最新のCPTIA問題集で試験を準備する

CREST CPTIA 試験概要:

CREST CPTIA 試験シラバストピック:

CREST Practitioner Threat Intelligence Analyst 認定 CPTIA 試験問題：

問題 #1

Miley, an analyst, wants to reduce the amount of collected data and make the storing and sharing process easy. She uses filtering, tagging, and queuing technique to sort out the relevant and structured data from the large amounts of unstructured data.
Which of the following techniques was employed by Miley?

A. Data visualization
B. Convenience sampling
C. Sandboxing
D. Normalization

問題 #2

Eric works as a system administrator in ABC organization. He granted privileged users with unlimited permissions to access the systems. These privileged users can misuse their rights unintentionally or maliciously or attackers can trick them to perform malicious activities.
Which of the following guidelines helps incident handlers to eradicate insider attacks by privileged users?

A. Do not allow administrators to use unique accounts during the installation process
B. Do not enable the default administrative accounts to ensure accountability
C. Do not use encryption methods to prevent administrators and privileged users from accessing backup tapes and sensitive information
D. Do not control the access to administrators and privileged users

問題 #3

An organization suffered many major attacks and lost critical information, such as employee records, and financial information. Therefore, the management decides to hire a threat analyst to extract the strategic threat intelligence that provides high-level information regarding current cyber-security posture, threats, details on the financial impact of various cyber-activities, and so on.
Which of the following sources will help the analyst to collect the required intelligence?

A. OSINT, CTI vendors, ISAO/ISACs
B. Human, social media, chat rooms
C. Active campaigns, attacks on other organizations, data feeds from external third parties
D. Campaign reports, malware, incident reports, attack group reports, human intelligence

問題 #4

Jian is a member of the security team at Trinity, Inc. He was conducting a real-time assessment of system activities in order to acquire threat intelligence feeds. Heacquired feeds from sources like honeynets, P2P monitoring. infrastructure, and application logs.
Which of the following categories of threat intelligence feed was acquired by Jian?

A. Proactive surveillance feeds
B. CSV data feeds
C. Internal intelligence feeds
D. External intelligence feeds

問題 #5

What is the most recent NIST standard for incident response?

A. 800-61r2
B. 800-53r3
C. 800-171r2
D. 800-61r3

解説：