Prepare with reliable CPTIA Pass-King Test Braindumps

CREST CPTIA Exam Overview:

CREST CPTIA Exam Syllabus Topics:

CREST Practitioner Threat Intelligence Analyst Sample Questions:

1. Robert is an incident handler working for Xsecurity Inc. One day, his organization faced a massive cyberattack and all the websites related to the organization went offline. Robert was on duty during the incident and he was responsible to handle the incident and maintain business continuity. He immediately restored the web application service with the help of the existing backups.
According to the scenario, which of the following stages of incident handling and response (IH&R) process does Robert performed?

A) Recovery
B) Evidence gathering and forensics analysis
C) Eradication
D) Notification

2. Tim is working as an analyst in an ABC organization. His organization had been facing many challenges in converting the raw threat intelligence data into meaningful contextual information. After inspection, he found that it was due to noise obtained from misrepresentation of data from huge data collections. Hence, it is important to clean the data before performing data analysis using techniques such as data reduction. He needs to choose an appropriate threat intelligence framework that automatically performs data collection, filtering, and analysis for his organization.
Which of the following threat intelligence frameworks should he choose to perform such task?

A) TC complete
B) HighCharts
C) SIGVERIF
D) Threat grid

3. Steve works as an analyst in a UK-based firm. He was asked to perform network monitoring to find any evidence of compromise. During the network monitoring, he came to know that there are multiple logins from different locations in a short time span. Moreover, he also observed certain irregular log in patterns from locations where the organization does not have business relations. This resembles that somebody is trying to steal confidential information.
Which of the following key indicators of compromise does this scenario present?

A) Unusual outbound network traffic
B) Unexpected patching of systems
C) Geographical anomalies
D) Unusual activity through privileged user account

4. Eric works as a system administrator in ABC organization. He granted privileged users with unlimited permissions to access the systems. These privileged users can misuse their rights unintentionally or maliciously or attackers can trick them to perform malicious activities.
Which of the following guidelines helps incident handlers to eradicate insider attacks by privileged users?

A) Do not allow administrators to use unique accounts during the installation process
B) Do not enable the default administrative accounts to ensure accountability
C) Do not control the access to administrators and privileged users
D) Do not use encryption methods to prevent administrators and privileged users from accessing backup tapes and sensitive information

5. Investigator Ian gives you a drive image to investigate. What type of analysis are you performing?

A) Live
B) Real-time
C) Static
D) Dynamic

Solutions: