GIAC CYBER THREAT LATEST
INTELLIGENCE (GCTI)
PRACTICE
EXAMINATION
1. The intelligence lifecycle begins with:
A. Analysis
B. Collection
C. Direction (Planning & Requirements)
D. Dissemination
Correct Answer: C
Rationale: The lifecycle starts with defining intelligence requirements
and objectives to guide all subsequent phases.
2. Which phase involves gathering raw data?
A. Analysis
B. Collection
C. Dissemination
END OF
PAGE
1
, GIAC CYBER THREAT LATEST
INTELLIGENCE (GCTI)
PRACTICE
EXAMINATION
D. Feedback
Correct Answer: B
Rationale: Collection focuses on acquiring raw information from various
sources such as logs, OSINT, and sensors.
3. The purpose of analysis in intelligence is to:
A. Store data
B. Convert raw data into actionable intelligence
C. Delete irrelevant data
D. Encrypt data
Correct Answer: B
Rationale: Analysis interprets and correlates data to produce meaningful
insights for decision-making.
END OF
PAGE
2
, GIAC CYBER THREAT LATEST
INTELLIGENCE (GCTI)
PRACTICE
EXAMINATION
4. Dissemination refers to:
A. Data collection
B. Sharing intelligence with stakeholders
C. Data storage
D. Encryption
Correct Answer: B
Rationale: Intelligence must be delivered to decision-makers in a usable
format.
5. Feedback in the lifecycle helps to:
A. End the process
B. Improve future intelligence efforts
C. Reduce data
END OF
PAGE
3
, GIAC CYBER THREAT LATEST
INTELLIGENCE (GCTI)
PRACTICE
EXAMINATION
D. Encrypt intelligence
Correct Answer: B
Rationale: Feedback refines requirements and enhances the intelligence
process.
6. An Indicator of Compromise (IOC) is:
A. A vulnerability
B. Evidence of intrusion
C. A firewall rule
D. Encryption method
Correct Answer: B
Rationale: IOCs are artifacts like IPs, hashes, or domains indicating
malicious activity.
END OF
PAGE
4
INTELLIGENCE (GCTI)
PRACTICE
EXAMINATION
1. The intelligence lifecycle begins with:
A. Analysis
B. Collection
C. Direction (Planning & Requirements)
D. Dissemination
Correct Answer: C
Rationale: The lifecycle starts with defining intelligence requirements
and objectives to guide all subsequent phases.
2. Which phase involves gathering raw data?
A. Analysis
B. Collection
C. Dissemination
END OF
PAGE
1
, GIAC CYBER THREAT LATEST
INTELLIGENCE (GCTI)
PRACTICE
EXAMINATION
D. Feedback
Correct Answer: B
Rationale: Collection focuses on acquiring raw information from various
sources such as logs, OSINT, and sensors.
3. The purpose of analysis in intelligence is to:
A. Store data
B. Convert raw data into actionable intelligence
C. Delete irrelevant data
D. Encrypt data
Correct Answer: B
Rationale: Analysis interprets and correlates data to produce meaningful
insights for decision-making.
END OF
PAGE
2
, GIAC CYBER THREAT LATEST
INTELLIGENCE (GCTI)
PRACTICE
EXAMINATION
4. Dissemination refers to:
A. Data collection
B. Sharing intelligence with stakeholders
C. Data storage
D. Encryption
Correct Answer: B
Rationale: Intelligence must be delivered to decision-makers in a usable
format.
5. Feedback in the lifecycle helps to:
A. End the process
B. Improve future intelligence efforts
C. Reduce data
END OF
PAGE
3
, GIAC CYBER THREAT LATEST
INTELLIGENCE (GCTI)
PRACTICE
EXAMINATION
D. Encrypt intelligence
Correct Answer: B
Rationale: Feedback refines requirements and enhances the intelligence
process.
6. An Indicator of Compromise (IOC) is:
A. A vulnerability
B. Evidence of intrusion
C. A firewall rule
D. Encryption method
Correct Answer: B
Rationale: IOCs are artifacts like IPs, hashes, or domains indicating
malicious activity.
END OF
PAGE
4
