CCP Cyber Threat Intelligence Lifecycle 2

Question 1

During the 'Direction' phase of the CTI lifecycle, what is the primary output produced?

Accepted Answer

Intelligence requirements and collection priorities

Answer

The Direction phase establishes intelligence requirements that guide what information will be collected and how resources are prioritized.

Question 2

A CTI analyst discovers that raw OSINT data contains significant noise and irrelevant information. Which lifecycle phase should address this problem?

Accepted Answer

Processing

Answer

The Processing phase normalizes, filters, and structures raw collected data to remove noise and make it suitable for analysis.

Question 3

Which feedback mechanism in the CTI lifecycle ensures intelligence products remain aligned with stakeholder needs over time?

Accepted Answer

Post-dissemination feedback loops

Answer

Post-dissemination feedback loops allow consumers to evaluate the intelligence's relevance and accuracy, informing future Direction phase decisions.

Question 4

An organization wants to understand the long-term strategic motivations of a nation-state adversary. Which type of intelligence should the CTI lifecycle produce?

Accepted Answer

Strategic intelligence

Answer

Strategic intelligence addresses high-level adversary motivations, geopolitical context, and long-term trends to support executive decision-making.

Question 5

During the Analysis phase, a CTI team uses the Diamond Model to characterize an intrusion. Which four core features does this model relate?

Accepted Answer

Adversary, capability, infrastructure, and victim

Answer

The Diamond Model links adversary, capability, infrastructure, and victim as the four core features of any intrusion event.

(CCP) Certified Cyber Professional Practice Test

(CCP) Certified Cyber Professional Practice Test

CCP Cyber Threat Intelligence Lifecycle 2