CPTIA無料問題集「CREST Practitioner Threat Intelligence Analyst」

質問 1

Sam works as an analyst in an organization named InfoTech Security. He was asked to collect information from various threat intelligence sources. In meeting the deadline, he forgot to verify the threat intelligence sources and used data from an open-source data provider, who offered it at a very low cost. Through it was beneficial at the initial stage but relying on such data providers can produce unreliable data and noise putting the organization network into risk.
What mistake Sam did that led to this situation?

（A）Sam did not use the proper technology to use or consume the information.

（B）Sam did not use the proper standardization formats for representing threat data.

（C）Sam used unreliable intelligence sources.

（D）Sam used data without context.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

Tibson works as an incident responder for MNC based in Singapore. He is investigating a web application security incident recently faced by the company. The attack is performed on a MS SQL Server hosted by the company. In the detection and analysis phase, he used regular expressions to analyze and detect SQL meta-characters that led to SQL injection attack.
Identify the regular expression used by Tibson to detect SQL injection attack on MS SQL Server.

（A）((\.\.\\)|(\.\.\/))

（B）((\.|%2E)(\.|%2E)(\/|%2F|\\|%5C))

（C）/exec(\s|\+)+(s|x)p\w+/ix

（D）((\%3C)|<)((\%2F)|\/)*(script)((\%3E)|>)

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

What is the most recent NIST standard for incident response?

（A）800-61r3

（B）800-53r3

（C）800-171r2

（D）800-61r2

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Identify Sarbanes-Oxley Act (SOX) Title, which consists of only one section, that includes measures designed to help restore investor confidence in the reporting of securities analysts.

（A）Title V: Analyst Conflicts of Interest

（B）Title VII: Studies and Reports

（C）Title IX: White-Collar-Crime Penalty Enhancement

（D）Title VIII: Corporate and Criminal Fraud Accountability

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Which of the following is not the responsibility of first responders?

（A）Protecting the crime scene

（B）Identifying the crime scene

（C）Packaging and transporting the electronic evidence

（D）Preserving temporary and fragile evidence and then shut down or reboot the victim's computer

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Which of the following tools helps incident responders effectively contain a potential cloud security incident and gather required forensic evidence?

（A）Qualys Cloud Platform

（B）CloudPassage Quarantine

（C）Cloud Passage Halo

（D）Alert Logic

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

In which of the following forms of bulk data collection are large amounts of data first collected from multiple sources in multiple formats and then processed to achieve threat intelligence?

（A）Hybrid form

（B）Structured form

（C）Production form

（D）Unstructured form

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

CPTIA 無料問題集「CREST Practitioner Threat Intelligence Analyst」

弊社を連絡する

関連リンク

トップ試験