Which of the following is a common method used in the delivery phase of the Cyber Kill Chain?

Sending commands to the compromised system

Email attachment containing a malicious macro

Exploiting a vulnerability in a web server

Installing a backdoor on the target

Which of the following is an example of an exploitation technique?

Setting up a listener for reverse shell

In MITRE ATT&CK, what is a sub-technique?

A more detailed description of a specific technique

A tactic that is part of a larger strategy

What is the MITRE ATT&CK framework?

A framework for incident response management

A vulnerability scanner that identifies weaknesses in networks

A set of legal guidelines for prosecuting cybercriminals

A knowledge base of adversary tactics, techniques, and procedures based on real-world observations

A threat intelligence analyst is using the Cyber Kill Chain and MITRE ATT&CK to analyze an intrusion. The analyst has identified the following: the attacker used a watering hole attack to deliver malware, the malware exploited a zero-day vulnerability, and the attacker used a custom C2 protocol. The analyst wants to recommend mitigations that address the earliest possible stage of the attack. Which mitigation should the analyst prioritize?

Use web filtering to block access to the compromised website

Deploy an intrusion prevention system (IPS) to detect the exploit

Implement network segmentation to limit lateral movement

Monitor for the custom C2 protocol on the network

EC-CouncilCertified Threat Intelligence Analyst (CTIA)

Domain 2Objective 2

Cyber Kill Chain and MITRE ATT&CK Frameworks CTIA Practice Questions (Page 9)

Part of the Cyber Threats and Attack Frameworks domain, which makes up ~13% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–10 in this domain), expect 4–5 from this objective — we provide 54 practice questions to prepare you well beyond it. (estimate)

54questions here

11free pages

14concepts

Questions 41–45

41foundation · easy
Which of the following is a common method used in the delivery phase of the Cyber Kill Chain?
Select an answer first
42foundation · easy
Which of the following is an example of an exploitation technique?
Select an answer first
43foundation · easy
In MITRE ATT&CK, what is a sub-technique?
Select an answer first
44foundation · easy
What is the MITRE ATT&CK framework?
Select an answer first
45expert · hard
A threat intelligence analyst is using the Cyber Kill Chain and MITRE ATT&CK to analyze an intrusion. The analyst has identified the following: the attacker used a watering hole attack to deliver malware, the malware exploited a zero-day vulnerability, and the attacker used a custom C2 protocol. The analyst wants to recommend mitigations that address the earliest possible stage of the attack. Which mitigation should the analyst prioritize?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CTIA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CTIA” is a trademark of its owner, used for identification only.