312-85 › Data Analysis
This domain covers turning raw threat data into defensible conclusions: indicator enrichment and pivoting, link analysis across domains, hashes and C2 IPs, visualizing TTPs, and structured analytic techniques like Analysis of Competing Hypotheses. Questions present analyst scenarios and ask you to choose the correct analytic method, tool, or bias-mitigation step.
312-85 Data Analysis — All 52 Questions
Every question in this domain with answers and detailed explanations.