FREE LEARNING
Cyber Threat Intelligence Foundations: From Evidence to Decision
Evidence-to-decision foundations. Operational and strategic follow-on courses address different decision horizons and deliverables.
FREE ASSESSMENT / Research investigation
AA24-060A Phobos Intrusion Command and Exfiltration Research
Trace a Phobos intrusion from exposed RDP and loader behavior through firewall changes, credential access, exfiltration, recovery inhibition, and ransom-note execution.
- Questions
- 6
- Suggested working time
- 45 min
- Pass threshold
- 75%
- Answer format
- Single-choice answers
Allow time to read the instructions and consult any permitted sources. The suggested duration is not an enforced countdown on this page.
What this assessment checks
Cyber Threat Intelligence
Ransomware Operations
Who it’s for
Analysts comfortable consulting source reporting and technical documentation. Follow the source requirements in the assessment instructions.
Scope and limits
An independent Threat Intelligence Lab knowledge assessment. A result records your performance on these questions; it does not establish operational readiness, identity verification or an external professional qualification.
PREPARE WITH PURPOSE
Before you begin
Review the instructions and source requirements. Choose the best supported answer, including any uncertainty or limits described in the question.
These related courses can help you prepare. They are optional study routes, not a promise that every assessment question is covered.
Instructions and scoring
Research CISA's official AA24-060A advisory. Verify related variants, access discovery, loader behavior, exact commands, exfiltration channels, and impact artifacts before answering.
- Select one answer for each question. Required questions are marked.
- Question points determine the score. The configured pass threshold is 75%.
- Submitting records your result. Review your saved result in your profile.
A passing result can produce a Threat Intelligence Lab platform certificate. This is an independent learning record, not an accredited qualification or a third-party vendor certification. This assessment does not verify your identity or proctor your environment.
CONTINUE YOUR LEARNING
Related assessments
About this learning material
About this learning content: Courses, lessons, assessments, explanations and illustrations may be created with the help of artificial intelligence. We review and check the material and do our best to avoid incorrect or outdated information, but mistakes, omissions or ambiguous questions may remain. Please verify information before relying on it for professional, security, legal or operational decisions. Read the full notice or report an issue.