Cyber Threat Intelligence for the Cloud GCTD Practice Questions (Page 12)

Questions 56–58

1. 56application · medium

   A manager asks a cloud security analyst to explain why CTI is important for cloud threat detection. The analyst needs to provide a concise explanation that highlights the unique value of CTI in the cloud. Which statement best captures this?

   • ACTI helps organizations understand the specific tactics, techniques, and procedures that threat actors use against cloud environments
   • BCTI replaces the need for cloud security monitoring tools
   • CCTI is only useful for large enterprises with dedicated threat intelligence teams
   • DCTI provides a list of all possible cloud misconfigurations that could be exploited
   Reveal Solution Discussion Select an answer first
2. 57foundation · easy

   How can mapping cloud-related TTPs to MITRE ATT&CK enhance detection and response?

   • AIt automatically blocks all techniques listed in the framework
   • BIt eliminates the need for threat intelligence feeds
   • CIt guarantees that all attacks will be detected
   • DIt provides a common language to describe adversary behavior and helps identify gaps in coverage
   Reveal Solution Discussion Select an answer first
3. 58expert · hard

   A security analyst is investigating a potential compromise in their Azure environment. They notice a series of API calls that create new virtual machines with public IP addresses, followed by outbound data transfers from those VMs. Which combination of IOCs is most indicative of a cloud-specific attack?

   • AA single user accessing the Azure portal from a new IP address
   • BAn increase in CPU usage on an existing VM
   • CFailed login attempts to the Azure portal
   • DCreation of VMs with public IPs and subsequent outbound data transfers
   Reveal Solution Discussion Select an answer first