CySA+ Module 2 Utilizing Threat Data & Intelligence

Type of threat research IDs IP address ranges & DNS domains associated w/malicious activity,ex. joining in DDoS attacks?

Exploring relationships between 4 core features: adversary, capability, infrastructure, & victim, comes from what model?

How many steps are in the kill chain from the white papers of Lockheed Martin?

What framework describes standard terminology for IoCs and ways of indicating relationships between them?

What is it called when all points at which an adversary could interact with the system and potentially compromise it?

Publicly available information & tools for aggregating & searching it is referred to as?

IT department finds a residual sign the network has been successfully attacked or still is, what is happening?

What term was coined to understand the behavior underpinning modern types of cyber adversary, such as nation-state?

What type of threat research correlates IoCs into attack patterns?

T or F, Mandiant was involved in developing some of the language of threat classification & sponsored OpenIOC framework?

An _________ arises from an actor who has been identified by the organization and granted some sort of access.

Systems have been exploited by a vulnerable part of new software, there is no vender patch to fix, what type of malware?

What is designed to ID principal risks & TTPs a system may be subject to by evaluating from attackers & defenders view?

In threat classification there are two types, what are they?

How many versions of Structured Threat Information eXpression are there?

What actor type has developed cybersecurity expertise & use cyber weapons to achieve both military & commercial goals?

How many threat actor types are classified?

What type of tool that caches the code behind a website?

MITRE Corporation's ____________ matrices provide access to a database of known tactics, techniques, and procedures?

TRUE or FALSE, a SOC can use threat intelligence to determine adversary capabilities?

TRUE or FALSE, the attack vector is a general means of exploiting some point on the attack surface?

Remote access Trojans (RATs), such as PoisonIvy, Dark Comet, and XtremeRAT are examples of what type malware?

What protocol provides a means for transmitting CTI data between servers and clients over HTTPS and a REST API?

New computer hardware introduced to the workplace without the sanction of the IT department is?

What threat is created by an insider acting with no malicious intent?

The general purpose of __________________is to identify who works at a company.