ECCouncil 312-85 : Certified Threat Intelligence Analyst

Kira works as a security analyst in an organization. She was asked to define and set up the requirements before collecting threat intelligence information. The requirements should focus on what must be collected in order to fulfil production intelligence.
Which of the following categories of threat intelligence requirements should Kira focus on?

• A. Production requirements
• B. Collection requirements
• C. Intelligence requirements
• D. Business requirements

In a team of threat analysts, two individuals were competing over projecting their own hypotheses on a given malware. However, to find logical proofs to confirm their hypotheses, the threat intelligence manager used a de-biasing strategy that involves learning strategic decision making in the circumstances comprising multistep interactions with numerous representatives, either having or without any perfect relevant information.
Which of the following de-biasing strategies the threat intelligence manager used to confirm their hypotheses?

• A. Decision theory
• B. Machine learning
• C. Game theory
• D. Cognitive psychology

ABC is a well-established cyber-security company in the United States. The organization implemented the automation of tasks such as data enrichment and indicator aggregation. They also joined various communities to increase their knowledge about the emerging threats. However, the security teams can only detect and prevent identified threats in a reactive approach.
Based on threat intelligence maturity model, identify the level of ABC to know the stage at which the organization stands with its security and vulnerabilities.

• A. Level 1: preparing for CTI
• B. Level 0: vague where to start
• C. Level 2: increasing CTI capabilities
• D. Level 3: CTI program in place

A threat analyst wants to incorporate a requirement in the threat knowledge repository that provides an ability to modify or delete past or irrelevant threat data.
Which of the following requirement must he include in the threat knowledge repository to fulfil his needs?

• A. Protection ranking
• B. Data management
• C. Evaluating performance
• D. Searchable functionality

Moses, a threat intelligence analyst at InfoTec Inc., wants to find crucial information about the potential threats the organization is facing by using advanced Google search operators. He wants to identify whether any fake websites are hosted at the similar to the organization's URL.
Which of the following Google search queries should Moses use?

• A. related: www.infothech.org
• B. info: www.infothech.org
• C. cache: www.infothech.org
• D. link: www.infothech.org