Question 1

Andrews and Sons Corp. has decided to share threat information among sharing partners. Garry, a

threat analyst, working in Andrews and Sons Corp., has asked to follow a trust model necessary to

establish trust between sharing partners. In the trust model used by him, the first organization makes

use of a body of evidence in a second organization, and the level of trust between two organizations

depends on the degree and quality of evidence provided by the first organization.

Which of the following types of trust model is used by Garry to establish the trust?

Options :

A : Mediated trust

B : Mandated trust

C : Direct historical trust

D : Validated trust

Answer: D

Question 2

Which of the following behaviors does not help to identify adversary

Options :

A : DNS Tunneling

B :

None of these

C : Command line process execution, and the abuse of command line execution

D : Uncategorized Proxy Events

Answer: B

Question 3

In the MoSCoW prioritization technique what should be addressed last

Options :

A :

Won’t Have this time

B : Should Have

C : Must Have

D : Could Have

Answer: A

Question 4

Identify Behavioral Indicator

Options :

A : Profiles and habits

B : IP address, string, etc.

C : Hashes, IDS Signatures

D : None of these

Answer: A

Question 5

The network operations center (NOC) improve blocking by

Options :

A : Secure web gateways (SWG)

B : Intrusion detection and intrusion prevention systems (IDS/IPS)

C :

Firewalls, next-generation firewalls (NGFW), application firewalls

D : All of these

Answer: D

Higher Test Marks with Free Online CTIA Exam Practice

Buying Options: