Key Concepts

Question 1

What is the key characteristic of CBEST that differentiates it from other security testing regimes?
a) Automated scanning
b) Intelligence-led approach
c) Randomized testing
d) Employee training

Answer 1

b) Intelligence-led approach

Question 2

What is the focus of CBEST’s penetration testing approach?
a) Testing user passwords
b) Mimicking cyber attackers to compromise important business services
c) Simulating phishing attacks
d) Enhancing website traffic

Answer 2

b) Mimicking cyber attackers to compromise important business services

Question 3

Which type of threat actor lacks technical skills but uses scripts from others?

Answer 3

b) Script kiddies

Question 4

What is the primary motive of hacktivists?

Answer 4

c) Political agenda

Answer: c) Political agenda

Question 5

Which threat actor is known for using cyberspace to disrupt, gain profits, or spread propaganda?

Answer 5

a) Cyber terrorists

Answer: a) Cyber terrorists

Question 6

What do cyber criminals typically target for financial gain?

Answer 6

a) Personal identifiable information

Answer: a) Personal identifiable information

Question 7

Which type of threat actor is affiliated with a nation state?

Answer 7

d) State-sponsored groups

Answer: d) State-sponsored groups

Question 8

What does the Cyber Killchain framework help with?
a) Identifying physical threats
b) Intrusion analysis
c) Employee training
d) Hardware security

Answer 8

b) Intrusion analysis

Question 9

The Diamond Model of intrusion is used for:

Answer 9

b) Intrusion analysis

Answer: b) Intrusion analysis

Question 10

What does ACH stand for?

Answer 10

Analysis of competing hypothesis

Question 11

What is the purpose of the Intelligence Preparation of the Environment (IPE)?

Answer 11

b) Understanding likely threat scenarios

Answer: b) Understanding likely threat scenarios

Question 12

What is a key step in the IPE process?

Answer 12

c) Evaluating threats

Answer: c) Evaluating threats

Question 13

Which of the following is NOT a step in the IPE process?

Answer 13

c) Develop malware

Answer: c) Develop malware

Question 14

What does the MoSCoW prioritization framework help with?

Answer 14

b) Task prioritization

Answer: b) Task prioritization

Question 15

In an Intelligence Collection Plan (ICP), what is the role of ‘assets, resources, and deterrents’?

Answer 15

c) To evaluate and guide collection sources

Answer: c) To evaluate and guide collection sources

Question 16

What is the purpose of taskings in the Intelligence Collection Plan?

Answer 16

b) To assign collection tasks

Answer: b) To assign collection tasks

Question 17

What does a 5x5x5 grid help evaluate?

Answer 17

a) Data reliability and credibility

Answer: a) Data reliability and credibility

Question 18

Attack trees are used in threat modeling to:

Answer 18

d) Visualize attack paths

Answer: d) Visualize attack paths

Question 19

What format does STIX use for structured threat information expression?

Answer 19

c) JSON

Answer: c) JSON

Question 20

Which of the following is NOT an example of an STIX Domain Object (SDO)?

Answer 20

c) Relationship

Answer: c) Relationship

Question 21

What is the function of TAXII in threat intelligence sharing?

Answer 21

Answer: Incomplete question

Question 22

IX use for structured threat information expression?

Answer 22

c) JSON

Answer: c) JSON

Question 23

What is the function of TAXII in threat intelligence sharing?

Answer 23

c) Information exchange over HTTPS

Answer: c) Information exchange over HTTPS

Question 24

Which TLP color restricts disclosure to participants only?

Answer 24

d) TLP:RED

Answer: d) TLP:RED

Question 25

What does TLP:WHITE indicate in information sharing?

Answer 25

c) Disclosure is not limited ## Footnote Answer: c) Disclosure is not limited

Question 26

Which act makes it illegal to access a computer without permission?

Answer 26

b) Computer Misuse Act ## Footnote Answer: b) Computer Misuse Act

Question 27

The Human Rights Act 1998 is based on:

Answer 27

b) European Convention on Human Rights ## Footnote Answer: b) European Convention on Human Rights

Question 28

The Data Protection Act 1998 was designed to protect:

Answer 28

b) Personal data privacy ## Footnote Answer: b) Personal data privacy

Question 29

Which act gives the Home Office greater control over operational policing?

Answer 29

c) Police and Justice Act ## Footnote Answer: c) Police and Justice Act

Question 30

The Regulation of Investigatory Powers Act 2000 governs:

Answer 30

b) Covert surveillance and communication interception ## Footnote Answer: b) Covert surveillance and communication interception

Question 31

What does the Proceeds of Crime Act allow the state to confiscate?

Answer 31

b) Proceeds obtained through unlawful conduct ## Footnote Answer: b) Proceeds obtained through unlawful conduct

Question 32

What methodology uses Attack trees for threat modeling?

Answer 32

a) Cyber Killchain ## Footnote Answer: a) Cyber Killchain

Question 33

Which threat actor primarily engages in ransomware attacks?

Answer 33

c) Cyber criminals ## Footnote Answer: c) Cyber criminals

Question 34

Which process allows systematic analysis of mission variables like enemy, area, and weather?

Answer 34

b) IPB/IPE ## Footnote Answer: b) IPB/IPE

Question 35

The 5x5x5 grid assesses:

Answer 35

c) Source reliability and information credibility ## Footnote Answer: c) Source reliability and information credibility

Question 36

Which of the following is NOT a feature of the Diamond Model of Intrusion?

Answer 36

a) Attack phases ## Footnote Answer: a) Attack phases

Question 37

The Computer Misuse Act prohibits:

Answer 37

b) Unauthorized access to computer material ## Footnote Answer: b) Unauthorized access to computer material

Question 38

The CybOX standard is used to express:

Answer 38

b) Cyber observables and indicators ## Footnote Answer: b) Cyber observables and indicators

Question 39

Which act makes it illegal for a commercial entity to fail to prevent bribery?

Answer 39

a) Bribery Act ## Footnote Answer: a) Bribery Act

Question 40

What type of regulations are covered under the Bribery Act?

Answer 40

Telecommunications Regulations ## Footnote Answer: Bribery Act