최신 CREST Practitioner CPTIA 무료샘플문제:

1. XYZ Inc. was affected by a malware attack and James, being the incident handling and response (IH&R) team personnel handling the incident, found out that the root cause of the incident is a backdoor that has bypassed the security perimeter due to an existing vulnerability in the deployed firewall. James had contained the spread of the infection and removed the malware completely. Now the organization asked him to perform incident impact assessment to identify the impact of the incident over the organization and he was also asked to prepare a detailed report of the incident.
Which of the following stages in IH&R process is James working on?

A) Post-incident activities
B) Notification
C) Evidence gathering and forensics analysis
D) Eradication

2. Tim is working as an analyst in an ABC organization. His organization had been facing many challenges in converting the raw threat intelligence data into meaningful contextual information. After inspection, he found that it was due to noise obtained from misrepresentation of data from huge data collections. Hence, it is important to clean the data before performing data analysis using techniques such as data reduction. He needs to choose an appropriate threat intelligence framework that automatically performs data collection, filtering, and analysis for his organization.
Which of the following threat intelligence frameworks should he choose to perform such task?

A) SIGVERIF
B) Threat grid
C) TC complete
D) HighCharts

3. Which of the following best describes an email issued as an attack medium, in which several messages are sent to a mailbox to cause overflow?

A) Masquerading
B) Email-bombing
C) Smurf attack
D) Spoofing

4. Alice, an analyst, shared information with security operation managers and network operations center (NOC) staff for protecting the organizational resources against various threats. Information shared by Alice was highly technical and include threat actor TTPs, malware campaigns, tools used by threat actors, and so on.
Which of the following types of threat intelligence was shared by Alice?

A) Strategic threat intelligence
B) Operational threat intelligence
C) Tactical threat intelligence
D) Technical threat intelligence

5. Investigator Ian gives you a drive image to investigate. What type of analysis are you performing?

A) Dynamic
B) Static
C) Live
D) Real-time

질문과 대답: