Quiz Day 1 - CTIA - Konsep Cyber Threat Intelligence

Advanced persistent threat (APT) is ...

• define as a type of network attack where attacker gains unauthorized access to a target network and remains there undetected for a long period of time.

• huge network compromised systems used by attackers to perform denial-of-services attacks.

• defined as the collection and analysis of information about threats and adversaries.

• the clues/artifact/pieces of forensic data that is found on a network that indicates a potential intrusion or malicious activity.

... is a layer of online cyberspace that consists of web pages and content that are hidden and unindexed.

(a)  

... is a deeper layer of online cyberspace and it is the subset of deep web and enables everyone to navigate anonymously without being traced.

(a)  

A process that utilizes information to analyze and respond to emerging requirements of an organization is definition of.

• Intelligence

• Vulnerability

• Exploit

• Data

... is a possibility of performing malicious actions to damage the critical IT resources of a target organization.

• Cyber Threat

• Vulnerability

• Zero-Day Attack

• Exploit

There are 3 stages in achieving the intelligence called ...

• unknown unknowns - known unknowns - known knowns

• unknown unknowns - known knowns - known unknowns

• known knowns - known unknowns - unknown unknowns

• unknown unknowns - unknown knowns - known knowns

Michael, a threat analyst at an organization named Tech Top, was asked to conduct a cyber-threat intelligence analysis. After obtaining information regarding threats, he has started analyzing the information and understanding the nature of the threats. What stage of the cyber-threat intelligence is Michael currently in?

• Known unknowns

• Unknown unknowns

• Known knowns

• Unknowns unknown

An organization suffered many major attacks and lost critical information, such as employee records, and financial information. Therefore, the management decides to hire a threat analyst to extract the strategic threat intelligence that provides high-level information regarding current cyber-security posture, threats, details on the financial impact of various cyber-activities, and so on. Which of the following sources will help the analyst to collect the required intelligence?

• OSINT, CTI vendors, ISAO/ISACs

• Humans, social media, chat rooms

• Active campaigns, attacks on other organizations, data feeds from external third parties

• Campaign reports, malware, incident reports, attack group reports, human intelligence

Alice, an analyst, shared information with security operation managers and network operations center (NOC) staff for protecting the organizational resources against various threats. Information shared by Alice was highly technical and include threat actor TTPs, malware campaigns, tools used by threat actors, and so on.

Which of the following types of threat intelligence was shared by Alice?

• Tactical threat intelligence analysis

• Operational threat intelligence analysis

• Strategic threat intelligence analysis

• Technical threat intelligence analysis

Technical Threat Intelligence is about...

• Information on specific indicators of compromise

• Information on attacker's tactics, techniques, and procedures (TTPs).

• Information on specific incoming attack

• High-level information on changing risks