Your company sells SaaS, and your company itself is hosted in the cloud (using it as a PaaS). In case of a malware incident in your customer's database, who is responsible for eradicating the malicious software?

• A. The customer
• B. Your company
• C. The PaaS provider
• D. Building management

An XYZ organization hired Mr. Andrews, a threat analyst. In order to identify the threats and mitigate the effect of such threats, Mr. Andrews was asked to perform threat modeling. During the process of threat modeling, he collected important information about the treat actor and characterized the analytic behavior of the adversary that includes technological details, goals, and motives that can be useful in building a strong countermeasure.
What stage of the threat modeling is Mr. Andrews currently in?

• A. Threat profiling and attribution
• B. System modeling
• C. Threat ranking
• D. Threat determination and identification

What is the most recent NIST standard for incident response?

• A. 800-171r2
• B. 800-53r3
• C. 800-61r2
• D. 800-61r3

Tim is working as an analyst in an ABC organization. His organization had been facing many challenges in converting the raw threat intelligence data into meaningful contextual information. After inspection, he found that it was due to noise obtained from misrepresentation of data from huge data collections. Hence, it is important to clean the data before performing data analysis using techniques such as data reduction. He needs to choose an appropriate threat intelligence framework that automatically performs data collection, filtering, and analysis for his organization.
Which of the following threat intelligence frameworks should he choose to perform such task?

• A. HighCharts
• B. Threat grid
• C. SIGVERIF
• D. TC complete

Which of the following is not a countermeasure to eradicate inappropriate usage incidents?

• A. Avoid VPN and other secure network channels
• B. Register the user activity logs and keep monitoring them regularly
• C. Always store the sensitive data in far located servers and restrict its access
• D. Install firewall and IDS/IPS to block services that violate the organization's policy