777 お客様のコメント
質問 1：
Jian is a member of the security team at Trinity, Inc. He was conducting a real-time assessment of system activities in order to acquire threat intelligence feeds. He acquired feeds from sources like honeynets, P2P monitoring. infrastructure, and application logs.
Which of the following categories of threat intelligence feed was acquired by Jian?
A. Proactive surveillance feeds
B. Internal intelligence feeds
C. CSV data feeds
D. External intelligence feeds
正解：B
解説: (Pass4Test メンバーにのみ表示されます)
質問 2：
During the process of threat intelligence analysis, John, a threat analyst, successfully extracted an indication of adversary's information, such as Modus operandi, tools, communication channels, and forensics evasion strategies used by adversaries.
Identify the type of threat intelligence analysis is performed by John.
A. Strategic threat intelligence analysis
B. Operational threat intelligence analysis
C. Tactical threat intelligence analysis
D. Technical threat intelligence analysis
正解：C
解説: (Pass4Test メンバーにのみ表示されます)
質問 3：
A threat analyst wants to incorporate a requirement in the threat knowledge repository that provides an ability to modify or delete past or irrelevant threat data.
Which of the following requirement must he include in the threat knowledge repository to fulfil his needs?
A. Protection ranking
B. Searchable functionality
C. Data management
D. Evaluating performance
正解：C
解説: (Pass4Test メンバーにのみ表示されます)
質問 4：
An XYZ organization hired Mr. Andrews, a threat analyst. In order to identify the threats and mitigate the effect of such threats, Mr. Andrews was asked to perform threat modeling. During the process of threat modeling, he collected important information about the treat actor and characterized the analytic behavior of the adversary that includes technological details, goals, and motives that can be useful in building a strong countermeasure.
What stage of the threat modeling is Mr. Andrews currently in?
A. Threat determination and identification
B. Threat ranking
C. System modeling
D. Threat profiling and attribution
正解：D
解説: (Pass4Test メンバーにのみ表示されます)
質問 5：
Bob, a threat analyst, works in an organization named TechTop. He was asked to collect intelligence to fulfil the needs and requirements of the Red Tam present within the organization.
Which of the following are the needs of a RedTeam?
A. Intelligence extracted latest attacks analysis on similar organizations, which includes details about latest threats and TTPs
B. Intelligence related to increased attacks targeting a particular software or operating system vulnerability
C. Intelligence that reveals risks related to various strategic business decisions
D. Intelligence on latest vulnerabilities, threat actors, and their tactics, techniques, and procedures (TTPs)
正解：D
解説: (Pass4Test メンバーにのみ表示されます)
質問 6：
An attacker instructs bots to use camouflage mechanism to hide his phishing and malware delivery locations in the rapidly changing network of compromised bots. In this particular technique, a single domain name consists of multiple IP addresses.
Which of the following technique is used by the attacker?
A. Dynamic DNS
B. Fast-Flux DNS
C. DNS zone transfer
D. DNS interrogation
正解：B
解説: (Pass4Test メンバーにのみ表示されます)
Jian is a member of the security team at Trinity, Inc. He was conducting a real-time assessment of system activities in order to acquire threat intelligence feeds. He acquired feeds from sources like honeynets, P2P monitoring. infrastructure, and application logs.
Which of the following categories of threat intelligence feed was acquired by Jian?
A. Proactive surveillance feeds
B. Internal intelligence feeds
C. CSV data feeds
D. External intelligence feeds
正解：B
解説: (Pass4Test メンバーにのみ表示されます)
質問 2：
During the process of threat intelligence analysis, John, a threat analyst, successfully extracted an indication of adversary's information, such as Modus operandi, tools, communication channels, and forensics evasion strategies used by adversaries.
Identify the type of threat intelligence analysis is performed by John.
A. Strategic threat intelligence analysis
B. Operational threat intelligence analysis
C. Tactical threat intelligence analysis
D. Technical threat intelligence analysis
正解：C
解説: (Pass4Test メンバーにのみ表示されます)
質問 3：
A threat analyst wants to incorporate a requirement in the threat knowledge repository that provides an ability to modify or delete past or irrelevant threat data.
Which of the following requirement must he include in the threat knowledge repository to fulfil his needs?
A. Protection ranking
B. Searchable functionality
C. Data management
D. Evaluating performance
正解：C
解説: (Pass4Test メンバーにのみ表示されます)
質問 4：
An XYZ organization hired Mr. Andrews, a threat analyst. In order to identify the threats and mitigate the effect of such threats, Mr. Andrews was asked to perform threat modeling. During the process of threat modeling, he collected important information about the treat actor and characterized the analytic behavior of the adversary that includes technological details, goals, and motives that can be useful in building a strong countermeasure.
What stage of the threat modeling is Mr. Andrews currently in?
A. Threat determination and identification
B. Threat ranking
C. System modeling
D. Threat profiling and attribution
正解：D
解説: (Pass4Test メンバーにのみ表示されます)
質問 5：
Bob, a threat analyst, works in an organization named TechTop. He was asked to collect intelligence to fulfil the needs and requirements of the Red Tam present within the organization.
Which of the following are the needs of a RedTeam?
A. Intelligence extracted latest attacks analysis on similar organizations, which includes details about latest threats and TTPs
B. Intelligence related to increased attacks targeting a particular software or operating system vulnerability
C. Intelligence that reveals risks related to various strategic business decisions
D. Intelligence on latest vulnerabilities, threat actors, and their tactics, techniques, and procedures (TTPs)
正解：D
解説: (Pass4Test メンバーにのみ表示されます)
質問 6：
An attacker instructs bots to use camouflage mechanism to hide his phishing and malware delivery locations in the rapidly changing network of compromised bots. In this particular technique, a single domain name consists of multiple IP addresses.
Which of the following technique is used by the attacker?
A. Dynamic DNS
B. Fast-Flux DNS
C. DNS zone transfer
D. DNS interrogation
正解：B
解説: (Pass4Test メンバーにのみ表示されます)
井上** -
問題集の九割が試験の問題にも出ていて凄かった。Pass4Testさん、やはり信頼できますね。