Free ECCouncil 312-85 Exam Dumps Questions & Answers

Kira works as a security analyst in an organization. She was asked to define and set up the requirements before collecting threat intelligence information. The requirements should focus on what must be collected in order to fulfil production intelligence.
Which of the following categories of threat intelligence requirements should Kira focus on?

• A.  Production requirements
• B.  Business requirements
• C.  Collection requirements
• D.  Intelligence requirements

ABC is a well-established cyber-security company in the United States. The organization implemented the automation of tasks such as data enrichment and indicator aggregation. They also joined various communities to increase their knowledge about the emerging threats. However, the security teams can only detect and prevent identified threats in a reactive approach.
Based on threat intelligence maturity model, identify the level of ABC to know the stage at which the organization stands with its security and vulnerabilities.

• A.  Level 1: preparing for CTI
• B.  Level 3: CTI program in place
• C.  Level 2: increasing CTI capabilities
• D.  Level 0: vague where to start

Bob, a threat analyst, works in an organization named TechTop. He was asked to collect intelligence to fulfil the needs and requirements of the Red Tam present within the organization.
Which of the following are the needs of a RedTeam?

• A.  Intelligence related to increased attacks targeting a particular software or operating system vulnerability
• B.  Intelligence on latest vulnerabilities, threat actors, and their tactics, techniques, and procedures (TTPs)
• C.  Intelligence extracted latest attacks analysis on similar organizations, which includes details about latest threats and TTPs
• D.  Intelligence that reveals risks related to various strategic business decisions

What is the correct sequence of steps involved in scheduling a threat intelligence program?
1. Review the project charter
2. Identify all deliverables
3. Identify the sequence of activities
4. Identify task dependencies
5. Develop the final schedule
6. Estimate duration of each activity
7. Identify and estimate resources for all activities
8. Define all activities
9. Build a work breakdown structure (WBS)

• A.  1-->2-->3-->4-->5-->6-->7-->8-->9
• B.  3-->4-->5-->2-->1-->9-->8-->7-->6
• C.  1-->9-->2-->8-->3-->7-->4-->6-->5
• D.  1-->2-->3-->4-->5-->6-->9-->8-->7

An organization suffered many major attacks and lost critical information, such as employee records, and financial information. Therefore, the management decides to hire a threat analyst to extract the strategic threat intelligence that provides high-level information regarding current cyber-security posture, threats, details on the financial impact of various cyber-activities, and so on.
Which of the following sources will help the analyst to collect the required intelligence?

• A.  Campaign reports, malware, incident reports, attack group reports, human intelligence
• B.  Active campaigns, attacks on other organizations, data feeds from external third parties
• C.  OSINT, CTI vendors, ISAO/ISACs
• D.  Human, social media, chat rooms