공부한 내용이 실제 점수로 이어지는지 궁금하신가요? KoreaDumps의 CPTIA 테스트 엔진은 CREST Practitioner Threat Intelligence Analyst 시험 환경을 재현하고 현재 실력으로 어느 정도의 점수를 받을 수 있는지도 확인해 줍니다.

CREST CPTIA 시험 개요:

CREST CPTIA 시험 요강 주제:

CREST Practitioner Threat Intelligence Analyst에 대해 알아야 할 모든 것

최신 CREST Practitioner CPTIA 무료샘플문제

문제 #1

Your company sells SaaS, and your company itself is hosted in the cloud (using it as a PaaS). In case of a malware incident in your customer's database, who is responsible for eradicating the malicious software?

A. The customer
B. Your company
C. The PaaS provider
D. Building management

문제 #2

An XYZ organization hired Mr. Andrews, a threat analyst. In order to identify the threats and mitigate the effect of such threats, Mr. Andrews was asked to perform threat modeling. During the process of threat modeling, he collected important information about the treat actor and characterized the analytic behavior of the adversary that includes technological details, goals, and motives that can be useful in building a strong countermeasure.
What stage of the threat modeling is Mr. Andrews currently in?

A. Threat profiling and attribution
B. System modeling
C. Threat ranking
D. Threat determination and identification

문제 #3

What is the most recent NIST standard for incident response?

A. 800-171r2
B. 800-53r3
C. 800-61r2
D. 800-61r3

문제 #4

Tim is working as an analyst in an ABC organization. His organization had been facing many challenges in converting the raw threat intelligence data into meaningful contextual information. After inspection, he found that it was due to noise obtained from misrepresentation of data from huge data collections. Hence, it is important to clean the data before performing data analysis using techniques such as data reduction. He needs to choose an appropriate threat intelligence framework that automatically performs data collection, filtering, and analysis for his organization.
Which of the following threat intelligence frameworks should he choose to perform such task?

A. HighCharts
B. Threat grid
C. SIGVERIF
D. TC complete

문제 #5

Which of the following is not a countermeasure to eradicate inappropriate usage incidents?

A. Avoid VPN and other secure network channels
B. Register the user activity logs and keep monitoring them regularly
C. Always store the sensitive data in far located servers and restrict its access
D. Install firewall and IDS/IPS to block services that violate the organization's policy

질문과 대답: