CCRTM-MCLF 試験問題を無料オンラインアクセス

Which of the following best describes an appropriate approach to managing multiple concurrent engagements across different clients within a red team practice?

• A.Concurrent engagement management is irrelevant, since quality is unaffected by how many engagements run simultaneously
• B.Client confidentiality boundaries can be relaxed when managing multiple concurrent engagements, to improve efficiency
• C.Any available staff member should be assigned to any engagement, regardless of relevant skills or existing workload
• D.Capacity and resourcing should be planned to ensure each engagement receives appropriately skilled, sufficiently available staff, avoiding overcommitment that could compromise quality, safety, or governance discipline on any individual engagement

Which of the following best describes the purpose of a structured source reliability and information credibility assessment system (such as the Admiralty/NATO system) in threat intelligence analysis?

• A.It has no practical use in cybersecurity threat intelligence
• B.It provides analysts with a structured, consistent way to rate how reliable a source has historically been and how credible a specific piece of information is, supporting more rigorous, defensible analytical judgements
• C.It is used exclusively to rate the technical skill of threat actors
• D.It replaces the need for any further analysis once a source is rated

Why do multiple jurisdictions maintain their own distinct intelligence-led testing schemes rather than adopting one single global standard?

• A.It is simply due to rivalry between CREST and the ECB
• B.Financial regulation, legal systems, and supervisory relationships are largely organised at the national or regional level, so authorities have developed schemes tailored to their own regulatory powers, legal context, and sector structure
• C.Each scheme was created purely by accident with no underlying rationale
• D.Global regulatory harmonisation is legally prohibited

Which of the following best describes appropriate objectivity and tone in red team reporting?

• A.Reports should always minimise the apparent severity of findings, to avoid alarming the client
• B.Reports should exaggerate findings' severity to make the engagement appear more valuable
• C.Objectivity is unimportant as long as the report is well-formatted
• D.Reports should present findings objectively and proportionately, based on genuine evidence and sound risk analysis, avoiding both exaggeration and understatement

Which statement best reflects how iCAST addresses the "detection and response" dimension of resilience, rather than only technical exploitation?

• A.Detection and response are assessed only through a written questionnaire, never through live testing
• B.Because operational defenders are kept unaware for as long as safely possible, the exercise genuinely tests whether the AI's monitoring, detection and incident response capability would identify and respond to a real, unannounced attack
• C.iCAST cannot assess detection and response under any circumstances
• D.iCAST focuses exclusively on exploiting technical vulnerabilities and ignores detection entirely