EC-Council CTIA Module 8.2 Practice Test 003

This practice test covers Module 8 (Threat Intelligence in SOC Operations, Incident Response, and Risk Management) Sub-module 2 (Threat Intelligence in Risk Management).

These questions are inspired by the EC-Council CTIA exam and are designed to help you test your knowledge of cyber threat intelligence, threats and frameworks, and other related topics. Some questions require multiple correct answers.

These are not official exam questions or brain dumps. They are original scenario-based questions created to reflect the skills and knowledge tested in the CTIA exam.

Note: CTIA is a registered trademark of EC-Council. This content is not affiliated with or endorsed by EC-Council.

To choose CTIA practice tests based on specific modules and sub-modules, click that link

EC-Council CTIA Practice Test of the Day 260702

10 questions • Single best answer

Question 1

A risk manager at an insurance firm wants adversary trends to inform which risks get funded first. A CTI analyst feeds intelligence into the process. What does this mainly improve?

A. Guaranteed elimination of all risk B. Threat-informed risk prioritization C. Slower, guesswork-based scoring D. Removal of the risk register

Question 2

A CTI analyst maps active threats to the organization's assets to estimate exposure. A colleague names the risk component being informed. Which factor does intelligence most directly refine?

A. Likelihood of a threat occurring B. The office lease cost C. The payroll schedule D. The cafeteria menu

Question 3

A governance lead wants intelligence embedded across identify, assess, and treat stages rather than used once. An analyst names this approach. What is being described?

A. A one-time annual snapshot B. Ignoring emerging threats C. Continuous integration into the risk process D. Purely reactive cleanup

Question 4

A CTI team helps leadership decide whether to accept, mitigate, or transfer a specific risk. An analyst names what intelligence supports here. What does it enable?

A. Automatic legal immunity B. Random selection of controls C. Guaranteed zero incidents D. Informed risk treatment decisions

Question 5

A CISO wants intelligence to flag when a previously low risk becomes urgent due to active exploitation. An analyst names this capability. What does intelligence provide?

A. Dynamic reprioritization of risks B. A fixed, unchangeable risk list C. Deletion of all controls D. A guarantee against audits

Question 6

A risk committee asks the CTI team which strategic threats could impact business objectives over the next year. An analyst names the intelligence type suited to this. Which fits?

A. Low-level packet captures B. Raw firewall logs C. Strategic threat intelligence D. Single expired indicators

Question 7

A manager wants intelligence to justify security spending by linking investments to real adversary activity. An analyst names the benefit. What does this support?

A. Arbitrary budget cuts B. Risk-based resource allocation C. Spending unrelated to threats D. Ignoring cost entirely

Question 8

A CTI analyst updates a risk assessment after new intelligence shows a vendor was breached. A reviewer names the risk domain affected. Which risk does this most inform?

A. Third-party or supply-chain risk B. Office parking risk C. Catering contract risk D. Landscaping schedule risk

Question 9

A risk lead wants a common view where threats, vulnerabilities, and assets combine into a single score. An analyst names what intelligence contributes. Which element does it supply?

A. The office seating chart B. The threat context in the equation C. The employee vacation calendar D. The building floor plan

Question 10

A new analyst confuses simply listing threats with feeding intelligence into risk decisions. The lead clarifies. Which statement is most accurate?

A. Both are identical activities B. Listing threats alone drives all decisions C. Intelligence contextualizes threats to inform risk choices D. Risk management ignores threat intelligence

EC-Council CTIA Module 8.2 Practice Test 003

Related Posts

Leave a Comment Cancel Reply