Free ECCouncil 312-85 Exam Dumps Questions & Answers

A consortium was established in a collaborative effort to strengthen the cybersecurity posture of multiple organizations within an industry sector. The participating entities decided to adopt a threat intelligence exchange architecture in which all threat data is collected, analyzed, and disseminated through a single central hub.
What type of threat intelligence exchange architecture was implemented in this scenario?

• A.  Decentralized exchange architecture
• B.  Federated exchange architecture
• C.  Centralized exchange architecture
• D.  Hybrid exchange architecture

What term describes the trust establishment process, wherein the first organization relies on a body of evidence presented to the second organization, and the level of trust is contingent upon the degree and quality of evidence provided by the initiating organization?

• A.  Direct historical trust
• B.  Mediated trust
• C.  Mandated trust
• D.  Validated trust

Henry. a threat intelligence analyst at ABC Inc., is working on a threat intelligence program. He was assigned to work on establishing criteria for prioritization of intelligence needs and requirements.
Which of the following considerations must be employed by Henry to prioritize intelligence requirements?

• A.  Produce actionable data
• B.  Understand frequency and impact of a threat
• C.  Understand data reliability
• D.  Develop a collection plan

Jim works as a security analyst in a large multinational company. Recently, a group of hackers penetrated into their organizational network and used a data staging technique to collect sensitive data. They collected all sorts of sensitive data about the employees and customers, business tactics of the organization, financial information, network infrastructure information and so on.
What should Jim do to detect the data staging before the hackers exfiltrate from the network?

• A.  Jim should monitor network traffic for malicious file transfers, file integrity monitoring, and event logs.
• B.  Jim should identify the attack at an initial stage by checking the content of the user agent field.
• C.  Jim should analyze malicious DNS requests, DNS payload, unspecified domains, and destination of DNS requests.
• D.  Jim should identify the web shell running in the network by analyzing server access, error logs, suspicious strings indicating encoding, user agent strings, and so on.

Moses, a threat intelligence analyst at InfoTec Inc., wants to find crucial information about the potential threats the organization is facing by using advanced Google search operators. He wants to identify whether any fake websites are hosted at the similar to the organization's URL.
Which of the following Google search queries should Moses use?

• A.  info: www.infothech.org
• B.  cache: www.infothech.org
• C.  related: www.infothech.org
• D.  link: www.infothech.org