Answer: B

Q2: Tim is working as an analyst in an ABC organization. His organization had been facing many challenges in converting the raw threat intelligence data into meaningful contextual information. After inspection, he found that it was due to noise obtained from misrepresentation of data from huge data collections. Hence, it is important to clean the data before performing data analysis using techniques such as data reduction. He needs to choose an appropriate threat intelligence framework that automatically performs data collection, filtering, and analysis for his organization. Which of the following threat intelligence frameworks should he choose to perform such task?

A: HighCharts

B: SIGVERIF

C: Threat grid

D: TC complete

Answer

Correct Answer: C

Q3: A threat analyst wants to incorporate a requirement in the threat knowledge repository that provides an ability to modify or delete past or irrelevant threat data. Which of the following requirement must he include in the threat knowledge repository to fulfil his needs?

A: Protection ranking

B: Evaluating performance

C: Data management

D: Searchable functionality

Answer

Correct Answer: C

Q4: A network administrator working in an ABC organization collected log files generated by a traffic monitoring system, which may not seem to have useful information, but after performing proper analysis by him, the same information can be used to detect an attack in the network. Which of the following categories of threat information has he collected?

A: Advisories

B: Strategic reports

C: Detection indicators

D: Low-level data

Answer

Correct Answer: C

- Testimonials -

Real Results From Real Students

John Doe

This site has been a game-changer for my certification journey. The materials are current, reliable, and best of all—free! It's clear they're committed to supporting the IT community.

Emma

I passed my CompTIA Security+ exam on the first try thanks to this site. Their practice exams and study guides are top-notch. Highly recommend it to anyone serious about IT certifications.

Liam

I’ve passed three certifications using this site. Their materials are detailed and well-structured, and the fact that it’s free makes it even better.

Isabella

If you're studying for any IT certification, this should be your first stop. It’s comprehensive, organized, and constantly updated.

Benjamin

This website helped me prepare for multiple certifications, and today I’m working in cybersecurity. Without their free resources, I wouldn’t be here.

info@certsmasters.com

Exam overview

Eccouncil 312-85 Exam Dumps

Purchase

$ 40

One-time payment • Instant access

Frequently Ask Questions

Hot Exams

Exam practice

Exam Q&A

Q3: A threat analyst wants to incorporate a requirement in the threat knowledge repository that provides an ability to modify or delete past or irrelevant threat data. Which of the following requirement must he include in the threat knowledge repository to fulfil his needs?

- Testimonials -

Real Results From Real Students

Useful Links

Extra Links