RAYS WAKE UP CYSA

How many threat actor types are classified?

What type of tool that caches the code behind a website?

What protocol provides a means for transmitting CTI data between servers and clients over HTTPS and a REST API?

How many versions of Structured Threat Information eXpression are there?

What is it called when all points at which an adversary could interact with the system and potentially compromise it?

Systems have been exploited by a vulnerable part of new software, there is no vender patch to fix, what type of malware?

What term was coined to understand the behavior underpinning modern types of cyber adversary, such as nation-state?

What is designed to ID principal risks & TTPs a system may be subject to by evaluating from attackers & defenders view?

MITRE Corporation's ____________ matrices provide access to a database of known tactics, techniques, and procedures?

Remote access Trojans (RATs), such as PoisonIvy, Dark Comet, and XtremeRAT are examples of what type malware?

What actor type has developed cybersecurity expertise & use cyber weapons to achieve both military & commercial goals?

An _________ arises from an actor who has been identified by the organization and granted some sort of access.

The general purpose of __________________is to identify who works at a company.

How many steps are in the kill chain from the white papers of Lockheed Martin?

New computer hardware introduced to the workplace without the sanction of the IT department is?

T or F, Mandiant was involved in developing some of the language of threat classification & sponsored OpenIOC framework?

Publicly available information & tools for aggregating & searching it is referred to as?

TRUE or FALSE, the attack vector is a general means of exploiting some point on the attack surface?

IT department finds a residual sign the network has been successfully attacked or still is, what is happening?

What threat is created by an insider acting with no malicious intent?

TRUE or FALSE, a SOC can use threat intelligence to determine adversary capabilities?

Exploring relationships between 4 core features: adversary, capability, infrastructure, & victim, comes from what model?

What framework describes standard terminology for IoCs and ways of indicating relationships between them?

In threat classification there are two types, what are they?

Type of threat research IDs IP address ranges & DNS domains associated w/malicious activity,ex. joining in DDoS attacks?

What type of threat research correlates IoCs into attack patterns?