CREST CPTIA 問題集

質問 1：
A US Federal Agency network was the target of a DoS attack that prevented and impaired the normal authorized functionality of the networks. According to agency's reporting timeframe guidelines, this incident should be reported within 2 h of discovery/detection if the successful attack is still ongoing and the agency is unable to successfully mitigate the activity.
Which incident category of US Federal Agency does this incident belong to?
A. CAT 2
B. CAT 1
C. CAT 6
D. CAT 5
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Identify Sarbanes-Oxley Act (SOX) Title, which consists of only one section, that includes measures designed to help restore investor confidence in the reporting of securities analysts.
A. Title VIII: Corporate and Criminal Fraud Accountability
B. Title IX: White-Collar-Crime Penalty Enhancement
C. Title VII: Studies and Reports
D. Title V: Analyst Conflicts of Interest
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 3：
A threat analyst obtains an intelligence related to a threat, where the data is sent in the form of a connection request from a remote host to the server. From this data, he obtains only the IP address of the source and destination but no contextual information. While processing this data, he obtains contextual information stating that multiple connection requests from different geo-locations are received by the server within a short time span, and as a result, the server is stressed and gradually its performance has reduced. He further performed analysis on the information based on the past and present experience and concludes the attack experienced by the client organization.
Which of the following attacks is performed on the client organization?
A. Distributed Denial-of-Service (DDoS) attack
B. DHCP attacks
C. Bandwidth attack
D. MAC spoofing attack
正解：A

質問 4：
Which of the following is not a countermeasure to eradicate cloud security incidents?
A. Disable security options such as two factor authentication and CAPTCHA
B. Patch the database vulnerabilities and improve the isolation mechanism
C. Check for data protection at both design and runtime
D. Remove the malware files and traces from the affected components
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Jian is a member of the security team at Trinity, Inc. He was conducting a real-time assessment of system activities in order to acquire threat intelligence feeds. Heacquired feeds from sources like honeynets, P2P monitoring. infrastructure, and application logs.
Which of the following categories of threat intelligence feed was acquired by Jian?
A. External intelligence feeds
B. Internal intelligence feeds
C. CSV data feeds
D. Proactive surveillance feeds
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Tim is working as an analyst in an ABC organization. His organization had been facing many challenges in converting the raw threat intelligence data into meaningful contextual information. After inspection, he found that it was due to noise obtained from misrepresentation of data from huge data collections. Hence, it is important to clean the data before performing data analysis using techniques such as data reduction. He needs to choose an appropriate threat intelligence framework that automatically performs data collection, filtering, and analysis for his organization.
Which of the following threat intelligence frameworks should he choose to perform such task?
A. HighCharts
B. SIGVERIF
C. TC complete
D. Threat grid
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Alice is a disgruntled employee. She decided to acquire critical information from her organization for financial benefit. To acccomplish this, Alice started running a virtual machine on the same physical host as her victim's virtual machine and took advantage of shared physical resources (processor cache) to steal data (cryptographic key/plain text secrets) from the victim machine. Identify the type of attack Alice is performing in the above scenario.
A. Side channel attack
B. Service hijacking
C. Man-in-the-cloud attack
D. SQL injection attack
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 8：
Alison, an analyst in an XYZ organization, wants to retrieve information about a company's website from the time of its inception as well as the removed information from the target website.
What should Alison do to get the information he needs.
A. Alison should use SmartWhois to extract the required website information.
B. Alison should use https://archive.org to extract the required website information.
C. Alison should run the Web Data Extractor tool to extract the required website information.
D. Alison should recover cached pages of the website from the Google search engine cache to extract the required website information.
正解：B
解説: (Topexam メンバーにのみ表示されます)