Which activity is a primary focus of incident response rather than threat hunting?

Containing and eradicating a confirmed compromise

Developing hypotheses based on adversary behavior

Proactively searching for signs of a breach that may have gone undetected

Analyzing network traffic for anomalies

What is the primary focus of MITRE Shield?

Active defense concepts and techniques

Passive monitoring and detection

How does threat hunting differ from threat intelligence?

Threat hunting is performed by automated tools, while threat intelligence requires human analysts

Threat hunting is a reactive process, while threat intelligence is proactive

Threat hunting focuses on external adversaries, while threat intelligence focuses on internal threats

Threat hunting is an active search for threats, while threat intelligence is the collection and analysis of information about threats

What is the role of STIX in threat intelligence sharing?

STIX is a transport mechanism for sending threat intelligence over the network

STIX provides a standardized language for representing and exchanging threat intelligence

STIX is a database for storing threat intelligence

STIX is a tool for automatically blocking malicious IPs

EC-CouncilThreat Intelligence Essentials

Domain 7Objective 3

Threat Hunting Methodologies and Frameworks TIE Practice Questions (Page 2)

Part of the Threat Hunting and Detection domain, which makes up ~12% of our current practice bank.

53questions here

11free pages

20concepts

20 Concepts in This Objective

Threat Hunting Definition and Goals
Threat Hunting vs. Other Security Processes
Threat Hunting Process Overview
Hypothesis-Driven Hunting
Intelligence-Driven Hunting
Situational Awareness-Driven Hunting
Baseline and Anomaly Detection
Threat Hunting Frameworks Overview
MITRE ATT&CK for Threat Hunting
Diamond Model for Intrusion Analysis
Cyber Kill Chain for Threat Hunting
TAXII and STIX in Hunting
Lockheed Martin Cyber Kill Chain
Unified Kill Chain
MITRE Shield
Hunting Maturity Model (HMM)
Threat Hunting Loop and Iterative Process
Data Sources and Collection for Hunting
Hunting Techniques and Tools
Documentation and Reporting in Hunting

Questions 6–10

6foundation · easy
Which activity is a primary focus of incident response rather than threat hunting?
Select an answer first
7foundation · easy
What is the primary focus of MITRE Shield?
Select an answer first
8foundation · easy
How does threat hunting differ from threat intelligence?
Select an answer first
9foundation · easy
What is the role of STIX in threat intelligence sharing?
Select an answer first
10foundation · easy
Which of the following is a well-known threat hunting framework?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to TIE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “TIE” is a trademark of its owner, used for identification only.