Latest ECCouncil 312-85 First Attempt, Exam real Dumps Updated [Sep-2021]
Get the superior quality 312-85 Dumps Questions from RealVCE. Nobody can stop you from getting to your dreams now. Your bright future is just a click away!
NEW QUESTION 20
Andrews and Sons Corp. has decided to share threat information among sharing partners. Garry, a threat analyst, working in Andrews and Sons Corp., has asked to follow a trust model necessary to establish trust between sharing partners. In the trust model used by him, the first organization makes use of a body of evidence in a second organization, and the level of trust between two organizations depends on the degree and quality of evidence provided by the first organization.
Which of the following types of trust model is used by Garry to establish the trust?
- A. Mediated trust
- B. Validated trust
- C. Direct historical trust
- D. Mandated trust
Answer: B
NEW QUESTION 21
What is the correct sequence of steps involved in scheduling a threat intelligence program?
1. Review the project charter
2. Identify all deliverables
3. Identify the sequence of activities
4. Identify task dependencies
5. Develop the final schedule
6. Estimate duration of each activity
7. Identify and estimate resources for all activities
8. Define all activities
9. Build a work breakdown structure (WBS)
- A. 1-->2-->3-->4-->5-->6-->7-->8-->9
- B. 1-->9-->2-->8-->3-->7-->4-->6-->5
- C. 1-->2-->3-->4-->5-->6-->9-->8-->7
- D. 3-->4-->5-->2-->1-->9-->8-->7-->6
Answer: B
NEW QUESTION 22
ABC is a well-established cyber-security company in the United States. The organization implemented the automation of tasks such as data enrichment and indicator aggregation. They also joined various communities to increase their knowledge about the emerging threats. However, the security teams can only detect and prevent identified threats in a reactive approach.
Based on threat intelligence maturity model, identify the level of ABC to know the stage at which the organization stands with its security and vulnerabilities.
- A. Level 3: CTI program in place
- B. Level 0: vague where to start
- C. Level 1: preparing for CTI
- D. Level 2: increasing CTI capabilities
Answer: D
NEW QUESTION 23
SecurityTech Inc. is developing a TI plan where it can drive more advantages in less funds. In the process of selecting a TI platform, it wants to incorporate a feature that ranks elements such as intelligence sources, threat actors, attacks, and digital assets of the organization, so that it can put in more funds toward the resources which are critical for the organization's security.
Which of the following key features should SecurityTech Inc. consider in their TI plan for selecting the TI platform?
- A. Workflow
- B. Scoring
- C. Open
- D. Search
Answer: B
NEW QUESTION 24
Henry. a threat intelligence analyst at ABC Inc., is working on a threat intelligence program. He was assigned to work on establishing criteria for prioritization of intelligence needs and requirements.
Which of the following considerations must be employed by Henry to prioritize intelligence requirements?
- A. Understand data reliability
- B. Produce actionable data
- C. Understand frequency and impact of a threat
- D. Develop a collection plan
Answer: C
NEW QUESTION 25
A team of threat intelligence analysts is performing threat analysis on malware, and each of them has come up with their own theory and evidence to support their theory on a given malware.
Now, to identify the most consistent theory out of all the theories, which of the following analytic processes must threat intelligence manager use?
- A. Analysis of competing hypotheses (ACH)
- B. Threat modelling
- C. Application decomposition and analysis (ADA)
- D. Automated technical analysis
Answer: A
NEW QUESTION 26
Jame, a professional hacker, is trying to hack the confidential information of a target organization. He identified the vulnerabilities in the target system and created a tailored deliverable malicious payload using an exploit and a backdoor to send it to the victim.
Which of the following phases of cyber kill chain methodology is Jame executing?
- A. Installation
- B. Exploitation
- C. Reconnaissance
- D. Weaponization
Answer: D
NEW QUESTION 27
Cybersol Technologies initiated a cyber-threat intelligence program with a team of threat intelligence analysts. During the process, the analysts started converting the raw data into useful information by applying various techniques, such as machine-based techniques, and statistical methods.
In which of the following phases of the threat intelligence lifecycle is the threat intelligence team currently working?
- A. Dissemination and integration
- B. Analysis and production
- C. Planning and direction
- D. Processing and exploitation
Answer: A
NEW QUESTION 28
Miley, an analyst, wants to reduce the amount of collected data and make the storing and sharing process easy. She uses filtering, tagging, and queuing technique to sort out the relevant and structured data from the large amounts of unstructured data.
Which of the following techniques was employed by Miley?
- A. Convenience sampling
- B. Data visualization
- C. Sandboxing
- D. Normalization
Answer: D
NEW QUESTION 29
Kim, an analyst, is looking for an intelligence-sharing platform to gather and share threat information from a variety of sources. He wants to use this information to develop security policies to enhance the overall security posture of his organization.
Which of the following sharing platforms should be used by Kim?
- A. OmniPeek
- B. Blueliv threat exchange network
- C. Cuckoo sandbox
- D. PortDroid network analysis
Answer: B
NEW QUESTION 30
H&P, Inc. is a small-scale organization that has decided to outsource the network security monitoring due to lack of resources in the organization. They are looking for the options where they can directly incorporate threat intelligence into their existing network defense solutions.
Which of the following is the most cost-effective methods the organization can employ?
- A. Recruit data management solution provider
- B. Look for an individual within the organization
- C. Recruit managed security service providers (MSSP)
- D. Recruit the right talent
Answer: C
NEW QUESTION 31
Moses, a threat intelligence analyst at InfoTec Inc., wants to find crucial information about the potential threats the organization is facing by using advanced Google search operators. He wants to identify whether any fake websites are hosted at the similar to the organization's URL.
Which of the following Google search queries should Moses use?
- A. related: www.infothech.org
- B. link: www.infothech.org
- C. cache: www.infothech.org
- D. info: www.infothech.org
Answer: A
NEW QUESTION 32
A network administrator working in an ABC organization collected log files generated by a traffic monitoring system, which may not seem to have useful information, but after performing proper analysis by him, the same information can be used to detect an attack in the network.
Which of the following categories of threat information has he collected?
- A. Strategic reports
- B. Advisories
- C. Low-level data
- D. Detection indicators
Answer: D
NEW QUESTION 33
Which of the following characteristics of APT refers to numerous attempts done by the attacker to gain entry to the target's network?
- A. Attack origination points
- B. Timeliness
- C. Multiphased
- D. Risk tolerance
Answer: A
NEW QUESTION 34
Enrage Tech Company hired Enrique, a security analyst, for performing threat intelligence analysis. While performing data collection process, he used a counterintelligence mechanism where a recursive DNS server is employed to perform interserver DNS communication and when a request is generated from any name server to the recursive DNS server, the recursive DNS servers log the responses that are received. Then it replicates the logged data and stores the data in the central database. Using these logs, he analyzed the malicious attempts that took place over DNS infrastructure.
Which of the following cyber counterintelligence (CCI) gathering technique has Enrique used for data collection?
- A. Data collection through passive DNS monitoring
- B. Data collection through DNS interrogation
- C. Data collection through dynamic DNS (DDNS)
- D. Data collection through DNS zone transfer
Answer: B
NEW QUESTION 35
Tyrion, a professional hacker, is targeting an organization to steal confidential information. He wants to perform website footprinting to obtain the following information, which is hidden in the web page header.
Connection status and content type
Accept-ranges and last-modified information
X-powered-by information
Web server in use and its version
Which of the following tools should the Tyrion use to view header content?
- A. Vanguard enforcer
- B. AutoShun
- C. Burp suite
- D. Hydra
Answer: C
NEW QUESTION 36
......
ECCouncil Practice Test Engine with 312-85 Questions: https://drive.google.com/open?id=1btvlDeakLS2E7LdXuIYEWZZEO6h8FER6
Guaranteed Success with Valid ECCouncil 312-85 Dumps: https://www.realvce.com/312-85_free-dumps.html