Which of the following best describes the purpose of a structured source reliability and information credibility assessment system (such as the Admiralty/NATO system) in threat intelligence analysis?

• A. It has no practical use in cybersecurity threat intelligence
• B. It replaces the need for any further analysis once a source is rated
• C. It provides analysts with a structured, consistent way to rate how reliable a source has historically been and how credible a specific piece of information is, supporting more rigorous, defensible analytical judgements
• D. It is used exclusively to rate the technical skill of threat actors

Explanation: Only visible for Prep4away members. You can sign-up / login (it's free).

Which of the following best describes how a Red Team Manager should respond if, during scoping, the client's stated objectives are technically unachievable within the proposed timeframe and resourcing?

• A. Accept the unrealistic plan as stated and let the delivery team discover the problem later
• B. Silently reduce the quality of delivery without informing the client of the constraint
• C. Refuse to discuss the matter further and let the contract lapse
• D. Raise the mismatch transparently during scoping, and work with the client to agree a realistic combination of objectives, timeframe, and resourcing before the engagement is finalised

Explanation: Only visible for Prep4away members. You can sign-up / login (it's free).

A client operating only in a jurisdiction with no formally named intelligence-led testing scheme asks whether they can still benefit from this style of assessment. What is the most accurate answer?

• A. No, intelligence-led testing is legally restricted to jurisdictions with a named scheme
• B. Intelligence-led testing is only theoretically possible and has never been delivered outside named schemes
• C. Yes; the underlying methodology can be applied on a voluntary, best-practice basis, tailored to the client's actual risk profile and local legal context, even without a formally named local scheme
• D. They must relocate their headquarters to a jurisdiction with a named scheme first

Explanation: Only visible for Prep4away members. You can sign-up / login (it's free).

Overall, from a governance perspective, what is the single most important lesson a Red Team Manager should take from the existence of this broader family of regional frameworks?

• A. Only CBEST matters; the others are irrelevant regional curiosities
• B. Rigorous, well-governed, intelligence-led testing is a globally recognised and increasingly expected discipline for protecting critical financial (and other critical) infrastructure, and delivering it responsibly requires scheme-specific, jurisdiction-aware governance rather than a one-size-fits-all approach
• C. All frameworks are functionally optional and can be disregarded if inconvenient
• D. Frameworks exist purely to generate revenue for accreditation bodies

Explanation: Only visible for Prep4away members. You can sign-up / login (it's free).

Which of the following best describes appropriate practice regarding secure delivery of the final report and supporting evidence to the client?

• A. Reports should always be printed and posted physically, never delivered electronically
• B. Reports and sensitive supporting evidence should be delivered via secure, appropriately access- controlled and, where relevant, encrypted mechanisms, consistent with the sensitivity of the material and any agreed contractual requirements
• C. Secure delivery mechanisms are unnecessary, since the report is intended for the client anyway
• D. Reports should be sent via standard, unencrypted email with no additional protection, for convenience

Explanation: Only visible for Prep4away members. You can sign-up / login (it's free).