[2021] Use Valid 312-85 Exam - Actual Exam Question & Answer
Test Engine to Practice 312-85 Test Questions
ECCouncil 312-85 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
NEW QUESTION 18
Steve works as an analyst in a UK-based firm. He was asked to perform network monitoring to find any evidence of compromise. During the network monitoring, he came to know that there are multiple logins from different locations in a short time span. Moreover, he also observed certain irregular log in patterns from locations where the organization does not have business relations. This resembles that somebody is trying to steal confidential information.
Which of the following key indicators of compromise does this scenario present?
- A. Unusual outbound network traffic
- B. Unexpected patching of systems
- C. Geographical anomalies
- D. Unusual activity through privileged user account
Answer: D
NEW QUESTION 19
A network administrator working in an ABC organization collected log files generated by a traffic monitoring system, which may not seem to have useful information, but after performing proper analysis by him, the same information can be used to detect an attack in the network.
Which of the following categories of threat information has he collected?
- A. Strategic reports
- B. Detection indicators
- C. Low-level data
- D. Advisories
Answer: B
NEW QUESTION 20
An analyst wants to disseminate the information effectively so that the consumers can acquire and benefit out of the intelligence.
Which of the following criteria must an analyst consider in order to make the intelligence concise, to the point, accurate, and easily understandable and must consist of a right balance between tables, narrative, numbers, graphics, and multimedia?
- A. The right time
- B. The right content
- C. The right presentation
- D. The right order
Answer: C
NEW QUESTION 21
Jian is a member of the security team at Trinity, Inc. He was conducting a real-time assessment of system activities in order to acquire threat intelligence feeds. He acquired feeds from sources like honeynets, P2P monitoring. infrastructure, and application logs.
Which of the following categories of threat intelligence feed was acquired by Jian?
- A. CSV data feeds
- B. External intelligence feeds
- C. Internal intelligence feeds
- D. Proactive surveillance feeds
Answer: C
NEW QUESTION 22
An XYZ organization hired Mr. Andrews, a threat analyst. In order to identify the threats and mitigate the effect of such threats, Mr. Andrews was asked to perform threat modeling. During the process of threat modeling, he collected important information about the treat actor and characterized the analytic behavior of the adversary that includes technological details, goals, and motives that can be useful in building a strong countermeasure.
What stage of the threat modeling is Mr. Andrews currently in?
- A. Threat ranking
- B. Threat profiling and attribution
- C. System modeling
- D. Threat determination and identification
Answer: B
NEW QUESTION 23
Lizzy, an analyst, wants to recognize the level of risks to the organization so as to plan countermeasures against cyber attacks. She used a threat modelling methodology where she performed the following stages:
Stage 1: Build asset-based threat profiles
Stage 2: Identify infrastructure vulnerabilities
Stage 3: Develop security strategy and plans
Which of the following threat modelling methodologies was used by Lizzy in the aforementioned scenario?
- A. OCTAVE
- B. DREAD
- C. TRIKE
- D. VAST
Answer: A
NEW QUESTION 24
Which of the following components refers to a node in the network that routes the traffic from a workstation to external command and control server and helps in identification of installed malware in the network?
- A. Network interface card (NIC)
- B. Hub
- C. Repeater
- D. Gateway
Answer: D
NEW QUESTION 25
Tim is working as an analyst in an ABC organization. His organization had been facing many challenges in converting the raw threat intelligence data into meaningful contextual information. After inspection, he found that it was due to noise obtained from misrepresentation of data from huge data collections. Hence, it is important to clean the data before performing data analysis using techniques such as data reduction. He needs to choose an appropriate threat intelligence framework that automatically performs data collection, filtering, and analysis for his organization.
Which of the following threat intelligence frameworks should he choose to perform such task?
- A. TC complete
- B. Threat grid
- C. SIGVERIF
- D. HighCharts
Answer: A
NEW QUESTION 26
Joe works as a threat intelligence analyst with Xsecurity Inc. He is assessing the TI program by comparing the project results with the original objectives by reviewing project charter. He is also reviewing the list of expected deliverables to ensure that each of those is delivered to an acceptable level of quality.
Identify the activity that Joe is performing to assess a TI program's success or failure.
- A. Determining the costs and benefits associated with the program
- B. Identifying areas of further improvement
- C. Determining the fulfillment of stakeholders
- D. Conducting a gap analysis
Answer: D
NEW QUESTION 27
Tyrion, a professional hacker, is targeting an organization to steal confidential information. He wants to perform website footprinting to obtain the following information, which is hidden in the web page header.
Connection status and content type
Accept-ranges and last-modified information
X-powered-by information
Web server in use and its version
Which of the following tools should the Tyrion use to view header content?
- A. AutoShun
- B. Vanguard enforcer
- C. Hydra
- D. Burp suite
Answer: D
NEW QUESTION 28
In which of the following attacks does the attacker exploit vulnerabilities in a computer application before the software developer can release a patch for them?
- A. Active online attack
- B. Advanced persistent attack
- C. Distributed network attack
- D. Zero-day attack
Answer: D
NEW QUESTION 29
Enrage Tech Company hired Enrique, a security analyst, for performing threat intelligence analysis. While performing data collection process, he used a counterintelligence mechanism where a recursive DNS server is employed to perform interserver DNS communication and when a request is generated from any name server to the recursive DNS server, the recursive DNS servers log the responses that are received. Then it replicates the logged data and stores the data in the central database. Using these logs, he analyzed the malicious attempts that took place over DNS infrastructure.
Which of the following cyber counterintelligence (CCI) gathering technique has Enrique used for data collection?
- A. Data collection through DNS interrogation
- B. Data collection through passive DNS monitoring
- C. Data collection through DNS zone transfer
- D. Data collection through dynamic DNS (DDNS)
Answer: A
NEW QUESTION 30
Tracy works as a CISO in a large multinational company. She consumes threat intelligence to understand the changing trends of cyber security. She requires intelligence to understand the current business trends and make appropriate decisions regarding new technologies, security budget, improvement of processes, and staff. The intelligence helps her in minimizing business risks and protecting the new technology and business initiatives.
Identify the type of threat intelligence consumer is Tracy.
- A. Technical users
- B. Tactical users
- C. Strategic users
- D. Operational users
Answer: C
NEW QUESTION 31
Alison, an analyst in an XYZ organization, wants to retrieve information about a company's website from the time of its inception as well as the removed information from the target website.
What should Alison do to get the information he needs.
- A. Alison should use SmartWhois to extract the required website information.
- B. Alison should use https://archive.org to extract the required website information.
- C. Alison should recover cached pages of the website from the Google search engine cache to extract the required website information.
- D. Alison should run the Web Data Extractor tool to extract the required website information.
Answer: D
NEW QUESTION 32
Henry. a threat intelligence analyst at ABC Inc., is working on a threat intelligence program. He was assigned to work on establishing criteria for prioritization of intelligence needs and requirements.
Which of the following considerations must be employed by Henry to prioritize intelligence requirements?
- A. Develop a collection plan
- B. Produce actionable data
- C. Understand data reliability
- D. Understand frequency and impact of a threat
Answer: D
NEW QUESTION 33
John, a professional hacker, is trying to perform APT attack on the target organization network. He gains access to a single system of a target organization and tries to obtain administrative login credentials to gain further access to the systems in the network using various techniques.
What phase of the advanced persistent threat lifecycle is John currently in?
- A. Expansion
- B. Initial intrusion
- C. Search and exfiltration
- D. Persistence
Answer: A
NEW QUESTION 34
A team of threat intelligence analysts is performing threat analysis on malware, and each of them has come up with their own theory and evidence to support their theory on a given malware.
Now, to identify the most consistent theory out of all the theories, which of the following analytic processes must threat intelligence manager use?
- A. Analysis of competing hypotheses (ACH)
- B. Application decomposition and analysis (ADA)
- C. Threat modelling
- D. Automated technical analysis
Answer: A
NEW QUESTION 35
In which of the following storage architecture is the data stored in a localized system, server, or storage hardware and capable of storing a limited amount of data in its database and locally available for data usage?
- A. Centralized storage
- B. Object-based storage
- C. Cloud storage
- D. Distributed storage
Answer: B
NEW QUESTION 36
......
312-85 Actual Questions Answers PDF 100% Cover Real Exam Questions: https://www.exam4labs.com/312-85-practice-torrent.html
312-85 Real Exam Questions Test Engine Dumps Training With 50 Questions: https://drive.google.com/open?id=1xeZkBJyFb21CcgZH12PPwS24QRmTP08S