EC-Council CTIA Module 3.2 Practice Test 003

This practice test covers Module 3 (Planning, Direction, and Review) Sub-module 2 (Requirements Analysis).

These questions are inspired by the EC-Council CTIA exam and are designed to help you test your knowledge of cyber threat intelligence, threats and frameworks, and other related topics. Some questions require multiple correct answers.

These are not official exam questions or brain dumps. They are original scenario-based questions created to reflect the skills and knowledge tested in the CTIA exam.

Note: CTIA is a registered trademark of EC-Council. This content is not affiliated with or endorsed by EC-Council.

To choose CTIA practice tests based on specific modules and sub-modules, click that link

EC-Council CTIA Practice Test of the Day 260628

10 questions • Single best answer

Question 1

An intelligence director at a government agency gathers the questions stakeholders need answered before any collection begins. These structured needs guide the entire effort. What are these defined needs called?

A. Indicators of compromise B. Delivery mechanisms C. Intelligence requirements D. Analyst runbooks

Question 2

An analyst flags the single most important question, whether a specific APT will target the agency's election systems, as the top focus for collection. What is this highest-priority need called?

A. A computed indicator B. A priority intelligence requirement C. A dissemination plan D. A sharing agreement

Question 3

A team sorts its requirements into four buckets: Must have, Should have, Could have, and Won't have. They need the name of this prioritization technique. Which method is it?

A. Diamond Model B. Cyber Kill Chain C. Pyramid of Pain D. MoSCoW method

Question 4

Using the prioritization method, an analyst marks a requirement as non-negotiable and essential to the program's success. Which category does this requirement belong to?

A. Must have B. Could have C. Won't have D. Should have

Question 5

A requirement is set aside as out of scope for the current cycle, though it may be revisited later. Under the prioritization method, which category captures this?

A. Must have B. Should have C. Won't have this time D. Could have

Question 6

A CTI lead interviews executives, SOC managers, and incident responders to learn which decisions intelligence must support. What is the main purpose of gathering these inputs?

A. To select a SIEM vendor B. To eliminate data collection C. To write incident reports D. To define relevant intelligence requirements

Question 7

Once the requirements are agreed, a team determines which data sources can answer each one. Which downstream activity do well-defined requirements directly drive?

A. Incident recovery B. Collection planning C. Executive bonuses D. Malware reverse engineering

Question 8

An analyst warns that vague, undefined needs will lead the team to gather irrelevant data and waste effort. What does disciplined requirements analysis primarily prevent?

A. Wasted, unfocused collection B. All cyber attacks C. The need for dissemination D. Use of any frameworks

Question 9

A stakeholder confuses a pile of raw logs with an intelligence requirement. The analyst clarifies the distinction. What does an intelligence requirement actually specify?

A. A vendor contract B. The hardware budget C. A specific question intelligence must answer D. A finished report layout

Question 10

Under the prioritization method, a requirement is important and adds significant value but is not strictly vital for this cycle. Which category fits it best?

A. Must have B. Won't have C. Could have D. Should have

EC-Council CTIA Module 3.2 Practice Test 003

Related Posts

Leave a Comment Cancel Reply