CK Cyber 2 - LO1.2.A

What is the primary purpose of Cyber Threat Intelligence (CTI)?

• To create new software applications

• To understand adversaries’ motives, targets, and attack behaviors

• To design network architectures

• To develop marketing strategies

What type of intelligence is gathered from publicly available information sources on the open internet?

• Human Intelligence (HUMINT)

• Signals Intelligence (SIGINT)

• Open Source Intelligence (OSINT)

• Geospatial Intelligence (GEOINT)

Why do organizations prioritize CTI that focuses on their industry?

• Because it is cheaper to obtain

• Because adversaries develop specific tactics, techniques, and procedures (TTPs) for different sectors

• Because it is easier to understand

• Because it is more entertaining

Which of the following is NOT typically a focus of threat intelligence analysis?

• Extracting information from multiple sources

• Synthesizing information

• Summarizing information

• Designing new hardware

Which of the following is considered actionable information in threat intelligence analysis?

• Malicious file signatures

• Company financial reports

• Employee satisfaction surveys

• Weather forecasts

What is a malicious URL?

• A website that provides free educational resources

• A uniform resource locator that is used to deliver malware or conduct phishing attacks

• A link to a government website

• A URL that leads to a social media page

What is the role of a cyber defender in relation to CTI?

• To create new viruses

• To proactively block attacks using threat intelligence

• To design video games

• To write novels

Which of the following is a source of open source intelligence (OSINT)?

• Classified government documents

• Publicly available internet forums

• Private company emails

• Encrypted messaging apps

What does TTP stand for in the context of cyber threat intelligence?

• Technical Training Program

• Tactics, Techniques, and Procedures

• Time Travel Protocol

• Total Threat Protection

Which of the following is NOT an example of actionable threat intelligence?

• Malicious file signatures

• Threat source identification

• Malicious URLs

• Daily weather updates