Pass exam with 312-85 Top Exam Collection for sure one-shot

Sam works as an analyst in an organization named InfoTech Security. He was asked to collect information from various threat intelligence sources. In meeting the deadline, he forgot to verify the threat intelligence sources and used data from an open-source data provider, who offered it at a very low cost. Through it was beneficial at the initial stage but relying on such data providers can produce unreliable data and noise putting the organization network into risk.
What mistake Sam did that led to this situation?

• A. Sam did not use the proper technology to use or consume the information.
• B. Sam used unreliable intelligence sources.
• C. Sam used data without context.
• D. Sam did not use the proper standardization formats for representing threat data.

As the CEO of a multinational corporation, you focus on making decisions that align with the organization's long-term goals and overall business strategies. What type of threat intelligence would be most valuable in guiding your decisions to enhance a company's resilience against emerging cyber threats?

• A. Technical threat intelligence
• B. Operational threat intelligence
• C. Tactical threat intelligence
• D. Strategic threat intelligence

An organization suffered many major attacks and lost critical information, such as employee records, and financial information. Therefore, the management decides to hire a threat analyst to extract the strategic threat intelligence that provides high-level information regarding current cyber-security posture, threats, details on the financial impact of various cyber-activities, and so on.
Which of the following sources will help the analyst to collect the required intelligence?

• A. Human, social media, chat rooms
• B. Active campaigns, attacks on other organizations, data feeds from external third parties
• C. OSINT, CTI vendors, ISAO/ISACs
• D. Campaign reports, malware, incident reports, attack group reports, human intelligence

Henry, working as a threat analyst in an organization named MylesTech, wants to share gathered intelligence.
He wants to share the intelligence with a broad range of communities that can be trusted more, but the sensitivity of information is less.
Which of the following tiers of the sharing model must be employed by Henry?

• A. Private tier
• B. Targeted tier
• C. Multitier
• D. Public tier

Jim works as a security analyst in a large multinational company. Recently, a group of hackers penetrated into their organizational network and used a data staging technique to collect sensitive data. They collected all sorts of sensitive data about the employees and customers, business tactics of the organization, financial information, network infrastructure information and so on.
What should Jim do to detect the data staging before the hackers exfiltrate from the network?

• A. Jim should analyze malicious DNS requests, DNS payload, unspecified domains, and destination of DNS requests.
• B. Jim should identify the attack at an initial stage by checking the content of the user agent field.
• C. Jim should monitor network traffic for malicious file transfers, file integrity monitoring, and event logs.
• D. Jim should identify the web shell running in the network by analyzing server access, error logs, suspicious strings indicating encoding, user agent strings, and so on.