What is the main advantage of the Unified Kill Chain over the traditional Cyber Kill Chain?

It provides a more comprehensive model that covers the entire attack lifecycle, including post-compromise activities

It focuses only on the initial intrusion

It is specifically designed for cloud environments

It is simpler and easier to understand

What is the purpose of the feedback step in the threat hunting loop?

To automatically block malicious activity

To collect more data for the current hunt

To report the hunt results to management

To improve future hunts by incorporating lessons learned

Which type of threat intelligence is most directly useful for prioritizing which systems to hunt on?

Strategic intelligence about an adversary's long-term goals

Technical intelligence such as IP addresses and hashes

Operational intelligence about specific campaigns

Tactical intelligence about the adversary's TTPs and tools

Why is documentation important in threat hunting?

It ensures findings are recorded and can be used to improve future hunts

It is required by law in all cases

It is only needed for compliance audits

It replaces the need for threat intelligence

EC-CouncilThreat Intelligence Essentials

Domain 7Objective 3

Threat Hunting Methodologies and Frameworks TIE Practice Questions (Page 6)

Part of the Threat Hunting and Detection domain, which makes up ~12% of our current practice bank.

53questions here

11free pages

20concepts

20 Concepts in This Objective

Threat Hunting Definition and Goals
Threat Hunting vs. Other Security Processes
Threat Hunting Process Overview
Hypothesis-Driven Hunting
Intelligence-Driven Hunting
Situational Awareness-Driven Hunting
Baseline and Anomaly Detection
Threat Hunting Frameworks Overview
MITRE ATT&CK for Threat Hunting
Diamond Model for Intrusion Analysis
Cyber Kill Chain for Threat Hunting
TAXII and STIX in Hunting
Lockheed Martin Cyber Kill Chain
Unified Kill Chain
MITRE Shield
Hunting Maturity Model (HMM)
Threat Hunting Loop and Iterative Process
Data Sources and Collection for Hunting
Hunting Techniques and Tools
Documentation and Reporting in Hunting

Questions 26–30

26foundation · easy
What is the main advantage of the Unified Kill Chain over the traditional Cyber Kill Chain?
Select an answer first
27foundation · easy
What is the purpose of the feedback step in the threat hunting loop?
Select an answer first
28foundation · easy
During which phase of a threat hunting engagement does the analyst determine whether the hypothesis is supported by the evidence?
Select an answer first
29foundation · easy
Which type of threat intelligence is most directly useful for prioritizing which systems to hunt on?
Select an answer first
30foundation · easy
Why is documentation important in threat hunting?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to TIE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “TIE” is a trademark of its owner, used for identification only.