A company's security team is reviewing a recent intrusion where attackers gained access through a vulnerable web application and then moved to internal servers. The team wants to identify the initial threat vector and the attack surface that was exploited. Which combination is correct?

Removable media vector; the attack surface is the endpoint devices.

Email vector; the attack surface is the mail gateway.

Web vector; the attack surface is the web application and its underlying server.

Network vector; the attack surface is the internal server segment.

A company's security team is assessing its exposure to phishing attacks. They know that employees frequently click on links in emails and that the company's web filter does not block newly registered domains. Which combination of threat vector and attack surface is most relevant to this risk?

Network vector and misconfigured firewall.

Email vector and human attack surface.

Physical vector and removable media.

Web vector and unpatched software.

EC-CouncilCertified Threat Intelligence Analyst (CTIA)

Domain 2Objective 1

Cyber Threats and Advanced Persistent Threats CTIA Practice Questions (Page 10)

Part of the Cyber Threats and Attack Frameworks domain, which makes up ~13% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–10 in this domain), expect 4–5 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

8concepts

Questions 46–47

46application · medium
A company's security team is reviewing a recent intrusion where attackers gained access through a vulnerable web application and then moved to internal servers. The team wants to identify the initial threat vector and the attack surface that was exploited. Which combination is correct?
Select an answer first
47application · medium
A company's security team is assessing its exposure to phishing attacks. They know that employees frequently click on links in emails and that the company's web filter does not block newly registered domains. Which combination of threat vector and attack surface is most relevant to this risk?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CTIA

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CTIA” is a trademark of its owner, used for identification only.

Cyber Threats and Advanced Persistent Threats CTIA Practice Questions (Page 10)

Questions 46–47

A company's security team is reviewing a recent intrusion where attackers gained access through a vulnerable web application and then moved to internal servers. The team wants to identify the initial threat vector and the attack surface that was exploited. Which combination is correct?

A company's security team is assessing its exposure to phishing attacks. They know that employees frequently click on links in emails and that the company's web filter does not block newly registered domains. Which combination of threat vector and attack surface is most relevant to this risk?

Keep studying — Cyber Threats and Attack Frameworks