100% CREST CPTIA Guaranteed Success With Testing Engine

CREST CPTIA Exam Overview:

CREST CPTIA Exam Syllabus Topics:

CREST Practitioner Threat Intelligence Analyst Sample Questions:

1. John, a professional hacker, is trying to perform APT attack on the target organization network. He gains access to a single system of a target organization and tries to obtain administrative login credentials to gain further access to the systems in the network using various techniques.
What phase of the advanced persistent threat lifecycle is John currently in?

A) Search and exfiltration
B) Persistence
C) Expansion
D) Initial intrusion

2. A threat analyst obtains an intelligence related to a threat, where the data is sent in the form of a connection request from a remote host to the server. From this data, he obtains only the IP address of the source and destination but no contextual information. While processing this data, he obtains contextual information stating that multiple connection requests from different geo-locations are received by the server within a short time span, and as a result, the server is stressed and gradually its performance has reduced. He further performed analysis on the information based on the past and present experience and concludes the attack experienced by the client organization.
Which of the following attacks is performed on the client organization?

A) Distributed Denial-of-Service (DDoS) attack
B) DHCP attacks
C) Bandwidth attack
D) MAC spoofing attack

3. Karry, a threat analyst at an XYZ organization, is performing threat intelligence analysis. During the data collection phase, he used a data collection method that involves no participants and is purely based on analysis and observation of activities and processes going on within the local boundaries of the organization.
Identify the type data collection method used by the Karry.

A) Raw data collection
B) Passive data collection
C) Exploited data collection
D) Active data collection

4. A threat analyst obtains an intelligence related to a threat, where the data is sent in the form of a connection request from a remote host to the server. From this data, he obtains only the IP address of the source and destination but no contextual information. While processing this data, he obtains contextual information stating that multiple connection requests from different geo-locations are received by the server within a short time span, and as a result, the server is stressed and gradually its performance has reduced. He further performed analysis on the information based on the past and present experience and concludes the attack experienced by the client organization.
Which of the following attacks is performed on the client organization?

A) Distributed Denial-of-Service (DDoS) attack
B) DHCP attacks
C) Bandwidth attack
D) MAC spoofing attack

5. Richard is analyzing a corporate network. After an alert in the network's IPS. he identified that all the servers are sending huge amounts of traffic to the website abc.xyz. What type of information security attack vectors have affected the network?

A) Botnet
B) IOT threats
C) Ransomware
D) Advance persistent three Is

Solutions: