An organization suffered many major attacks and lost critical information, such as employee records, and financial information. Therefore, the management decides to hire a threat analyst to extract the strategic threat intelligence that provides high-level information regarding current cyber-security posture, threats, details on the financial impact of various cyber-activities, and so on.
Which of the following sources will help the analyst to collect the required intelligence?

1. A. Active campaigns, attacks on other organizations, data feeds from external third parties
2. B. OSINT, CTI vendors, ISAO/ISACs
3. C. Campaign reports, malware, incident reports, attack group reports, human intelligence
4. D. Human, social media, chat rooms

Correct Answer: B

Jame, a professional hacker, is trying to hack the confidential information of a target organization. He identified the vulnerabilities in the target system and created a tailored deliverable malicious payload using an exploit and a backdoor to send it to the victim.
Which of the following phases of cyber kill chain methodology is Jame executing?

1. A. Reconnaissance
2. B. Installation
3. C. Weaponization
4. D. Exploitation

Correct Answer: C

Kim, an analyst, is looking for an intelligence-sharing platform to gather and share threat information from a variety of sources. He wants to use this information to develop security policies to enhance the overall security posture of his organization.
Which of the following sharing platforms should be used by Kim?

1. A. Cuckoo sandbox
2. B. OmniPeek
3. C. PortDroid network analysis
4. D. Blueliv threat exchange network

Correct Answer: D

Karry, a threat analyst at an XYZ organization, is performing threat intelligence analysis. During the data collection phase, he used a data collection method that involves no participants and is purely based on analysis and observation of activities and processes going on within the local boundaries of the organization.
Identify the type data collection method used by the Karry.

1. A. Active data collection
2. B. Passive data collection
3. C. Exploited data collection
4. D. Raw data collection

Correct Answer: B

Andrews and Sons Corp. has decided to share threat information among sharing partners. Garry, a threat analyst, working in Andrews and Sons Corp., has asked to follow a trust model necessary to establish trust between sharing partners. In the trust model used by him, the first organization makes use of a body of evidence in a second organization, and the level of trust between two organizations depends on the degree and quality of evidence provided by the first organization.
Which of the following types of trust model is used by Garry to establish the trust?

1. A. Mediated trust
2. B. Mandated trust
3. C. Direct historical trust
4. D. Validated trust

Correct Answer: D