Eccouncil Exam 312-50 Topic 4 Question 83 Discussion

Actual exam question for Eccouncil's 312-50 exam

Question #: 83
Topic #: 4

Leverox Solutions hired Arnold, a security professional, for the threat intelligence process. Arnold collected information about specific threats against the organization. From this information, he retrieved contextual information about security events and incidents that helped him disclose potential risks and gain insight into attacker methodologies. He collected the information from sources such as humans, social media, and chat rooms as well as from events that resulted in cyberattacks. In this process, he also prepared a report that includes identified malicious activities, recommended courses of action, and warnings for emerging attacks. What is the type of threat intelligence collected by Arnold in the above scenario?

AStrategic threat intelligence

BTactical threat intelligence

COperational threat intelligence

DTechnical threat intelligence

Show Suggested Answer

Suggested Answer: B

The location: operator is the least useful in providing the attacker with sensitive VPN-related information, because it does not directly relate to VPN configuration, credentials, or vulnerabilities. The location: operator finds information for a specific location, such as a city, country, or region. For example, location:paris would return results related to Paris, France. However, this operator does not help the attacker to identify or access VPN servers or clients, unless they are specifically named or indexed by their location, which is unlikely.

The other operators are more useful in providing the attacker with sensitive VPN-related information, because they can help the attacker to find pages or files that contain VPN configuration, credentials, or vulnerabilities. The intitle: operator restricts results to only the pages containing the specified term in the title. For example, intitle:vpn would return pages with VPN in their title, which may include VPN guides, manuals, or tutorials. The inurl: operator restricts the results to only the pages containing the specified word in the URL. For example, inurl:vpn would return pages with VPN in their URL, which may include VPN login portals, configuration files, or directories. The link: operator searches websites or pages that contain links to the specified website or page. For example, link:vpn.com would return pages that link to vpn.com, which may include VPN reviews, comparisons, or recommendations.Reference:

Google Search Operators: The Complete List (44 Advanced Operators)

Footprinting through search engines

Module 02: Footprinting and Reconnaissance

by Lynna at May 21, 2024, 04:02 AM

Limited Time Offer

25%

Off

Get Premium 312-50 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Elbert

2 days ago

I believe it could also be tactical threat intelligence, as Arnold's collection of information seems to be more focused on specific security events and incidents.

upvoted 0 times

...

Gilma

6 days ago

I agree with Paz. Operational threat intelligence focuses on current threats and helps in making decisions to mitigate risks.

upvoted 0 times

...

Paz

8 days ago

I think the type of threat intelligence collected by Arnold is operational threat intelligence.

upvoted 0 times

...