Data Analysis Techniques CTIA Practice Questions (Page 12)

Questions 56–58

1. 56foundation · easy

   Which of the following is a common technique used in relationship analysis?

   • ACalculating the mean of data points
   • BPlotting attack origins on a map
   • CBuilding a link graph of entities
   • DCreating a timeline of events
   Reveal Solution Discussion Select an answer first
2. 57application · medium

   A threat intelligence team is evaluating tools to support their analysis workflow. They need a tool that can ingest indicators from multiple formats (e.g., STIX, OpenIOC, CSV), correlate them with internal data, and provide an API for integration with their SIEM. Which type of tool best meets these requirements?

   • AA vulnerability scanner like Nessus.
   • BA log management tool like Splunk, without any threat intelligence features.
   • CA threat intelligence platform (TIP) that supports multiple indicator formats, correlation, and API access.
   • DA packet analysis tool like Wireshark.
   Reveal Solution Discussion Select an answer first
3. 58application · medium

   A security operations center (SOC) has identified a suspicious file hash from a phishing campaign. The SOC wants to determine if this hash is associated with any known malware family and whether it has been seen elsewhere in the organization's environment. Which combination of IoC analysis and data correlation is most effective?

   • AOnly query the organization's SIEM for the hash to see if any endpoints have seen it.
   • BOnly search the hash against a public malware repository to identify the malware family.
   • CCompare the hash to a list of known good file hashes to determine if it is benign.
   • DSearch the hash against a threat intelligence platform and simultaneously query the organization's endpoint logs for any matches.
   Reveal Solution Discussion Select an answer first