EC-Council CTIA Module 2.1 Practice Test 003

This practice test covers Module 2 (Introduction to Threat Intelligence) Sub-module 1 (Cyber Threats).

These questions are inspired by the EC-Council CTIA exam and are designed to help you test your knowledge of cyber threat intelligence, threats and frameworks, and other related topics. Some questions require multiple correct answers.

These are not official exam questions or brain dumps. They are original scenario-based questions created to reflect the skills and knowledge tested in the CTIA exam.

Note: CTIA is a registered trademark of EC-Council. This content is not affiliated with or endorsed by EC-Council.

To choose CTIA practice tests based on specific modules and sub-modules, click that link

EC-Council CTIA Practice Test of the Day 260626

10 questions • Single best answer

Question 1

A SOC team at a manufacturing firm categorizes the dangers it faces across people, processes, and technology. They focus on anything able to exploit a weakness and cause harm. What term describes such a potential danger?

A. An asset B. A control C. A patch D. A threat

Question 2

An analyst at a water utility groups risks by origin: some from deliberate adversaries, some from accidental human mistakes, and some from environmental events. How are these groupings best described?

A. Threat actors B. Threat categories C. Threat feeds D. Threat reports

Question 3

Reporting attributes a ransomware spree to a group whose sole aim is financial gain through extortion. They operate like a business and sell access. Which actor type fits?

A. Hacktivist B. Nation-state C. Cybercriminal D. Insider

Question 4

An energy company learns an intruder quietly copied research and design files over months without disrupting operations. No ransom or destruction occurred. What was the attacker's primary objective?

A. Espionage B. Financial extortion C. Public defacement D. Service disruption

Question 5

A bank discovers a privileged employee exfiltrated customer data before resigning. The actor held legitimate access and acted from within. Which threat source is this?

A. External script kiddie B. Nation-state actor C. Hacktivist collective D. Malicious insider

Question 6

A media outlet's site is flooded with traffic during an election and knocked offline. The actors claim ideological motives and seek attention. What is the primary objective of this attack?

A. Data exfiltration B. Service disruption C. Strategic espionage D. Financial gain

Question 7

A small e-commerce site is hit by an attacker using downloaded, prebuilt exploit tools with little understanding of how they work. The actor seeks bragging rights. Which actor type is this?

A. Script kiddie B. Nation-state actor C. Organized cybercrime group D. Advanced persistent threat

Question 8

A new analyst confuses key terms. A mentor clarifies that a weakness in a system that could be exploited is not the same as the danger itself. What term names that exploitable weakness?

A. Threat B. Risk C. Vulnerability D. Exploit

Question 9

A critical infrastructure operator faces a well-resourced adversary pursuing geopolitical goals with patience and custom tooling. Profit is not the motive. Which actor category best fits?

A. Lone hacktivist B. Petty cybercriminal C. Careless insider D. Nation-state actor

Question 10

An analyst maps the paths adversaries could use to reach assets: phishing emails, exposed services, and removable media. She wants to describe these entry points collectively. Which term applies?

A. Threat intelligence B. Attack vectors C. Indicators of compromise D. Security controls

EC-Council CTIA Module 2.1 Practice Test 003

Related Posts

Leave a Comment Cancel Reply