Data Analysis Techniques CTIA Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   An analyst needs to present a summary of a year's worth of intrusion detection system (IDS) alerts to a non-technical executive audience. The goal is to show the overall trend in alert volume and highlight any significant spikes. Which visualization is most appropriate?

   • AA pie chart showing the proportion of alerts by severity.
   • BA scatter plot of alert count versus source IP address.
   • CA bar chart of the total alerts per month, without any time axis.
   • DA line chart with time on the x-axis and alert count on the y-axis, with annotations on the spikes.
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   A multinational company has observed phishing attacks that use localized language and target specific regional subsidiaries. The attacks originate from IP addresses in the same regions as the subsidiaries. The analyst suspects the attacks are not random but geographically targeted. What is the most effective way to validate this hypothesis?

   • AReview the attack times to see if they align with business hours in each region.
   • BPerform spatial analysis to map attack origins against subsidiary locations and correlate with language-specific phishing lures.
   • CAnalyze the malware used in the attacks to see if it is region-specific.
   • DCalculate the total number of attacks per region and rank them.
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   What does spatial analysis in threat intelligence primarily examine?

   • AThe timing and frequency of attacks
   • BThe relationships between threat actors
   • CThe geographic and network location of threat activity
   • DThe behavior of malware samples
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   What is a common pitfall when analyzing threat intelligence data?

   • AOver-reliance on a single data source
   • BAutomating the analysis process
   • CSharing intelligence with stakeholders
   • DUsing too many data sources
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   In the threat intelligence lifecycle, which role does data analysis play?

   • AIt defines the requirements for intelligence collection
   • BIt distributes intelligence reports to relevant stakeholders
   • CIt converts raw data into intelligence that can be used to guide security decisions
   • DIt ensures that collected data is stored in a format that is easy to retrieve
   Reveal Solution Discussion Select an answer first