CySA+ Test Threat Intelligence 5

Question 1

Which threat intelligence concept describes the process of converting raw data into finished intelligence products through collection, processing, analysis, and dissemination?

Accepted Answer

Intelligence cycle

Answer

The intelligence cycle (direction, collection, processing, analysis, dissemination, feedback) is the foundational process for producing actionable threat intelligence.

Question 2

An organization subscribes to an ISAC for threat intelligence. What is the primary benefit of ISAC membership?

Accepted Answer

Sector-specific threat sharing among trusted peers in the same industry

Answer

ISACs (Information Sharing and Analysis Centers) provide sector-specific threat intelligence sharing among trusted organizations in the same industry vertical.

Question 3

A threat analyst observes that a malware sample beacons to its C2 server every 300 seconds with a ±30 second jitter. Why does jitter matter for detection?

Accepted Answer

Jitter randomizes beacon intervals to evade time-based anomaly detection

Answer

C2 beacon jitter introduces randomness in communication timing to evade detection systems that flag regular, predictable heartbeat patterns.

Question 4

Which framework specifically maps adversary behaviors to pre-ATT&CK stages, covering actions from reconnaissance through actions on objectives, and was developed by Lockheed Martin?

Accepted Answer

Cyber Kill Chain

Answer

The Cyber Kill Chain, developed by Lockheed Martin, defines seven stages of an attack from reconnaissance to actions on objectives.

Question 5

When performing indicator enrichment, an analyst queries a passive DNS database. What unique value does passive DNS provide?

Accepted Answer

It reveals historical DNS resolutions, linking domains to past IP addresses

Answer

Passive DNS databases store historical DNS resolution records, allowing analysts to pivot from a domain to past IPs or from an IP to domains it has hosted.

CySA+ Practice Test

CySA+ Practice Test

CySA+ Test Threat Intelligence 5