[Dec-2021] Latest 312-85 Exam Dumps for Pass Guaranteed
Reliable Certified Threat Intelligence Analyst 312-85 Dumps PDF Dec 30, 2021 Recently Updated Questions
ECCouncil 312-85 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
| Topic 9 |
|
| Topic 10 |
|
| Topic 11 |
|
| Topic 12 |
|
| Topic 13 |
|
NEW QUESTION 21
Karry, a threat analyst at an XYZ organization, is performing threat intelligence analysis. During the data collection phase, he used a data collection method that involves no participants and is purely based on analysis and observation of activities and processes going on within the local boundaries of the organization.
Identify the type data collection method used by the Karry.
- A. Exploited data collection
- B. Raw data collection
- C. Passive data collection
- D. Active data collection
Answer: C
NEW QUESTION 22
Steve works as an analyst in a UK-based firm. He was asked to perform network monitoring to find any evidence of compromise. During the network monitoring, he came to know that there are multiple logins from different locations in a short time span. Moreover, he also observed certain irregular log in patterns from locations where the organization does not have business relations. This resembles that somebody is trying to steal confidential information.
Which of the following key indicators of compromise does this scenario present?
- A. Unusual activity through privileged user account
- B. Unusual outbound network traffic
- C. Geographical anomalies
- D. Unexpected patching of systems
Answer: A
NEW QUESTION 23
Michael, a threat analyst, works in an organization named TechTop, was asked to conduct a cyber-threat intelligence analysis. After obtaining information regarding threats, he has started analyzing the information and understanding the nature of the threats.
What stage of the cyber-threat intelligence is Michael currently in?
- A. Known knowns
- B. Unknowns unknown
- C. Unknown unknowns
- D. Known unknowns
Answer: D
NEW QUESTION 24
During the process of threat intelligence analysis, John, a threat analyst, successfully extracted an indication of adversary's information, such as Modus operandi, tools, communication channels, and forensics evasion strategies used by adversaries.
Identify the type of threat intelligence analysis is performed by John.
- A. Technical threat intelligence analysis
- B. Operational threat intelligence analysis
- C. Tactical threat intelligence analysis
- D. Strategic threat intelligence analysis
Answer: C
NEW QUESTION 25
Jame, a professional hacker, is trying to hack the confidential information of a target organization. He identified the vulnerabilities in the target system and created a tailored deliverable malicious payload using an exploit and a backdoor to send it to the victim.
Which of the following phases of cyber kill chain methodology is Jame executing?
- A. Reconnaissance
- B. Weaponization
- C. Installation
- D. Exploitation
Answer: B
NEW QUESTION 26
Joe works as a threat intelligence analyst with Xsecurity Inc. He is assessing the TI program by comparing the project results with the original objectives by reviewing project charter. He is also reviewing the list of expected deliverables to ensure that each of those is delivered to an acceptable level of quality.
Identify the activity that Joe is performing to assess a TI program's success or failure.
- A. Conducting a gap analysis
- B. Identifying areas of further improvement
- C. Determining the fulfillment of stakeholders
- D. Determining the costs and benefits associated with the program
Answer: A
NEW QUESTION 27
An analyst is conducting threat intelligence analysis in a client organization, and during the information gathering process, he gathered information from the publicly available sources and analyzed to obtain a rich useful form of intelligence. The information source that he used is primarily used for national security, law enforcement, and for collecting intelligence required for business or strategic decision making.
Which of the following sources of intelligence did the analyst use to collect information?
- A. ISAC
- B. OPSEC
- C. OSINT
- D. SIGINT
Answer: C
NEW QUESTION 28
Alice, an analyst, shared information with security operation managers and network operations center (NOC) staff for protecting the organizational resources against various threats. Information shared by Alice was highly technical and include threat actor TTPs, malware campaigns, tools used by threat actors, and so on.
Which of the following types of threat intelligence was shared by Alice?
- A. Strategic threat intelligence
- B. Operational threat intelligence
- C. Tactical threat intelligence
- D. Technical threat intelligence
Answer: D
NEW QUESTION 29
ABC is a well-established cyber-security company in the United States. The organization implemented the automation of tasks such as data enrichment and indicator aggregation. They also joined various communities to increase their knowledge about the emerging threats. However, the security teams can only detect and prevent identified threats in a reactive approach.
Based on threat intelligence maturity model, identify the level of ABC to know the stage at which the organization stands with its security and vulnerabilities.
- A. Level 0: vague where to start
- B. Level 2: increasing CTI capabilities
- C. Level 1: preparing for CTI
- D. Level 3: CTI program in place
Answer: B
NEW QUESTION 30
Daniel is a professional hacker whose aim is to attack a system to steal data and money for profit. He performs hacking to obtain confidential data such as social security numbers, personally identifiable information (PII) of an employee, and credit card information. After obtaining confidential data, he further sells the information on the black market to make money.
Daniel comes under which of the following types of threat actor.
- A. Insider threat
- B. Organized hackers
- C. Industrial spies
- D. State-sponsored hackers
Answer: B
NEW QUESTION 31
Kim, an analyst, is looking for an intelligence-sharing platform to gather and share threat information from a variety of sources. He wants to use this information to develop security policies to enhance the overall security posture of his organization.
Which of the following sharing platforms should be used by Kim?
- A. Cuckoo sandbox
- B. PortDroid network analysis
- C. Blueliv threat exchange network
- D. OmniPeek
Answer: C
NEW QUESTION 32
Sarah is a security operations center (SOC) analyst working at JW Williams and Sons organization based in Chicago. As a part of security operations, she contacts information providers (sharing partners) for gathering information such as collections of validated and prioritized threat indicators along with a detailed technical analysis of malware samples, botnets, DDoS attack methods, and various other malicious tools. She further used the collected information at the tactical and operational levels.
Sarah obtained the required information from which of the following types of sharing partner?
- A. Providers of threat indicators
- B. Providers of comprehensive cyber-threat intelligence
- C. Providers of threat actors
- D. Providers of threat data feeds
Answer: B
NEW QUESTION 33
Kathy wants to ensure that she shares threat intelligence containing sensitive information with the appropriate audience. Hence, she used traffic light protocol (TLP).
Which TLP color would you signify that information should be shared only within a particular community?
- A. White
- B. Red
- C. Green
- D. Amber
Answer: D
NEW QUESTION 34
A team of threat intelligence analysts is performing threat analysis on malware, and each of them has come up with their own theory and evidence to support their theory on a given malware.
Now, to identify the most consistent theory out of all the theories, which of the following analytic processes must threat intelligence manager use?
- A. Automated technical analysis
- B. Threat modelling
- C. Application decomposition and analysis (ADA)
- D. Analysis of competing hypotheses (ACH)
Answer: D
NEW QUESTION 35
Bob, a threat analyst, works in an organization named TechTop. He was asked to collect intelligence to fulfil the needs and requirements of the Red Tam present within the organization.
Which of the following are the needs of a RedTeam?
- A. Intelligence extracted latest attacks analysis on similar organizations, which includes details about latest threats and TTPs
- B. Intelligence that reveals risks related to various strategic business decisions
- C. Intelligence on latest vulnerabilities, threat actors, and their tactics, techniques, and procedures (TTPs)
- D. Intelligence related to increased attacks targeting a particular software or operating system vulnerability
Answer: C
NEW QUESTION 36
Miley, an analyst, wants to reduce the amount of collected data and make the storing and sharing process easy. She uses filtering, tagging, and queuing technique to sort out the relevant and structured data from the large amounts of unstructured data.
Which of the following techniques was employed by Miley?
- A. Data visualization
- B. Sandboxing
- C. Convenience sampling
- D. Normalization
Answer: D
NEW QUESTION 37
Cybersol Technologies initiated a cyber-threat intelligence program with a team of threat intelligence analysts. During the process, the analysts started converting the raw data into useful information by applying various techniques, such as machine-based techniques, and statistical methods.
In which of the following phases of the threat intelligence lifecycle is the threat intelligence team currently working?
- A. Processing and exploitation
- B. Planning and direction
- C. Dissemination and integration
- D. Analysis and production
Answer: C
NEW QUESTION 38
Enrage Tech Company hired Enrique, a security analyst, for performing threat intelligence analysis. While performing data collection process, he used a counterintelligence mechanism where a recursive DNS server is employed to perform interserver DNS communication and when a request is generated from any name server to the recursive DNS server, the recursive DNS servers log the responses that are received. Then it replicates the logged data and stores the data in the central database. Using these logs, he analyzed the malicious attempts that took place over DNS infrastructure.
Which of the following cyber counterintelligence (CCI) gathering technique has Enrique used for data collection?
- A. Data collection through passive DNS monitoring
- B. Data collection through DNS zone transfer
- C. Data collection through DNS interrogation
- D. Data collection through dynamic DNS (DDNS)
Answer: C
NEW QUESTION 39
......
Latest 2021 Realistic Verified 312-85 Dumps: https://www.fast2test.com/312-85-premium-file.html
Pass Your ECCouncil 312-85 Exam with Correct 50 Questions and Answers: https://drive.google.com/open?id=1T030aUsfLSuJa27HEVhRustZtnXK3S36