FREE ASSESSMENT / Research investigation

AA24-290A Iranian Credential-Access Investigation

Trace an Iranian access operation from password spraying and MFA registration through Kerberos discovery, living-off-the-land reconnaissance, and probable resale of network access.

Log in to take this assessment Create a free account Review preparation
Questions
6
Suggested working time
40 min
Pass threshold
75%
Answer format
Single-choice answers

Allow time to read the instructions and consult any permitted sources. The suggested duration is not an enforced countdown on this page.

What this assessment checks

Cyber Threat Intelligence

Identity Threat Intelligence

Who it’s for

Analysts comfortable consulting source reporting and technical documentation. Follow the source requirements in the assessment instructions.

Scope and limits

An independent Threat Intelligence Lab knowledge assessment. A result records your performance on these questions; it does not establish operational readiness, identity verification or an external professional qualification.

PREPARE WITH PURPOSE

Before you begin

Review the instructions and source requirements. Choose the best supported answer, including any uncertainty or limits described in the question.

These related courses can help you prepare. They are optional study routes, not a promise that every assessment question is covered.

Instructions and scoring

Use CISA's official AA24-290A advisory. Verify identity providers, MFA behavior, tools, commands, and the report's access-broker assessment.

  • Select one answer for each question. Required questions are marked.
  • Question points determine the score. The configured pass threshold is 75%.
  • Submitting records your result. Review your saved result in your profile.

A passing result can produce a Threat Intelligence Lab platform certificate. This is an independent learning record, not an accredited qualification or a third-party vendor certification. This assessment does not verify your identity or proctor your environment.

CONTINUE YOUR LEARNING

Research investigation

Microsoft Entra Sign-In Evidence Investigation

Research Microsoft Entra and Microsoft Graph documentation to distinguish sign-in types, interpret risk and Conditional Access fields, understand aggregation, and avoid misreading identity evidence.

8 questions · 40 min suggested

Professional assessment

CTI Identity Threats & Access Tradecraft

Test your ability to analyze credential theft, session hijacking, MFA abuse, identity-provider compromise, privileged access, credential marketplaces, authentication telemetry, and identity-centered adversary tradecraft.

10 questions · 30 min suggested

Research investigation

AA25-212A Critical-Infrastructure Hunt Gap Analysis

Use the CISA and U.S. Coast Guard hunt report to decide which observed configuration and logging gaps would prevent defensible incident analysis in an IT/OT environment.

6 questions · 35 min suggested

About this learning material

About this learning content: Courses, lessons, assessments, explanations and illustrations may be created with the help of artificial intelligence. We review and check the material and do our best to avoid incorrect or outdated information, but mistakes, omissions or ambiguous questions may remain. Please verify information before relying on it for professional, security, legal or operational decisions. Read the full notice or report an issue.