最新のCPTIA問題集で試験を準備する

CREST CPTIA 試験概要:

CREST CPTIA 試験シラバストピック:

CREST Practitioner Threat Intelligence Analyst 認定 CPTIA 試験問題：

問題 #1

A threat analyst obtains an intelligence related to a threat, where the data is sent in the form of a connection request from a remote host to the server. From this data, he obtains only the IP address of the source and destination but no contextual information. While processing this data, he obtains contextual information stating that multiple connection requests from different geo-locations are received by the server within a short time span, and as a result, the server is stressed and gradually its performance has reduced. He further performed analysis on the information based on the past and present experience and concludes the attack experienced by the client organization.
Which of the following attacks is performed on the client organization?

A. DHCP attacks
B. Bandwidth attack
C. Distributed Denial-of-Service (DDoS) attack
D. MAC spoofing attack

問題 #2

Michael is a part of the computer incident response team of a company. One of his responsibilities is to handle email incidents. The company receives an email from an unknown source, and one of the steps that he needs to take is to check the validity of the email. Which of the following tools should he use?

A. G Suite Toolbox
B. Email Dossier
C. Yesware
D. Zendio

問題 #3

If a hacker cannot find any other way to attack an organization, they can influence an employee or a disgruntled staff member. What type of threat is this?

A. Insider attack
B. Footprinting
C. Phishing attack
D. Identity theft

問題 #4

Which of the following is a standard framework that provides recommendations for implementing information security controls for organizations that initiate, implement, or maintain information security management systems (ISMSs)?

A. RFC 219G
B. ISO/IEC 27035
C. ISO/IEC 27002
D. PCI DSS

問題 #5

John, a professional hacker, is trying to perform APT attack on the target organization network. He gains access to a single system of a target organization and tries to obtain administrative login credentials to gain further access to the systems in the network using various techniques.
What phase of the advanced persistent threat lifecycle is John currently in?

A. Persistence
B. Initial intrusion
C. Search and exfiltration
D. Expansion

解説：