
EC-CouncilThreat Intelligence Essentials
Domain 6Objective 2
Analysis of Competing Hypotheses TIE Practice Questions (Page 8)
Part of the Threat Intelligence Analysis domain, which makes up ~14% of our current practice bank.
45questions here
9free pages
10concepts
Questions 36–40
- 36
An analyst is following the ACH process to analyze a series of account takeovers. The analyst has identified three hypotheses, collected evidence, and built the matrix. After evaluating the evidence, one hypothesis is inconsistent with several pieces of evidence. What is the next step in the ACH process?
Select an answer first - 37
When presenting the results of an ACH analysis, what should be included to help the audience understand the reasoning?
Select an answer first - 38
If a sensitivity analysis reveals that changing the interpretation of a single piece of evidence reverses the ranking of the top two hypotheses, what should the analyst conclude?
Select an answer first - 39
Your threat intelligence team is debating whether to adopt ACH for a high-stakes attribution case. A senior analyst argues that ACH is too time-consuming and that the team's experience is sufficient. Which benefit of ACH most directly addresses this concern?
Select an answer first - 40
When evaluating evidence in ACH, what is the primary question an analyst should ask about each piece of evidence?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “TIE” is a trademark of its owner, used for identification only.