最新のGCTI問題集で試験を準備する

During the exploitation phase of the Cyber Kill Chain, what does the adversary typically do?
Response:

• A. Execute code on the target system
• B. Delete system logs
• C. Send phishing emails
• D. Scan the target network for vulnerabilities

Which of the following is a key factor when considering cyber attack attribution?
Response:

• A. The color scheme of the phishing email
• B. Number of employees affected
• C. Type of data compromised
• D. Attack signatures and malware used

What are two ways that cyber intelligence analysts can improve the application of threat intelligence?
Response:

• A. Relying solely on external threat feeds
• B. Integrating threat intelligence into security information and event management (SIEM) tools
• C. Ignoring internal threat data
• D. Automating data collection and analysis

Why is pivoting critical in uncovering hidden threat infrastructure?
Response:

• A. It increases network encryption
• B. It allows investigators to uncover related domains, IP addresses, or files linked to the same threat
• C. It provides faster network access
• D. It deletes malware from infected systems

You are tasked with sharing threat intelligence regarding a critical vulnerability affecting multiple organizations in your industry. What steps should you take to ensure the intelligence is communicated effectively to both technical and non-technical stakeholders?
(Select three)
Response:

• A. Use a standardized format like STIX to share detailed technical information
• B. Encrypt the intelligence data before sharing it externally
• C. Present the key findings in a simplified format for non-technical stakeholders
• D. Share only with internal security teams
• E. Avoid providing recommendations to prevent overwhelming stakeholders