EC-Council CTIA Module 2.1 Practice Test 001

This practice test covers Module 2 (Cyber Threats and Attack Frameworks) Sub-module 1 (Cyber Threats).

These questions are inspired by the EC-Council CTIA exam and are designed to help you test your knowledge of cyber threat intelligence, threats and frameworks, and other related topics. Some questions require multiple correct answers.

These are not official exam questions or brain dumps. They are original scenario-based questions created to reflect the skills and knowledge tested in the CTIA exam.

Note: CTIA is a registered trademark of EC-Council. This content is not affiliated with or endorsed by EC-Council.

To choose CTIA practice tests based on specific modules and sub-modules, click that link

EC-Council CTIA Module 2.1 Practice Test 001

10 questions • Single best answer

Question 1

A CTI analyst at a logistics firm catalogs hostile parties by motivation and capability, separating financially driven criminals from ideologically driven groups. Leadership asks what umbrella term covers these hostile parties. Which term applies?

A. Security controls B. Threat actors C. Risk registers D. Audit findings

Question 2

A SOC team supporting a utility classifies an incident where a disgruntled employee abused legitimate access to leak data. Leadership wants the category that captures threats originating from within the organization. Which category fits?

A. External nation-state threat B. Supply chain threat C. Environmental threat D. Insider threat

Question 3

An analyst profiles a group that breaches systems purely to promote a political cause and embarrass its target. The group seeks attention rather than profit or espionage. Which threat actor type is this?

A. Hacktivist B. Cyber criminal C. Script kiddie D. Nation-state actor

Question 4

A threat intelligence team reviews an attack whose goal was to render systems unusable and halt operations, with no data theft or ransom demand. Leadership asks what objective the adversary pursued. Which objective applies?

A. Data exfiltration B. Credential harvesting C. Disruption of availability D. Long-term espionage

Question 5

A bank's CTI team groups its adversaries into categories such as natural, intentional, and unintentional sources of harm. An auditor asks what this high-level grouping represents. Which concept is being applied?

A. Indicators of compromise B. Threat categories C. Kill chain phases D. Intelligence requirements

Question 6

An MSSP analyst encounters an attacker using only downloaded tools with little technical skill, motivated mainly by curiosity and bragging rights. Which threat actor classification best describes this attacker?

A. Advanced persistent threat B. Organized crime syndicate C. State-sponsored operator D. Script kiddie

Question 7

A healthcare CTI team investigates a breach traced to a vendor's compromised software update that delivered malicious code downstream. Leadership asks which threat category this represents. Which category fits?

A. Supply chain threat B. Insider threat C. Physical theft D. Hacktivism

Question 8

A CTI analyst studies a group that steals intellectual property to benefit a competing foreign industry, backed by significant funding and patience. Which adversary type does this profile indicate?

A. Script kiddie B. Insider C. Nation-state actor D. Opportunistic vandal

Question 9

A risk team reviews an attack motivated entirely by extortion, where the adversary encrypted files and demanded payment for their release. Leadership asks what primary objective drove the attacker. Which objective applies?

A. Political messaging B. Financial gain C. National defense D. Academic research

Question 10

An intelligence lead briefs executives that effective defense requires understanding not just how attacks happen but who conducts them and why. Executives ask what value profiling adversaries provides. What is the main benefit?

A. It guarantees zero successful intrusions B. It replaces the need for monitoring C. It eliminates all false positives D. It informs defenses with intent and capability context

EC-Council CTIA Module 2.1 Practice Test 001

Related Posts

Leave a Comment Cancel Reply