CREST Threat Intelligence & Analysis 2

Question 1

What does the Cyber Kill Chain model describe?

Accepted Answer

The stages of a cyberattack from reconnaissance through to the attacker achieving their objectives

Answer

The Cyber Kill Chain, developed by Lockheed Martin, describes seven stages of a targeted attack: reconnaissance, weaponization, delivery, exploitation, installation, command-and-control, and actions on objectives.

Question 2

Which threat actor category is typically characterized by nation-state backing and long-term persistent access to targeted networks?

Accepted Answer

Advanced Persistent Threat (APT)

Answer

APT groups are sophisticated, well-funded actors typically linked to nation-states who conduct long-term espionage or sabotage campaigns against high-value targets.

Question 3

What is OSINT (Open Source Intelligence) as used in security threat analysis?

Accepted Answer

Intelligence gathered from publicly available sources such as social media, websites, and databases

Answer

OSINT involves collecting and analyzing information from publicly accessible sources to support threat intelligence, attack surface mapping, and adversary profiling.

Question 4

What is the primary goal of threat hunting?

Accepted Answer

Proactively searching for hidden threats that have evaded automated detection

Answer

Threat hunting is a proactive, hypothesis-driven investigation of networks and systems to find adversaries who have bypassed automated detection controls.

Question 5

Which type of threat intelligence focuses on understanding the strategic motivations and goals of adversary groups?

Accepted Answer

Strategic intelligence

Answer

Strategic intelligence provides high-level insight into threat actor motivations, geopolitical context, and long-term trends, informing executive-level security decisions.

(CREST) Council for Registered Ethical Security Testers Practice Test

(CREST) Council for Registered Ethical Security Testers Practice Test

CREST Threat Intelligence & Analysis 2