Certified Threat Intelligence Analyst (CTIA) — Question 53

You are the leading cybersecurity analyst at financial institutions. An anomaly is detected in the network, suggesting a potential security threat. To proactively investigate and mitigate the risk, arrange the following steps in the correct sequence as part of the threat hunting process:

1) Investigation
2) Collect and process data
3) Response
4) Hypothesis
5) Trigger

a) 5 –> 3 –> 1 –> 4 –> 2
b) 3 –> 2 –> 5 –> 1 –> 4
c) 4 –> 1 –> 3 –> 5 –> 2
d) 4 –> 2 –> 5 –> 1 –> 3

Answer options

• A. c
• B. d
• C. a
• D. b

Correct answer: B

Explanation

The correct sequence starts with forming a hypothesis (4), followed by collecting and processing data (2), triggering an alert (5), conducting an investigation (1), and finally implementing a response (3). Options A, C, and D do not follow the logical flow of the threat hunting process, thereby making option B the only correct choice.