GCTI Exam Training Practice Tests (GIAC Cyber Threat Intelligence)]

Question 1

What is the primary obstacle to accurate analysis in cyber threat intelligence?
Response:

A. The speed of threat evolution B. The volume of data available C. The cost of analytical tools D. Cognitive biases and logical fallacies

Correct Answer: D

Question 2

Which two sources are commonly analyzed in threat intelligence to detect network-based threats?
Response:

A. Intrusion detection systems (IDS) B. Employee timecards C. Wi-Fi access points D. Firewall logs

Correct Answer: A,D

Question 3

What does "attribution" refer to in cyber threat intelligence?
Response:

A. The assessment of network performance B. The implementation of encryption protocols C. The identification of the source or actor behind a cyber attack D. The process of securing a network

Correct Answer: C

Question 4

Which two factors can hinder accurate attribution of a cyber attack?
Response:

A. Similarities between different threat actor tactics B. Insufficient system bandwidth C. Lack of technical skill by analysts D. Use of encryption by attackers

Correct Answer: A,D

Question 5

Which of the following biases involves focusing too much on recent data and ignoring older, yet still relevant, information?
Response:

A. Anchoring bias B. Confirmation bias C. Availability bias D. Recency bias

Correct Answer: D

Question 6

Why is external intelligence important in understanding cyber campaigns?
Response:

A. It provides information on internal network vulnerabilities B. It reduces the cost of security measures C. It helps in designing better user interfaces D. It offers insights into the broader threat landscape and attacker strategies

Correct Answer: D

Question 7

Which tool is commonly used for dynamic malware analysis?
Response:

A. OllyDbg B. Sysinternals Suite C. IDA Pro D. Wireshark

Correct Answer: B

Question 8

Which of the following are examples of dynamic analysis tools?
(Select 2)
Response:

A. OllyDbg B. Cuckoo Sandbox C. IDA Pro D. PEiD

Correct Answer: A,B

Question 9

How does pivoting enhance the depth of threat intelligence analysis?
Response:

A. By linking multiple related data points to uncover hidden patterns B. By focusing on a single data point C. By simplifying the data collection process D. By reducing the amount of data analyzed

Correct Answer: A

Question 10

What are two ways that cyber intelligence analysts can improve the application of threat intelligence?
Response:

A. Integrating threat intelligence into security information and event management (SIEM) tools B. Ignoring internal threat data C. Relying solely on external threat feeds D. Automating data collection and analysis

Correct Answer: A,D

GIAC Cyber Threat Intelligence - GCTI Exam Practice Test