Sec+ CH2

Which of the following measures is not commonly used to assess thereat intelligence?

What language is STIX based on?

Kolin is a penetration tester who works for a cybersecurity company. His firm was hired to conduct a penetration test against a health-care system, and Kolin is working to gain access to the system belonging to a hospital in that system. What term best describes Kolin's work?

Which one of the following attackers is most likely to be associated with an APT?

What organizations did the U.S. government help create to help share knowledge between organizations in specific verticals?

Which of the following threat actors typically has the greatest access to resources?

of the threat vectors listed here, which one is most commonly exploited by attackers who are at a distant location?

Which one of the following is the best example of a hacktivist group?

What type of assessment is particularly useful for identifying insider threat?

Cindy wants to send threat information via a standardized protocol specifically designed to exchange cyber threat information. What should she choose? 

Greg believes that an attacker may have installed malicious firmware in a network device before it was provided to his organization by the supplier. What type of threat vector best describes this attack?

Ken is conducting threat research on Transport Layer Security (TLS) and would like to consult the authoritative reference for the protocol's technical specification. What resource would best meet his needs?

Wendy is scanning cloud-based repositories for sensitive information. Which one of the following should concern her most, if discovered in a public repository? 

which one of the following threat research tools is used to visually display information about the location of threat actors?

Vince recently received the hash values of malicious software that several other firms in his industry found installed on their systems after a compromise. What term best describes this information?