Module 04 · assessment
Threat intelligence for analysts
Intelligence as an analyst actually uses it: which indicators are worth chasing and for how long, how to pivot from one domain to an attacker's wider infrastructure without tipping them off, and how to write a report with honest confidence language that others can act on and share.
Practice questionnaire
Warm up, no proctoring
6 questions from the same pool, untimed, with explanations at the end. Each run draws a different set.
Proctored exam
Secure mode rules
- Fullscreen for the whole exam. Leaving it pauses the exam and is recorded.
- Your cursor is locked inside the exam. It cannot move to other tabs, windows or screens. Esc releases it and is recorded.
- No tab or app switching. Switching away is recorded.
- Copy, paste, right-click, print and save are disabled.
- 3 incidents end the exam. It submits itself, is flagged, and cannot pass.
- The timer runs on our server. Refreshing or closing the page abandons the attempt.
- Every attempt is different. A retest never repeats a question from your previous attempt, and calculation questions get new numbers.