Skip to main content

312-85 Certified Threat Intelligence Analyst

  • Eccouncil
  • 5 free sample questions

About this exam

312-85 is the Eccouncil exam Certified Threat Intelligence Analyst. Paid practice material for this exam is not available yet, but you can try its free sample questions.

Exam code
312-85
Vendor
Eccouncil
Practice questions
Not available yet
Free sample questions
5
Question bank last updated
Not available yet

Try 2 sample questions

Taken from the free sample set for 312-85.

Question 1

Jacob, a professional hacker, created an exact replica of an online shopping website. He copied the entire contents of the original website onto the local system that enables him to create a dummy spam website for performing social engineering attacks over the employees.

What type of technique did Jacob use for cloning the website?

  1. Option A:

    Data sampling

  2. Option B:

    Website mirroring

  3. Option C:

    Tailgating

  4. Option D:

    Social engineering

Show answer and explanation

Correct answer: B

In this scenario, Jacob has copied the entire contents of a legitimate website to his local system to create a replica or duplicate version that looks exactly like the original. This process of duplicating a website by copying its structure, design, content, and files is known as website mirroring .

Website mirroring is a technique used to create an identical copy (mirror) of a real website for different purposes. In ethical use cases, organizations create mirror sites to ensure high availability, load balancing, or offline backup of web content. However, in malicious or unethical scenarios, attackers use website mirroring to replicate legitimate sites for phishing or social engineering attacks , tricking users into entering credentials, financial data, or other sensitive information.

By creating a mirrored version of an authentic site, an attacker can redirect unsuspecting victims to the fake version, which appears genuine. Victims then provide information that is captured by the attacker for malicious use. This method is commonly employed in phishing campaigns and credential harvesting operations.

Why the Other Options Are Incorrect:

    A. Data sampling: Data sampling refers to selecting a subset of data from a larger dataset for analysis or testing. It does not involve copying or cloning websites.

    C. Tailgating: Tailgating is a physical security breach technique , where an unauthorized individual follows an authorized person into a secured area without proper authentication. It is unrelated to website replication.

    D. Social engineering: Social engineering is a broader psychological manipulation technique that exploits human trust to gain confidential information. While Jacob’s goal is to perform a social engineering attack using the cloned website, the method he used to create the replica is website mirroring , not social engineering itself.

Conclusion:

Jacob used website mirroring to clone the online shopping website. The mirrored site will later serve as a platform to perform social engineering attacks by deceiving employees or customers into interacting with the fake site.

Final Answer: B. Website mirroring

Explanation Reference (Based on CTIA Study Concepts):

This explanation is based on EC-Council’s Certified Threat Intelligence Analyst (CTIA) study concepts under the topics of Adversary Tactics, Techniques, and Procedures (TTPs) and Threat Modeling of Infrastructure Attacks , which describe how attackers create cloned or mirrored websites to perform phishing and social engineering campaigns.

Question 2

H & P, Inc. is a small-scale organization that has decided to outsource the network security monitoring due to lack of resources in the organization. They are looking for the options where they can directly incorporate threat intelligence into their existing network defense solutions.

Which of the following is the most cost-effective methods the organization can employ?

  1. Option A:

    Recruit the right talent

  2. Option B:

    Look for an individual within the organization

  3. Option C:

    Recruit data management solution provider

  4. Option D:

    Recruit managed security service providers (MSSP)

Show answer and explanation

Correct answer: D

For H & P, Inc., a small-scale organization looking to outsource network security monitoring and incorporate threat intelligence into their network defenses cost-effectively, recruiting a Managed Security Service Provider (MSSP) would be the most suitable option. MSSPs offer a range of services including network security monitoring, threat intelligence, incident response, and compliance management, often at a lower cost than maintaining an in-house security team. This allows organizations to benefit from expert services and advanced security technologies without the need for significant resource investment.

[References:, "The Benefits of Managed Security Services," by Gartner, "How to Choose a Managed Security Service Provider (MSSP)," by CSO Online, , ]
See all 5 free sample questions