EC-Council CTIA Module 3.6 Practice Test 003

This practice test covers Module 3 (Planning, Direction, and Review) Sub-module 6 (Plan a Threat Intelligence Program).

These questions are inspired by the EC-Council CTIA exam and are designed to help you test your knowledge of cyber threat intelligence, threats and frameworks, and other related topics. Some questions require multiple correct answers.

These are not official exam questions or brain dumps. They are original scenario-based questions created to reflect the skills and knowledge tested in the CTIA exam.

Note: CTIA is a registered trademark of EC-Council. This content is not affiliated with or endorsed by EC-Council.

To choose CTIA practice tests based on specific modules and sub-modules, click that link

EC-Council CTIA Practice Test of the Day 260628

10 questions • Single best answer

Question 1

An analyst at a financial-sector ISAC exchanges threat data with peer banks to strengthen collective defense. They describe this collaborative exchange to a new hire. What is this practice called?

A. Threat hunting B. Incident recovery C. Threat intelligence sharing D. Malware reverse engineering

Question 2

The team categorizes its collaborators into vendors, government agencies, industry peers, and ISACs. They need a name for this grouping. What does this categorization define?

A. Types of sharing partners B. Categories of indicators C. Pyramid of Pain tiers D. Cyber Kill Chain phases

Question 3

Before sharing a report, an analyst marks it with a color code that controls how widely recipients may redistribute it. They name the governing scheme. Which protocol is this?

A. Diamond Model B. MoSCoW method C. Cyber Kill Chain D. Traffic Light Protocol

Question 4

In one arrangement, a central coordinating body collects intelligence from members and redistributes it back to all of them. The analyst names this design. Which sharing model is it?

A. Peer-to-peer model B. Hub-and-spoke model C. Source-subscriber model D. Point-to-point model

Question 5

Leadership questions the value of exchanging intelligence with peers. The analyst explains members gain early warning of threats others have already seen. What is the main benefit?

A. Guaranteed zero incidents B. Elimination of all security tools C. Broader and earlier threat awareness D. Removal of requirements analysis

Question 6

A healthcare provider joins a sector-specific nonprofit that gathers and shares threat intelligence among member organizations. The analyst names this body. What type of organization is it?

A. An Information Sharing and Analysis Center B. A threat actor group C. A penetration testing vendor D. A managed firewall service

Question 7

Two trusted organizations exchange intelligence directly with each other without any central coordinator. The analyst classifies this arrangement. Which sharing model does it describe?

A. Hub-and-spoke model B. Source-subscriber model C. Broadcast model D. Peer-to-peer model

Question 8

Before exchanging sensitive intelligence, partners establish agreements on confidentiality and acceptable use. A peer asks why this matters. Why is this trust foundation essential to sharing?

A. It increases attacker dwell time B. It protects sensitive data and sustains willingness to share C. It eliminates the SOC team D. It replaces the threat landscape

Question 9

In one model, a single provider produces intelligence that many consuming organizations receive on a one-way basis. The analyst names this design. Which sharing model is it?

A. Source-subscriber model B. Peer-to-peer model C. Hub-and-spoke model D. Mesh model

Question 10

An analyst receives advisories from a national cybersecurity agency about nation-state campaigns. They classify the source. Into which sharing-partner category does it fall?

A. Competitor intelligence B. Anonymous dark-web forum C. Government partner D. Internal SOC log

EC-Council CTIA Module 3.6 Practice Test 003

Related Posts

Leave a Comment Cancel Reply