CSIA105 Test Questions and Answers Rated A
An IOC occurs when what metric exceeds its c. AIP-TAR
normal bounds? d. TCP-Over-Secure (ToP) - ANSWER -b.
a. IRR TAXII
b. LRG
c. EXR
d. KRI - ANSWER -d. KRI What are the two limitations of private information
sharing centers?
a. Government approval and cost
What are the two concerns about using public b. Access to data and participation
information sharing centers? c. Bandwidth and CPU
a. Privacy and speed d. Timing of reports and remote access -
b. Security and privacy ANSWER -b. Access to data and
c. Regulatory approval and sharing participation
d. Cost and availability - ANSWER -a.
Privacy and speed
Which of the following is NOT a limitation of a
threat map?
Which privacy protection uses four colors to a. Threat actors usually mask their real locations
indicate the expected sharing limitations that are so what is displayed on a threat map is incorrect.
to be applied by recipients of the information? b. Many maps claim that they show data in real
a. PCII time, but most are simply a playback of previous
b. TLP attacks.
c. CISA c. Because threat maps show anonymized data it
d. FOIA - ANSWER -b. TLP is impossible to know the identity of the attackers
or the victims.
d. They can be difficult to visualize. -
Oskar has been receiving emails about critical ANSWER -d. They can be difficult to
threat intelligence information from a public visualize.
information sharing center. His team leader has
asked him to look into how the process can be
automated so that the information can feed Luka has been asked by his supervisor to
directly into their technology security. What monitor the dark web for any IOCs concerning
technology will Oskar recommend? their organization. The next week, Luca reports
a. Bidirectional Security Protocol (BSP) back that he was unable to find anything due to
b. Linefeed Access how looking for information on the dark web is
c. Lightwire JSON Control different from using the regular web. Which of the
d. Automated Indicator Sharing (AIS) - following is not different about looking for
ANSWER -d. Automated Indicator Sharing information on the dark web?
(AIS) a. Dark web merchants open and close their sites
without warning.
b. It is necessary to use Tor or IP2.
Which of the following is an application protocol c. Dark web search engines are identical to
for exchanging cyberthreat intelligence over regular search engines.
HTTPS? d. The naming structure is different on the dark
a. STIX web. - ANSWER -c. Dark web search
b. TAXII engines are identical to regular search engines.
1/3
An IOC occurs when what metric exceeds its c. AIP-TAR
normal bounds? d. TCP-Over-Secure (ToP) - ANSWER -b.
a. IRR TAXII
b. LRG
c. EXR
d. KRI - ANSWER -d. KRI What are the two limitations of private information
sharing centers?
a. Government approval and cost
What are the two concerns about using public b. Access to data and participation
information sharing centers? c. Bandwidth and CPU
a. Privacy and speed d. Timing of reports and remote access -
b. Security and privacy ANSWER -b. Access to data and
c. Regulatory approval and sharing participation
d. Cost and availability - ANSWER -a.
Privacy and speed
Which of the following is NOT a limitation of a
threat map?
Which privacy protection uses four colors to a. Threat actors usually mask their real locations
indicate the expected sharing limitations that are so what is displayed on a threat map is incorrect.
to be applied by recipients of the information? b. Many maps claim that they show data in real
a. PCII time, but most are simply a playback of previous
b. TLP attacks.
c. CISA c. Because threat maps show anonymized data it
d. FOIA - ANSWER -b. TLP is impossible to know the identity of the attackers
or the victims.
d. They can be difficult to visualize. -
Oskar has been receiving emails about critical ANSWER -d. They can be difficult to
threat intelligence information from a public visualize.
information sharing center. His team leader has
asked him to look into how the process can be
automated so that the information can feed Luka has been asked by his supervisor to
directly into their technology security. What monitor the dark web for any IOCs concerning
technology will Oskar recommend? their organization. The next week, Luca reports
a. Bidirectional Security Protocol (BSP) back that he was unable to find anything due to
b. Linefeed Access how looking for information on the dark web is
c. Lightwire JSON Control different from using the regular web. Which of the
d. Automated Indicator Sharing (AIS) - following is not different about looking for
ANSWER -d. Automated Indicator Sharing information on the dark web?
(AIS) a. Dark web merchants open and close their sites
without warning.
b. It is necessary to use Tor or IP2.
Which of the following is an application protocol c. Dark web search engines are identical to
for exchanging cyberthreat intelligence over regular search engines.
HTTPS? d. The naming structure is different on the dark
a. STIX web. - ANSWER -c. Dark web search
b. TAXII engines are identical to regular search engines.
1/3
