EC-Council CTIA Module 3.6 Practice Test 002

This practice test covers Module 3 (Planning, Direction, and Review) Sub-module 6 (Threat Intelligence Sharing).

These questions are inspired by the EC-Council CTIA exam and are designed to help you test your knowledge of cyber threat intelligence, threats and frameworks, and other related topics. Some questions require multiple correct answers.

These are not official exam questions or brain dumps. They are original scenario-based questions created to reflect the skills and knowledge tested in the CTIA exam.

Note: CTIA is a registered trademark of EC-Council. This content is not affiliated with or endorsed by EC-Council.

To choose CTIA practice tests based on specific modules and sub-modules, click that link

EC-Council CTIA Module 3.6 Practice Test 002

10 questions • Single best answer

Question 1

A regional energy utility joins an industry consortium to exchange adversary data with peer organizations facing similar attackers. Leadership asks what core advantage this collaboration provides. What is the primary benefit?

A. Eliminating all false positives B. Reducing security staffing costs C. Gaining broader visibility into emerging threats D. Guaranteeing full regulatory compliance

Question 2

A CTI program manager is mapping which external entities to exchange intelligence with. The options include vendors, government bodies, and industry peers. Which type describes same-sector organizations collaborating through a trusted member group?

A. Open-source feed provider B. Information Sharing and Analysis Center C. Commercial threat vendor D. Managed detection provider

Question 3

An analyst designs how intelligence will flow among consortium members. In one arrangement, a central organization collects data and redistributes it to all participants. Which sharing model is this?

A. Peer-to-peer model B. Source-subscriber model C. Mesh distribution model D. Hub-and-spoke model

Question 4

A SOC team receives shared intelligence marked to restrict redistribution beyond their organization. They must determine handling rules before circulating it internally. Which protocol governs this color-based marking?

A. Traffic Light Protocol B. MoSCoW Method C. STIX taxonomy D. Cyber Kill Chain

Question 5

A financial institution wants to automate exchange of structured indicators with partners using a machine-readable format and a transport mechanism. The team needs recognized standards for both. Which pairing enables this?

A. YARA and Snort B. JSON and CSV C. STIX and TAXII D. PDF and email

Question 6

Before two organizations begin exchanging intelligence, legal teams require a document defining confidentiality, permitted use, and liability. Nothing is released until it is signed. Which agreement must be established first?

A. Service-level agreement B. Non-disclosure agreement C. Project charter D. Statement of work

Question 7

Organizations across several unrelated sectors form a voluntary collaborative to exchange threat data without being tied to one industry. Leadership wants to label this structure accurately. Which entity type describes it?

A. ISAC B. CERT C. Fusion center D. ISAO

Question 8

An organization both contributes its own findings and receives intelligence from partners in a reciprocal relationship. One partner, however, only takes intelligence and never gives back. Which role describes that partner?

A. Consumer B. Producer C. Broker D. Aggregator

Question 9

A CTI team hesitates to share internal incident data externally, fearing exposure of sensitive information and reputational harm. Management asks what typically blocks broader collaboration. Which factor is most often responsible?

A. Excessive feed volume B. Lack of trust C. Tool incompatibility D. Time zone differences

Question 10

An intelligence manager prepares to distribute high-level adversary trend information meant to guide executive decision-making rather than immediate technical defense. The audience is the leadership board. Which type of intelligence is this?

A. Tactical intelligence B. Operational intelligence C. Strategic intelligence D. Technical intelligence

EC-Council CTIA Module 3.6 Practice Test 002

Related Posts

Leave a Comment Cancel Reply