312-85 Exam Questions and Answers | Exam-Dumps (Page: 1)

QUESTION: 1

Daniel is a professional hacker whose aim is to attack a system to steal data and money for profit. He performs hacking to obtain confidential data such as social security numbers, personally identifiable information (PII) of an employee, and credit card information. After obtaining confidential data, he further sells the information on the black market to make money.
Daniel comes under which of the following types of threat actor.

Industrial spies
State-sponsored hackers
Insider threat
Organized hackers

Answer(s): D

Reveal Solution Next Question

QUESTION: 2

An attacker instructs bots to use camouflage mechanism to hide his phishing and malware delivery locations in the rapidly changing network of compromised bots. In this particular technique, a single domain name consists of multiple IP addresses.
Which of the following technique is used by the attacker?

DNS zone transfer
Dynamic DNS
DNS interrogation
Fast-Flux DNS

Answer(s): D

Reveal Solution Next Question

QUESTION: 3

Kathy wants to ensure that she shares threat intelligence containing sensitive information with the appropriate audience. Hence, she used traffic light protocol (TLP).

Which TLP color would you signify that information should be shared only within a particular community?

Red
White
Green
Amber

Answer(s): D

Reveal Solution Next Question

QUESTION: 4

Moses, a threat intelligence analyst at InfoTec Inc., wants to find crucial information about the potential threats the organization is facing by using advanced Google search operators. He wants to identify whether any fake websites are hosted at the similar to the organization’s URL.
Which of the following Google search queries should Moses use?

relatewww.infothech.org
info: www.infothech.org
link: www.infothech.org
cache: www.infothech.org

Answer(s): A

Reveal Solution Next Question

QUESTION: 5

A team of threat intelligence analysts is performing threat analysis on malware, and each of them has come up with their own theory and evidence to support their theory on a given malware.
Now, to identify the most consistent theory out of all the theories, which of the following analytic processes must threat intelligence manager use?

Threat modelling
Application decomposition and analysis (ADA)
Analysis of competing hypotheses (ACH)
Automated technical analysis

Answer(s): C

Reveal Solution Next Question

EC-Council 312-85 Exam (page: 1)
EC-Council Certified Threat Intelligence Analyst
Updated on: 25-Dec-2025

Access free 312-85 actual exam questions, answers, explanations and user discussions.

QUESTION: 1

QUESTION: 2

QUESTION: 3

QUESTION: 4

QUESTION: 5

EC-Council 312-85 Exam (page: 1) EC-Council Certified Threat Intelligence Analyst Updated on: 25-Dec-2025

Access free 312-85 actual exam questions, answers, explanations and user discussions.

QUESTION: 1

QUESTION: 2

QUESTION: 3

QUESTION: 4

QUESTION: 5

EC-Council 312-85 Exam (page: 1)
EC-Council Certified Threat Intelligence Analyst
Updated on: 25-Dec-2025