~/eccouncil-ctia · study ▊

practice sheet · all objectives switch to smart practice →

Certified Threat Intelligence Analyst (C|TIA)

0/44 checked

Q_01 domain/d1 · medium single discuss →

During a team discussion, a junior analyst uses the words 'data,' 'information,' and 'intelligence' interchangeably when describing raw log entries. According to the foundational concepts covered in the Introduction to Threat Intelligence module, why is this a problem?

A There is no meaningful distinction; the terms are synonyms in modern practice
B The module treats these as distinct concepts with key differences that analysts must understand
C Only 'intelligence' and 'information' differ, while 'data' is a legacy term no longer used
D The distinction only matters in the threat hunting module, not the introduction

Q_02 domain/d1 · medium multi discuss →

A CISO asks a new threat intelligence team to demonstrate how mature their program is and to measure its effectiveness over time. Based on the Introduction to Threat Intelligence topics, which two concepts most directly support this request?

A Threat intelligence lifecycles and maturity models
B Using threat intelligence standards or frameworks to measure effectiveness
C Establishing a Splunk Attack Range lab
D Conducting OSINT investigations with TraceLabs
E Building a sample threat actor profile

Q_03 domain/d1 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_04 domain/d1 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_05 domain/d1 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_06 domain/d1 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_07 domain/d2 · easy single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_08 domain/d2 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_09 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_10 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_11 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_12 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_13 domain/d2 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_14 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_15 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_16 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_17 domain/d3 · easy single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_18 domain/d3 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_19 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_20 domain/d4 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_21 domain/d4 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_22 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_23 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_24 domain/d4 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_25 domain/d4 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_26 domain/d5 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_27 domain/d5 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_28 domain/d5 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_29 domain/d5 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_30 domain/d5 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_31 domain/d6 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_32 domain/d6 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_33 domain/d6 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_34 domain/d6 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_35 domain/d7 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_36 domain/d7 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_37 domain/d7 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_38 domain/d7 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_39 domain/d8 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_40 domain/d8 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_41 domain/d8 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_42 domain/d8 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_43 domain/d8 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_44 domain/d8 · medium multi

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

42 questions locked

unlock all 42 questions