EC-Council CTIA Module 1.5 Practice Test 003

This practice test covers Module 1 (Introduction to Threat Intelligence) Sub-module 5 (Threat Intelligence in the Cloud Environment).

These questions are inspired by the EC-Council CTIA exam and are designed to help you test your knowledge of cyber threat intelligence, threats and frameworks, and other related topics. Some questions require multiple correct answers.

These are not official exam questions or brain dumps. They are original scenario-based questions created to reflect the skills and knowledge tested in the CTIA exam.

Note: CTIA is a registered trademark of EC-Council. This content is not affiliated with or endorsed by EC-Council.

To choose CTIA practice tests based on specific modules and sub-modules, click that link

EC-Council CTIA Practice Test of the Day 260625

10 questions • Single best answer

Question 1

A cloud security lead at a healthcare provider is migrating patient systems to a public cloud. They want intelligence revealing adversary activity that targets cloud workloads and misconfigurations. What capability primarily supports this goal?

A. Traditional perimeter firewall logging B. Endpoint antivirus signatures C. Cloud-focused threat intelligence D. Static vulnerability scanning

Question 2

A SaaS company's CTI team debates who secures the underlying infrastructure versus the data running on it. They need a model clarifying these obligations between provider and customer. Which concept addresses this division?

A. Shared responsibility model B. Service-level agreement C. Cyber Kill Chain D. Threat intelligence lifecycle

Question 3

An analyst supporting a fintech's cloud operations sees attackers abusing exposed API keys and identity tokens. Leadership asks what cloud threat intelligence chiefly delivers against such activity. Which best describes its primary value?

A. Guaranteeing zero breaches B. Replacing identity management C. Eliminating cloud costs D. Context on adversary behavior

Question 4

A CISO at a government agency wants high-level cloud threat insights to guide multi-year security investments. The information should inform executive risk decisions rather than daily detection. Which type of threat intelligence fits this need?

A. Tactical threat intelligence B. Strategic threat intelligence C. Operational threat intelligence D. Technical threat intelligence

Question 5

A SOC team protecting a retailer's cloud environment needs immediate indicators like malicious IPs and file hashes to feed detection tools. They want intelligence consumable directly by security controls. Which type best supports this?

A. Technical threat intelligence B. Strategic threat intelligence C. Operational threat intelligence D. Tactical threat intelligence

Question 6

A cloud analyst at an MSSP receives thousands of raw firewall and flow logs from tenant environments. These records lack context, correlation, or relevance until processed. What does this unprocessed material represent?

A. Finished intelligence B. Strategic intelligence C. Threat data D. Indicators of compromise

Question 7

A threat hunter at an insurance firm wants to catch cloud account takeovers before damage occurs rather than after alerts fire. Management asks how integrating threat intelligence changes their cloud defense posture. What is the main benefit?

A. Reduced cloud storage costs B. Automatic patch deployment C. Guaranteed compliance certification D. Proactive threat detection

Question 8

An enterprise running workloads across several cloud providers struggles to aggregate scattered threat feeds. They want a centralized system to collect, normalize, and correlate this intelligence. Which solution suits this requirement?

A. SIEM appliance B. Threat intelligence platform C. Cloud access security broker D. Vulnerability scanner

Question 9

A DevSecOps team notes their cloud assets spin up and down constantly, shifting the attack surface hourly. They ask why threat intelligence must be continuously refreshed in such settings. What primarily drives this need?

A. Dynamic, ephemeral cloud infrastructure B. Fixed network perimeters C. Static on-premise servers D. Reduced regulatory oversight

Question 10

A critical infrastructure operator using hybrid cloud receives vast global threat reports daily. The CTI team wants intelligence filtered to threats actually targeting their platforms and sector. What quality makes the intelligence most useful?

A. Volume of indicators B. Age of the data C. Relevance to the environment D. Number of feed sources

EC-Council CTIA Module 1.5 Practice Test 003

Related Posts

Leave a Comment Cancel Reply