CSX Surveillance & Intelligence Gathering 3

Question 1

An attacker uses LinkedIn to map reporting structures, employee roles, and technology stacks at a target organization. Which phase of the intelligence lifecycle does this represent?

Accepted Answer

Collection

Answer

Harvesting information from social media and professional networks to feed into an intelligence assessment is a collection activity in the intelligence lifecycle.

Question 2

Which DNS record type, when misconfigured to allow unauthenticated queries, can reveal an organization's entire internal host list to an attacker?

Accepted Answer

Zone transfer (AXFR)

Answer

An unrestricted DNS zone transfer (AXFR query) allows any requester to download all DNS records for a zone, exposing internal hostnames, IP addresses, and network topology.

Question 3

Maltego is primarily used by security practitioners for:

Accepted Answer

Visualizing relationships between entities during OSINT investigations

Answer

Maltego transforms raw OSINT data into graphical link charts that reveal relationships between people, domains, IP addresses, and organizations.

Question 4

What is 'traffic analysis' in the context of surveillance, even when communications are encrypted?

Accepted Answer

Inferring information from communication patterns such as timing, frequency, and endpoints

Answer

Traffic analysis derives intelligence from metadata—who communicates with whom, how often, at what times, and how much data is exchanged—without decrypting the payload.

Question 5

Which term describes a curated set of adversary TTPs, infrastructure indicators, and attribution data collected from multiple intelligence sources about a specific threat actor?

Accepted Answer

Threat actor profile

Answer

A threat actor profile consolidates all available intelligence about a specific adversary group, including their motivations, capabilities, and historical TTPs, to support proactive defense.

(CSX) Cybersecurity Nexus Certification Practice Test

(CSX) Cybersecurity Nexus Certification Practice Test

CSX Surveillance & Intelligence Gathering 3