EC-Council CTIA Module 6.7 Practice Test 002

This practice test covers Module 6 (Intelligence Reporting and Dissemination) Sub-module 7 (Intelligence Sharing Acts and Regulations).

These questions are inspired by the EC-Council CTIA exam and are designed to help you test your knowledge of cyber threat intelligence, threats and frameworks, and other related topics. Some questions require multiple correct answers.

These are not official exam questions or brain dumps. They are original scenario-based questions created to reflect the skills and knowledge tested in the CTIA exam.

Note: CTIA is a registered trademark of EC-Council. This content is not affiliated with or endorsed by EC-Council.

To choose CTIA practice tests based on specific modules and sub-modules, click that link

EC-Council CTIA Module 6.7 Practice Test 002

10 questions • Single best answer

Question 1

A CTI program manager at a U.S. critical infrastructure operator wants liability protection when voluntarily sharing cyber threat indicators with the federal government. Counsel asks which 2015 federal law grants this protection. Which law applies?

A. General Data Protection Regulation B. Cybersecurity Information Sharing Act of 2015 C. Health Insurance Portability and Accountability Act D. Federal Information Security Management Act

Question 2

An analyst labels a threat report so recipients know it may be shared only within their own organization and not posted publicly. The team needs a simple color-coded standard for these handling rules. Which standard defines them?

A. STIX B. TAXII C. YARA D. Traffic Light Protocol

Question 3

A financial institution in the EU plans to share indicators that contain personal data with partners. Its privacy officer requires that the processing comply with European data protection law. Which regulation governs this?

A. General Data Protection Regulation B. Cybersecurity Information Sharing Act of 2015 C. Traffic Light Protocol D. Protected Critical Infrastructure Information Program

Question 4

A U.S. Department of Homeland Security program enables bidirectional, near-real-time exchange of cyber threat indicators between government and private-sector participants. An MSSP wants to join this structured collaboration. Which program provides it?

A. Protected Critical Infrastructure Information Program B. Cyber Threat Intelligence Integration Center C. Cyber Information Sharing and Collaboration Program D. Traffic Light Protocol

Question 5

A critical infrastructure operator wants assurance that information it voluntarily submits to the government is exempt from public disclosure under freedom-of-information requests. A DHS program offers this safeguard. Which program is it?

A. Cyber Information Sharing and Collaboration Program B. Protected Critical Infrastructure Information Program C. Cyber Threat Intelligence Integration Center D. Information Sharing and Analysis Center

Question 6

A national U.S. body integrates and analyzes intelligence on foreign cyber threats and coordinates that assessment across federal agencies. An executive asks which entity fills this integration role. Which is it?

A. Cyber Threat Intelligence Integration Center B. Information Sharing and Analysis Center C. Cyber Information Sharing and Collaboration Program D. Computer Emergency Response Team

Question 7

An analyst receives intelligence designated for named recipients only, with no redistribution permitted even inside their own organization. Under the color handling scheme, the team must identify this most restrictive designation. Which is it?

A. TLP:GREEN B. TLP:AMBER C. TLP:RED D. TLP:CLEAR

Question 8

A UK organization joins a confidential government-industry partnership to exchange cyber threat information in a secure, trusted environment. Its security lead must name this national initiative. Which one is it?

A. Information Sharing and Analysis Center B. Cyber Information Sharing and Collaboration Program C. Protected Critical Infrastructure Information Program D. Cyber Security Information Sharing Partnership

Question 9

A CTI lead joins a sector-specific community where members in the same industry exchange threat data, alerts, and best practices. An executive asks what kind of body this is. Which describes it?

A. Information Sharing and Analysis Center B. Cyber Threat Intelligence Integration Center C. Protected Critical Infrastructure Information Program D. Computer Emergency Response Team

Question 10

A CTI team wants to share indicators in a machine-readable, standardized format and move them over a trusted transport so partners can automate ingestion. An architect must pick the right pairing. Which combination fits?

A. Traffic Light Protocol and YARA B. STIX and TAXII C. GDPR and CISA 2015 D. PCII and CISCP

EC-Council CTIA Module 6.7 Practice Test 002

Related Posts

Leave a Comment Cancel Reply