312-85 Exam Questions and Answers | Exam-Dumps (Page: 2)

QUESTION: 6

Miley, an analyst, wants to reduce the amount of collected data and make the storing and sharing process easy. She uses filtering, tagging, and queuing technique to sort out the relevant and structured data from the large amounts of unstructured data.
Which of the following techniques was employed by Miley?

Sandboxing
Normalization
Data visualization
Convenience sampling

Answer(s): B

Reveal Solution Next Question

QUESTION: 7

Bob, a threat analyst, works in an organization named TechTop. He was asked to collect intelligence to fulfil the needs and requirements of the Red Tam present within the organization.
Which of the following are the needs of a RedTeam?

Intelligence related to increased attacks targeting a particular software or operating system vulnerability
Intelligence on latest vulnerabilities, threat actors, and their tactics, techniques, and procedures (TTPs)
Intelligence extracted latest attacks analysis on similar organizations, which includes details about latest threats and TTPs
Intelligence that reveals risks related to various strategic business decisions

Answer(s): B

Reveal Solution Next Question

QUESTION: 8

Michael, a threat analyst, works in an organization named TechTop, was asked to conduct a cyber-threat intelligence analysis. After obtaining information regarding threats, he has started analyzing the information and understanding the nature of the threats.
What stage of the cyber-threat intelligence is Michael currently in?

Unknown unknowns
Unknowns unknown
Known unknowns
Known knowns

Answer(s): C

Reveal Solution Next Question

QUESTION: 9

Enrage Tech Company hired Enrique, a security analyst, for performing threat intelligence analysis. While performing data collection process, he used a counterintelligence mechanism where a recursive DNS server is employed to perform interserver DNS communication and when a request is generated from any name server to the recursive DNS server, the recursive DNS servers log the responses that are received. Then it replicates the logged data and stores the data in the central database. Using these logs, he analyzed the malicious attempts that took place over DNS infrastructure.

Which of the following cyber counterintelligence (CCI) gathering technique has Enrique used for data collection?

Data collection through passive DNS monitoring
Data collection through DNS interrogation
Data collection through DNS zone transfer
Data collection through dynamic DNS (DDNS)

Answer(s): B

Reveal Solution Next Question

QUESTION: 10

John, a professional hacker, is trying to perform APT attack on the target organization network. He gains access to a single system of a target organization and tries to obtain administrative login credentials to gain further access to the systems in the network using various techniques.
What phase of the advanced persistent threat lifecycle is John currently in?

Initial intrusion
Search and exfiltration
Expansion
Persistence

Answer(s): C

Reveal Solution Next Question

EC-Council 312-85 Exam (page: 2) EC-Council Certified Threat Intelligence Analyst Updated on: 25-Dec-2025

QUESTION: 6

QUESTION: 7

QUESTION: 8

QUESTION: 9

QUESTION: 10

EC-Council 312-85 Exam (page: 2)
EC-Council Certified Threat Intelligence Analyst
Updated on: 25-Dec-2025