Prep and try our CPTIA valid and latest training questions & answers

CREST CPTIA Exam Overview:

CREST CPTIA Exam Syllabus Topics:

CREST Practitioner Threat Intelligence Analyst Sample Questions:

Question 1

An analyst is conducting threat intelligence analysis in a client organization, and during the information gathering process, he gathered information from the publicly available sources and analyzed to obtain a rich useful form of intelligence. The information source that he used is primarily used for national security, law enforcement, and for collecting intelligence required for business or strategic decision making.
Which of the following sources of intelligence did the analyst use to collect information?

A. ISAC
B. SIGINT
C. OPSEC
D. OSINT

Question 2

An organization suffered many major attacks and lost critical information, such as employee records, and financial information. Therefore, the management decides to hire a threat analyst to extract the strategic threat intelligence that provides high-level information regarding current cyber-security posture, threats, details on the financial impact of various cyber-activities, and so on.
Which of the following sources will help the analyst to collect the required intelligence?

A. Active campaigns, attacks on other organizations, data feeds from external third parties
B. Human, social media, chat rooms
C. OSINT, CTI vendors, ISAO/ISACs
D. Campaign reports, malware, incident reports, attack group reports, human intelligence

Question 3

Eric works as a system administrator at ABC organization and previously granted several users with access privileges to the organizations systems with unlimited permissions. These privileged users could prospectively misuse their rights unintentionally, maliciously, or could be deceived by attackers that could trick them to perform malicious activities. Which of the following guidelines would help incident handlers eradicate insider attacks by privileged users?

A. Do not control the access to administrator ano privileged users
B. Do not use encryption methods to prevent, administrators and privileged users from accessing backup tapes and sensitive information
C. Do not allow administrators to use unique accounts during the installation process
D. Do not enable default administrative accounts to ensure accountability

Question 4

If a hacker cannot find any other way to attack an organization, they can influence an employee or a disgruntled staff member. What type of threat is this?

A. Phishing attack
B. Insider attack
C. Identity theft
D. Footprinting

Question 5

Johnson an incident handler is working on a recent web application attack faced by the organization. As part of this process, he performed data preprocessing in order to analyzing and detecting the watering hole attack. He preprocessed the outbound network traffic data collected from firewalls and proxy servers and started analyzing the user activities within a certain time period to create time-ordered domain sequences to perform further analysis on sequential patterns.
Identify the data-preprocessing step performed by Johnson.

A. User-specific sessionization
B. Host name normalization
C. Filtering invalid host names
D. Identifying unpopular domains

Solutions: