We're so confident of our products that we provide no hassle product exchange.
CREST CPTIA Exam Overview:
| Certification Vendor: | CREST |
| Exam Name: | CREST Practitioner Threat Intelligence Analyst (CPTIA) Examination |
| Exam Number: | CPTIA |
| Available Languages: | English |
| Related Certifications: | CREST Registered Threat Intelligence Analyst (CRTIA) CREST Certified Threat Intelligence Analyst (CCTIA) |
| Exam Format: | Practical scenario-based assessment, Written analysis and reporting tasks, Multiple-choice questions (varies by delivery format) |
| Recommended Training: | CREST Practitioner Threat Intelligence Training Providers |
| Exam Registration: | CREST Official Website |
| Sample Questions: | CREST CPTIA Sample Questions |
| Exam Way: | Typically delivered as a proctored assessment through CREST-approved examination centres or approved remote proctoring providers, depending on region and provider arrangements. |
| Pre Condition: | No strict mandatory prerequisite, but practical experience in cybersecurity, incident response, or threat intelligence is strongly recommended. |
| Official Syllabus URL: | https://www.crest-approved.org/ |
CREST CPTIA Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Topic 1: Legal, Ethical, and Operational Considerations | - Legal and compliance
|
| Topic 2: Threat Analysis and Frameworks | - Cyber threat frameworks
|
| Topic 3: Reporting and Dissemination | - Stakeholder communication
|
| Topic 4: Data Collection and Sources | - OSINT and technical collection
|
| Topic 5: Threat Intelligence Fundamentals | - Intelligence lifecycle
|
CREST Practitioner Threat Intelligence Analyst Sample Questions:
1. Cybersol Technologies initiated a cyber-threat intelligence program with a team of threat intelligence analysts. During the process, the analysts started converting the raw data into useful information by applying various techniques, such as machine-based techniques, and statistical methods.
In which of the following phases of the threat intelligence lifecycle is the threat intelligence team currently working?
A) Dissemination and integration
B) Analysis and production
C) Processing and exploitation
D) Planning and direction
2. A threat analyst obtains an intelligence related to a threat, where the data is sent in the form of a connection request from a remote host to the server. From this data, he obtains only the IP address of the source and destination but no contextual information. While processing this data, he obtains contextual information stating that multiple connection requests from different geo-locations are received by the server within a short time span, and as a result, the server is stressed and gradually its performance has reduced. He further performed analysis on the information based on the past and present experience and concludes the attack experienced by the client organization.
Which of the following attacks is performed on the client organization?
A) Distributed Denial-of-Service (DDoS) attack
B) MAC spoofing attack
C) DHCP attacks
D) Bandwidth attack
3. Which of the following is a technique used by attackers to make a message difficult to understand through the use of ambiguous language?
A) Obfuscation
B) Steganography
C) Spoofing
D) Encryption
4. Eric works as a system administrator in ABC organization. He granted privileged users with unlimited permissions to access the systems. These privileged users can misuse their rights unintentionally or maliciously or attackers can trick them to perform malicious activities.
Which of the following guidelines helps incident handlers to eradicate insider attacks by privileged users?
A) Do not control the access to administrators and privileged users
B) Do not allow administrators to use unique accounts during the installation process
C) Do not use encryption methods to prevent administrators and privileged users from accessing backup tapes and sensitive information
D) Do not enable the default administrative accounts to ensure accountability
5. Daniel is a professional hacker whose aim is to attack a system to steal data and money for profit. He performs hacking to obtain confidential data such as social security numbers, personally identifiable information (PII) of an employee, and credit card information. After obtaining confidential data, he further sells the information on the black market to make money.
Daniel comes under which of the following types of threat actor.
A) State-sponsored hackers
B) Organized hackers
C) Insider threat
D) Industrial spies
Solutions:
| Question # 1 Answer: C | Question # 2 Answer: A | Question # 3 Answer: A | Question # 4 Answer: D | Question # 5 Answer: B |
By Lou
