CREST Registered Threat Intelligence Analyst (CRTIA) Certification Sample Questions

The purpose of this Sample Question Set is to provide you with information about the CREST Registered Threat Intelligence Analyst exam. These sample questions will make you very familiar with both the type and the difficulty level of the questions on the CRTIA certification test. To get familiar with real exam environment, we suggest you try our Sample CREST Registered Threat Intelligence Analyst Certification Practice Exam. This sample practice exam gives you the feeling of reality and is a clue to the questions asked in the actual CREST Registered Threat Intelligence Analyst (CRTIA) certification exam.

These sample questions are simple and basic questions that represent likeness to the real CREST CRTIA exam questions. To assess your readiness and performance with real time scenario based questions, we suggest you prepare with our Premium CREST Registered Threat Intelligence Analyst Certification Practice Exam. When you solve real time scenario based questions practically, you come across many difficulties that give you an opportunity to improve.

CREST CRTIA Sample Questions:

01. When choosing the most effective dissemination mechanism for an executive-level audience, what is the primary consideration?

a) Detailed packet capture logs

b) Clarity, relevance, and business context

c) Use of penetration testing jargon

d) The technical configuration of network switches

02. How does the Intelligence Preparation of the Environment (IPE) method assist analysts?

a) It performs IP blacklisting

b) It enables malware reverse engineering by unpacking samples, mapping their imports, and recovering configuration

c) It prepares forecasting based on geopolitical, technical, and organizational context

d) It filters out DNS artifacts

03. Which law is most relevant when considering the interception of communications in a business environment in the UK?

a) Bribery Act 2010

b) Official Secrets Act 1989

c) Data Protection Act 2018

d) Regulation of Investigatory Powers Act (RIPA) 2000

04. Under the Bribery Act 2010, which of the following would most likely constitute an offence?

a) Giving cash to a public official to gain access to restricted cyber data

b) Providing a client with a complimentary compliance report at the close of a completed engagement

c) Publishing redacted threat reports

d) Forwarding malware samples to the SOC

05. A business seeks to understand “why threat attribution is valuable.” What is the most appropriate reason?

a) Attribution improves firewall performance

b) Attribution allows automatic malware deletion

c) Attribution helps link campaigns to known threat actors and predict future actions

d) Attribution guarantees the individuals responsible can be identified, charged, and prosecuted in their own jurisdiction

06. When performing ACH (Analysis of Competing Hypotheses), what is the most critical activity?

a) Creating threat actor personas

b) Classifying indicators of compromise

c) Listing all known vulnerabilities

d) Comparing evidence against multiple explanations

07. In a threat intelligence context, the framework known as __________ focuses on risk management principles and guidelines.

a) ISO 31000

b) GDPR

c) ISO 27005

d) OWASP

08. During a live threat engagement, what step should be taken if an analyst detects indicators of a breach outside the defined scope?

a) Immediately notify a regulatory body

b) Escalate to the engagement manager and follow defined escalation paths

c) Halt all operations and erase findings

d) Record the indicators quietly and raise them at the end-of-engagement review rather than interrupting delivery

09. Which of these is designed as a machine readable format for storing cyber threat intelligence?

a) CSV

b) ElasticSearch

c) APT

d) SNMP

e) STIX

10. What characteristics make asymmetric encryption suitable for public key infrastructure (PKI)?

(Choose two.)

a) Key pair system supporting confidentiality and digital signatures

b) Scalability in secure key distribution

c) Real-time symmetric key rotation

d) Supports same-key decryption only

Answers:

Question: 01 Answer: b	Question: 02 Answer: c	Question: 03 Answer: d	Question: 04 Answer: a	Question: 05 Answer: c
Question: 06 Answer: d	Question: 07 Answer: a	Question: 08 Answer: b	Question: 09 Answer: e	Question: 10 Answer: a, b

Note: For any error in CREST Registered Threat Intelligence Analyst (CRTIA) certification exam sample questions, please update us by writing an email on feedback@edusum.com.