EC-Council CTIA Module 6.9 Practice Test 003

This practice test covers Module 6 (Intelligence Reporting and Dissemination) Sub-module 9 (Threat Intelligence Sharing and Collaboration using Python Scripting).

These questions are inspired by the EC-Council CTIA exam and are designed to help you test your knowledge of cyber threat intelligence, threats and frameworks, and other related topics. Some questions require multiple correct answers.

These are not official exam questions or brain dumps. They are original scenario-based questions created to reflect the skills and knowledge tested in the CTIA exam.

Note: CTIA is a registered trademark of EC-Council. This content is not affiliated with or endorsed by EC-Council.

To choose CTIA practice tests based on specific modules and sub-modules, click that link

EC-Council CTIA Practice Test of the Day 260702

10 questions • Single best answer

Question 1

A CTI developer at a government agency writes Python to pull indicators from a TAXII server and post them to partners on a schedule. A reviewer asks the benefit. What does scripting mainly provide?

A. Manual copying of each indicator B. Slower one-time exchanges C. Automated, repeatable sharing D. Removal of all standards

Question 2

An analyst scripts a client that must connect to a partner's TAXII service to fetch collections. A colleague names the required library type. What should the script use?

A. A TAXII client library B. A spreadsheet macro C. A word-processor plugin D. A video codec

Question 3

A CTI engineer wants shared output that other tools can parse regardless of vendor. A colleague names the format the script should emit. Which representation fits?

A. A scanned PDF image B. A proprietary binary blob C. A handwritten note D. STIX JSON

Question 4

A developer's sharing script hardcodes an API key directly in the source committed to a repo. A reviewer flags a risk. What should the script do instead?

A. Print the key to logs B. Store secrets outside source code C. Email the key to partners D. Embed the key in the filename

Question 5

A CTI team scripts automatic sharing but wants only high-confidence indicators sent to partners. An analyst names the step to add. What should the script apply first?

A. Send every raw log line B. Randomly drop indicators C. Filter by confidence and validation D. Share only expired indicators

Question 6

An engineer builds a script to distribute YARA rules to detection sensors automatically. A colleague asks the rules' purpose. What do YARA rules mainly enable?

A. Pattern-based malware identification B. Encrypting all network traffic C. Managing user payroll D. Scheduling office meetings

Question 7

A CTI script posts indicators to a partner API but must handle occasional server timeouts gracefully. A reviewer names the practice. What should the script implement?

A. Crash on the first error B. Ignore all responses C. Send data twice as fast D. Error handling with retries

Question 8

A developer wants the sharing script to run automatically each hour without manual launching. A colleague names the mechanism. What should be used?

A. A scheduler like cron B. Manually double-clicking hourly C. Asking a coworker to run it D. Rebooting the server each time

Question 9

A CTI script must authenticate to a partner TAXII server before uploading. A reviewer asks what the server checks. What confirms the script's identity?

A. The script's file size B. The color of the terminal C. Valid credentials or tokens D. The number of code comments

Question 10

A new developer asks why the team scripts sharing rather than exchanging spreadsheets by email. The lead answers concisely. Which benefit is most accurate?

A. It guarantees zero cyberattacks B. Scalable, consistent, timely automated exchange C. It removes the need for standards D. It makes data unreadable to partners

EC-Council CTIA Module 6.9 Practice Test 003

Related Posts

Leave a Comment Cancel Reply