A Review Of Actual 312-85 Free Dumps

NEW QUESTION 1
Which of the following characteristics of APT refers to numerous attempts done by the attacker to gain entry to the target’s network?

• A. Risk tolerance
• B. Timeliness
• C. Attack origination points
• D. Multiphased

Answer: C

NEW QUESTION 2
Jian is a member of the security team at Trinity, Inc. He was conducting a real-time assessment of system activities in order to acquire threat intelligence feeds. He acquired feeds from sources like honeynets, P2P monitoring. infrastructure, and application logs.
Which of the following categories of threat intelligence feed was acquired by Jian?

• A. Internal intelligence feeds
• B. External intelligence feeds
• C. CSV data feeds
• D. Proactive surveillance feeds

Answer: A

NEW QUESTION 3
In which of the following forms of bulk data collection are large amounts of data first collected from multiple sources in multiple formats and then processed to achieve threat intelligence?

• A. Structured form
• B. Hybrid form
• C. Production form
• D. Unstructured form

Answer: D

NEW QUESTION 4
Moses, a threat intelligence analyst at InfoTec Inc., wants to find crucial information about the potential threats the organization is facing by using advanced Google search operators. He wants to identify whether any fake websites are hosted at the similar to the organization’s URL.
Which of the following Google search queries should Moses use?

• A. related: www.infothech.org
• B. info: www.infothech.org
• C. link: www.infothech.org
• D. cache: www.infothech.org

Answer: A

NEW QUESTION 5
Which of the following components refers to a node in the network that routes the traffic from a workstation to external command and control server and helps in identification of installed malware in the network?

• A. Repeater
• B. Gateway
• C. Hub
• D. Network interface card (NIC)

Answer: B

NEW QUESTION 6
Andrews and Sons Corp. has decided to share threat information among sharing partners. Garry, a threat analyst, working in Andrews and Sons Corp., has asked to follow a trust model necessary to establish trust between sharing partners. In the trust model used by him, the first organization makes use of a body of evidence in a second organization, and the level of trust between two organizations depends on the degree and quality of evidence provided by the first organization.
Which of the following types of trust model is used by Garry to establish the trust?

• A. Mediated trust
• B. Mandated trust
• C. Direct historical trust
• D. Validated trust

Answer: D

NEW QUESTION 7
Tracy works as a CISO in a large multinational company. She consumes threat intelligence to understand the changing trends of cyber security. She requires intelligence to understand the current business trends and make appropriate decisions regarding new technologies, security budget, improvement of processes, and staff. The intelligence helps her in minimizing business risks and protecting the new technology and business initiatives.
Identify the type of threat intelligence consumer is Tracy.

• A. Tactical users
• B. Strategic users
• C. Operational users
• D. Technical users

Answer: B

NEW QUESTION 8
An organization suffered many major attacks and lost critical information, such as employee records, and financial information. Therefore, the management decides to hire a threat analyst to extract the strategic threat intelligence that provides high-level information regarding current cyber-security posture, threats, details on the financial impact of various cyber-activities, and so on.
Which of the following sources will help the analyst to collect the required intelligence?

• A. Active campaigns, attacks on other organizations, data feeds from external third parties
• B. OSINT, CTI vendors, ISAO/ISACs
• C. Campaign reports, malware, incident reports, attack group reports, human intelligence
• D. Human, social media, chat rooms

Answer: B

NEW QUESTION 9
H&P, Inc. is a small-scale organization that has decided to outsource the network security monitoring due to lack of resources in the organization. They are looking for the options where they can directly incorporate threat intelligence into their existing network defense solutions.
Which of the following is the most cost-effective methods the organization can employ?

• A. Recruit the right talent
• B. Look for an individual within the organization
• C. Recruit data management solution provider
• D. Recruit managed security service providers (MSSP)

Answer: D

NEW QUESTION 10
A team of threat intelligence analysts is performing threat analysis on malware, and each of them has come up with their own theory and evidence to support their theory on a given malware.
Now, to identify the most consistent theory out of all the theories, which of the following analytic processes must threat intelligence manager use?

• A. Threat modelling
• B. Application decomposition and analysis (ADA)
• C. Analysis of competing hypotheses (ACH)
• D. Automated technical analysis

Answer: C

NEW QUESTION 11
SecurityTech Inc. is developing a TI plan where it can drive more advantages in less funds. In the process of selecting a TI platform, it wants to incorporate a feature that ranks elements such as intelligence sources, threat actors, attacks, and digital assets of the organization, so that it can put in more funds toward the resources which are critical for the organization’s security.
Which of the following key features should SecurityTech Inc. consider in their TI plan for selecting the TI platform?

• A. Search
• B. Open
• C. Workflow
• D. Scoring

Answer: D

NEW QUESTION 12
Kim, an analyst, is looking for an intelligence-sharing platform to gather and share threat information from a variety of sources. He wants to use this information to develop security policies to enhance the overall security posture of his organization.
Which of the following sharing platforms should be used by Kim?

• A. Cuckoo sandbox
• B. OmniPeek
• C. PortDroid network analysis
• D. Blueliv threat exchange network

Answer: D

NEW QUESTION 13
Walter and Sons Company has faced major cyber attacks and lost confidential data. The company has decided to concentrate more on the security rather than other resources. Therefore, they hired Alice, a threat analyst, to perform data analysis. Alice was asked to perform qualitative data analysis to extract useful information from collected bulk data.
Which of the following techniques will help Alice to perform qualitative data analysis?

• A. Regression analysis, variance analysis, and so on
• B. Numerical calculations, statistical modeling, measurement, research, and so on.
• C. Brainstorming, interviewing, SWOT analysis, Delphi technique, and so on
• D. Finding links between data and discover threat-related information

Answer: C

NEW QUESTION 14
An attacker instructs bots to use camouflage mechanism to hide his phishing and malware delivery locations in the rapidly changing network of compromised bots. In this particular technique, a single domain name consists of multiple IP addresses.
Which of the following technique is used by the attacker?

• A. DNS zone transfer
• B. Dynamic DNS
• C. DNS interrogation
• D. Fast-Flux DNS

Answer: D

NEW QUESTION 15
In which of the following storage architecture is the data stored in a localized system, server, or storage hardware and capable of storing a limited amount of data in its database and locally available for data usage?

• A. Distributed storage
• B. Object-based storage
• C. Centralized storage
• D. Cloud storage

Answer: B

NEW QUESTION 16
......