Pass with professional CPTIA actual quiz materials

CREST CPTIA Exam Overview:

CREST CPTIA Exam Syllabus Topics:

CREST Practitioner Threat Intelligence Analyst Sample Questions:

1. Sarah is a security operations center (SOC) analyst working at JW Williams and Sons organization based in Chicago. As a part of security operations, she contacts information providers (sharing partners) for gathering information such as collections of validated and prioritized threat indicators along with a detailed technical analysis of malware samples, botnets, DDoS attack methods, and various other malicious tools. She further used the collected information at the tactical and operational levels.
Sarah obtained the required information from which of the following types of sharing partner?

A) Providers of threat indicators
B) Providers of threat actors
C) Providers of threat data feeds
D) Providers of comprehensive cyber-threat intelligence

2. Which of the following is an attack that attempts to prevent the use of systems, networks, or applications by the intended users?

A) Unauthorized access
B) Malicious code or insider threat attack
C) Fraud and theft
D) Denial of service (DoS) attack

3. BadGuy Bob hid files in the slack space, changed the file headers, hid suspicious files in executables, and changed the metadata for all types of files on his hacker laptop. What has he committed?

A) Adversarial mechanics
B) Felony
C) Anti-forensics
D) Legal hostility

4. Alice, a threat intelligence analyst at HiTech Cyber Solutions, wants to gather information for identifying emerging threats to the organization and implement essential techniques to prevent their systems and networks from such attacks. Alice is searching for online sources to obtain information such as the method used to launch an attack, and techniques and tools used to perform an attack and the procedures followed for covering the tracks after an attack.
Which of the following online sources should Alice use to gather such information?

A) Financial services
B) Social network settings
C) Job sites
D) Hacking forums

5. A threat analyst obtains an intelligence related to a threat, where the data is sent in the form of a connection request from a remote host to the server. From this data, he obtains only the IP address of the source and destination but no contextual information. While processing this data, he obtains contextual information stating that multiple connection requests from different geo-locations are received by the server within a short time span, and as a result, the server is stressed and gradually its performance has reduced. He further performed analysis on the information based on the past and present experience and concludes the attack experienced by the client organization.
Which of the following attacks is performed on the client organization?

A) Bandwidth attack
B) Distributed Denial-of-Service (DDoS) attack
C) DHCP attacks
D) MAC spoofing attack

Solutions: