EC-Council CTIA Module 3.4 Practice Test 002

This practice test covers Module 3 (Planning, Direction, and Review) Sub-module 4 (Establish Management Support).

These questions are inspired by the EC-Council CTIA exam and are designed to help you test your knowledge of cyber threat intelligence, threats and frameworks, and other related topics. Some questions require multiple correct answers.

These are not official exam questions or brain dumps. They are original scenario-based questions created to reflect the skills and knowledge tested in the CTIA exam.

Note: CTIA is a registered trademark of EC-Council. This content is not affiliated with or endorsed by EC-Council.

To choose CTIA practice tests based on specific modules and sub-modules, click that link

EC-Council CTIA Module 3.4 Practice Test 002

10 questions • Single best answer

Question 1

A CTI program manager at a multinational bank is preparing to pitch a new intelligence initiative to the board. She needs leadership endorsement to unlock funding and cross-department cooperation. What must she primarily secure?

A. Vendor threat feed subscriptions B. Executive buy-in and sponsorship C. Additional SIEM licenses D. A finalized IoC repository

Question 2

An intelligence lead must convince skeptical executives to fund the program. The leadership team cares about cost, loss reduction, and competitive advantage. How should the lead frame the program's value?

A. In technical IoC detail B. Using raw feed volume metrics C. Through malware reverse-engineering depth D. In business risk and impact terms

Question 3

A threat analyst at a power utility is asked to justify program investment to senior management. Management wants a structured document outlining costs, benefits, and expected outcomes. Which deliverable best supports this request?

A. A business case B. A runbook C. A YARA ruleset D. A collection plan

Question 4

A CTI manager reports quarterly to the executive committee on program effectiveness. Leadership wants evidence that the spending is paying off. Which metric is most appropriate to present?

A. Number of feeds ingested B. Lines of detection code written C. Return on investment metrics D. Count of open tickets

Question 5

A new threat intelligence effort stalls because leadership has not committed resources or authority. The team cannot access systems or obtain budget. What is the underlying problem?

A. Poor IoC quality B. Lack of management support C. Weak network segmentation D. Inadequate feed sources

Question 6

An intelligence director wants leadership to view the program as strategic rather than purely technical. She intends to tie intelligence outcomes to organizational priorities. What approach achieves this?

A. Increase IoC ingestion rate B. Expand the malware sandbox C. Add more detection rules D. Align the program with business objectives

Question 7

A CTI team prepares briefings for C-suite leaders to sustain their support. The leaders want high-level insight on trends, adversary intent, and long-term risk, not technical indicators. Which type best fits?

A. Strategic intelligence B. Tactical intelligence C. Technical intelligence D. Operational intelligence

Question 8

A program lead at a government agency has executive interest but no committed funding. To move forward, she must convert that interest into tangible commitment. What should she obtain next?

A. A new TIP platform B. Additional analysts C. Dedicated budget allocation D. More raw threat data

Question 9

Executives question why the organization needs threat intelligence when it already has a firewall and antivirus. The CTI lead must address this resistance. What is the best response?

A. Emphasize tool quantity B. Explain proactive risk reduction C. Cite raw data volumes D. Promise zero successful breaches

Question 10

A threat intelligence program needs a senior leader who champions it, removes obstacles, and advocates for resources. The team identifies this person as critical to long-term success. What role does this individual fill?

A. Threat hunter B. SOC analyst C. Incident responder D. Executive sponsor

EC-Council CTIA Module 3.4 Practice Test 002

Related Posts

Leave a Comment Cancel Reply