Threat Hunting Methodologies and Frameworks TIE Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   What are the four core components of the Diamond Model of Intrusion Analysis?

   • AMalware, command and control, exfiltration, and impact
   • BAttacker, tool, network, and data
   • CThreat, vulnerability, exploit, and payload
   • DAdversary, capability, infrastructure, and victim
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which of the following is a valid source for formulating a threat hunting hypothesis?

   • AA random number generator
   • BThe personal preference of the analyst
   • CA new threat intelligence report describing a recent adversary campaign
   • DThe organization's marketing strategy
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which stage of the Cyber Kill Chain involves the adversary establishing a foothold in the target environment?

   • AReconnaissance
   • BWeaponization
   • CInstallation
   • DActions on Objectives
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A security team wants to implement active defense measures to detect and deceive attackers. They plan to deploy honeypots and honeytokens to lure adversaries and gather intelligence. Which framework provides guidance on active defense concepts that can be applied to threat hunting?

   • ACyber Kill Chain
   • BDiamond Model
   • CMITRE Shield
   • DMITRE ATT&CK
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   How does threat intelligence primarily enhance threat hunting?

   • ABy automatically blocking all malicious traffic
   • BBy providing indicators and adversary behaviors that guide the hunting process
   • CBy providing a list of all vulnerabilities in the organization
   • DBy eliminating the need for human analysts
   Reveal Solution Discussion Select an answer first