EC-Council CTIA Module 4.2 Practice Test 003

This practice test covers Module 4 (Data Collection and Processing) Sub-module 2 (Threat Intelligence Collection Management).

These questions are inspired by the EC-Council CTIA exam and are designed to help you test your knowledge of cyber threat intelligence, threats and frameworks, and other related topics. Some questions require multiple correct answers.

These are not official exam questions or brain dumps. They are original scenario-based questions created to reflect the skills and knowledge tested in the CTIA exam.

Note: CTIA is a registered trademark of EC-Council. This content is not affiliated with or endorsed by EC-Council.

To choose CTIA practice tests based on specific modules and sub-modules, click that link

EC-Council CTIA Practice Test of the Day 260628

10 questions • Single best answer

Question 1

A collection manager at a federal agency oversees which sources are tasked, tracks coverage, and aligns gathering to requirements. They name this discipline for a new hire. What is it?

A. Intelligence dissemination B. Threat hunting C. Collection management D. Incident response

Question 2

Before tasking sources, the manager builds a document mapping each requirement to the sources and methods that will satisfy it. They name this artifact. What is it called?

A. A collection plan B. An incident report C. A YARA rule D. A project charter

Question 3

The manager translates broad intelligence requirements into specific data that must be gathered from particular sources. They name these granular needs. What are they called?

A. Indicators of compromise B. Rules of engagement C. Sharing partners D. Collection requirements

Question 4

The manager rates each source on reliability and the credibility of its information before relying on it. A peer asks the purpose. What is the aim of this assessment?

A. To increase raw data volume only B. To prioritize trustworthy sources C. To eliminate the analysis phase D. To bypass requirements analysis

Question 5

Reviewing coverage, the manager finds no current source provides visibility into a priority adversary's infrastructure. They label this shortfall. What does the missing coverage represent?

A. A disseminated report B. A normalized dataset C. A collection gap D. A finished runbook

Question 6

The manager ensures every priority requirement has at least one tasked source feeding it. A reviewer asks the benefit. What does this mapping primarily achieve?

A. Coverage of intelligence requirements B. Elimination of all false positives C. Removal of management support D. Guaranteed threat attribution

Question 7

With limited resources, the manager allocates collection effort to the highest-priority requirements first. They name the principle guiding this. What principle is being applied?

A. Random source selection B. Prioritization of collection effort C. Unlimited bulk gathering D. Dissemination scheduling

Question 8

As requirements shift, the manager continuously adjusts which sources are tasked and retires those no longer useful. A peer asks the value. What does this ongoing activity ensure?

A. That collection stops permanently B. That all data becomes unstructured C. That attribution is automatic D. That collection stays aligned to current needs

Question 9

The manager deliberately tasks multiple independent sources to corroborate the same indicator. A colleague asks why diversity helps. Why is using diverse sources valuable?

A. It guarantees zero cost B. It removes the need for analysis C. It improves confidence through corroboration D. It eliminates intelligence requirements

Question 10

An executive asks why a formal collection plan matters at all. The manager summarizes its core value in plain terms. What does the plan primarily prevent?

A. Wasted effort on unfocused, redundant gathering B. All cyber incidents C. Use of any analytical frameworks D. The need for dissemination

EC-Council CTIA Module 4.2 Practice Test 003

Related Posts

Leave a Comment Cancel Reply