CREST CREST Threat Intelligence & Risk Assessment

Question 1

What is the MITRE ATT&CK framework primarily used for in threat intelligence?

Accepted Answer

Cataloging adversary tactics, techniques, and procedures (TTPs)

Answer

Scanning networks for open ports

Answer

Generating CVSS scores

Answer

Automating patch management

Question 2

In threat intelligence, what does the Cyber Kill Chain model describe?

Accepted Answer

The seven stages of a cyberattack from reconnaissance to actions on objectives

Answer

The lifecycle of a CVE from discovery to patch

Answer

The NIST incident response phases

Answer

The stages of malware reverse engineering

Question 3

What is the primary purpose of a Threat Intelligence Platform (TIP) in a security operations context?

Accepted Answer

Aggregating, correlating, and operationalizing threat data from multiple sources

Answer

Running automated penetration tests

Answer

Managing vulnerability scan schedules

Answer

Providing employee security awareness training

Question 4

Which threat intelligence category focuses on understanding adversary motivations, capabilities, and strategic intentions?

Accepted Answer

Strategic intelligence

Answer

Tactical intelligence

Answer

Operational intelligence

Answer

Technical intelligence

Question 5

What does a CVSS (Common Vulnerability Scoring System) base score measure?

Accepted Answer

The intrinsic severity of a vulnerability independent of environment

Answer

The business impact of a vulnerability specific to an organization

Answer

The likelihood that a vulnerability will be exploited in the next 30 days

Answer

The cost to remediate a vulnerability

Question 6

In risk assessment, what is the formula for calculating risk?

Accepted Answer

Risk = Likelihood × Impact

Answer

Risk = Threat × Asset Value

Answer

Risk = Vulnerability ÷ Control

Answer

Risk = Threat − Countermeasure