GIAC Cyber Threat Intelligence (GCTI): where you stand
Answer a few questions to see your score.
GIAC Cyber Threat Intelligence (GCTI) full analysis
$39, once, for this exam. No subscription. 30-day full refund, no questions asked.
Free, no account needed
Practice and timed mocks are free, with right or wrong on every answer and your total score.
What the full analysis adds
- The right answer to every question, the explanation, and the source it cites, with a link.
- Readiness by domain, using the exam owner's published domain weights where they exist, so you can see your weakest domain.
- Where you were sure and wrong: the answers you marked sure and missed.
- Time per question by domain, set against the owner's published exam length.
- Every question you missed, in one list, with its explanation.
- A week-by-week study plan fitted to your exam date and your hours a week, weakest domain first, with the key concepts and the official sources to read.
- Review cards from your misses, set to come back after 1, 3, 7 and 21 days.
- An exam-day packet from the exam owner's own pages: the clock and the checklist, and the test interface where the owner describes it. Print it or save it as a PDF.
What the research behind this supports, and what it does not
Studies of the methods this analysis uses found:
- EVIDENCE-BACKEDAnswering questions from memory beat rereading in lab, classroom and medical-resident studies. (Roediger and Karpicke, 2006 and others)
- EVIDENCE-BACKEDSeeing the right answer and why after a miss raised later correct answers and cut wrong-option mistakes. (Butler and Roediger, 2008 and others)
- EVIDENCE-BACKEDSpreading review over weeks beat cramming across hundreds of experiments. (Cepeda et al., 2006 and others)
- EVIDENCE-BACKEDConfidence rated on each question predicted real exam performance far better than feelings after the exam. (Couchman et al., 2016)
What no study shows
No study we found tested this analysis, or any practice site, against licensing pass rates. The studies tested study methods, mostly in classrooms and labs.
A readiness number here measures your answers on this site. It does not predict your result on the real exam, and we do not promise a pass or a score.
EVIDENCE-BACKED At least one peer-reviewed study or official source found the effect or states the fact. A study can be small.
Tested students kept more at two days and one week than students who restudied, and the result held in a randomized trial with medical residents at six months.
Feedback raised correct answers and cut intrusions of wrong options after multiple-choice tests.
Spacing beat massing across hundreds of experiments and beat cramming with flashcards; combined with retrieval it raised scores on a real high-stakes exam.
Per-question confidence predicted real exam performance far better than post-exam feelings.
Sources
- Roediger, H. L., & Karpicke, J. D. (2006). Test-enhanced learning: Taking memory tests improves long-term retention. Psychological Science, 17(3), 249-255. doi.org/10.1111/j.1467-9280.2006.01693.x
- Yang, C., Luo, L., Vadillo, M. A., Yu, R., & Shanks, D. R. (2021). Testing (quizzing) boosts classroom learning: A systematic and meta-analytic review. Psychological Bulletin, 147(4), 399-435. doi.org/10.1037/bul0000309
- Larsen, D. P., Butler, A. C., & Roediger, H. L., III. (2009). Repeated testing improves long-term retention relative to repeated study: A randomised controlled trial. Medical Education, 43(12), 1174-1181. doi.org/10.1111/j.1365-2923.2009.03518.x
- Butler, A. C., & Roediger, H. L. (2008). Feedback enhances the positive effects and reduces the negative effects of multiple-choice testing. Memory & Cognition, 36(3), 604-616. doi.org/10.3758/MC.36.3.604
- Roediger, H. L., & Marsh, E. J. (2005). The positive and negative consequences of multiple-choice testing. Journal of Experimental Psychology: Learning, Memory, and Cognition, 31(5), 1155-1159. doi.org/10.1037/0278-7393.31.5.1155
- Cepeda, N. J., Pashler, H., Vul, E., Wixted, J. T., & Rohrer, D. (2006). Distributed practice in verbal recall tasks: A review and quantitative synthesis. Psychological Bulletin, 132(3), 354-380. doi.org/10.1037/0033-2909.132.3.354
- Kornell, N. (2009). Optimising learning using flashcards: Spacing is more effective than cramming. Applied Cognitive Psychology, 23(9), 1297-1317. doi.org/10.1002/acp.1537
- Kang, S. H. K. (2016). Spaced repetition promotes efficient and effective learning: Policy implications for instruction. Policy Insights from the Behavioral and Brain Sciences, 3(1), 12-19. doi.org/10.1177/2372732215624708
- Janes, J. L., Dunlosky, J., Rawson, K. A., & Jasnow, A. (2020). Successive relearning improves performance on a high-stakes exam in a difficult biopsychology course. Applied Cognitive Psychology, 34(5), 1118-1132. doi.org/10.1002/acp.3699
- Couchman, J. J., Miller, N. E., Zmuda, S. J., Feather, K., & Schwartzmeyer, T. (2016). The instinct fallacy: The metacognition of answering and revising during college exams. Metacognition and Learning, 11(2), 171-185. doi.org/10.1007/s11409-015-9140-8
What the analysis would do with your answers
You have not answered anything yet. Answer 5 free questions and this box shows what the analysis would do with your misses.
You do not need an account to pay. Enter your email at checkout, then create your account afterwards with the same address.
You agree to the Terms and the Privacy policy on the next screen.
Already have an account? Sign in first
Total today: $39 USD, one payment. Sales tax is added at checkout where it applies.
One payment for this exam. No subscription. 30-day full refund.
A practice question from the full analysis
This is how each question you miss appears in the report. The question, the right answer, the explanation and the source are exactly what the report shows. The answer shown as yours is an example, not anyone's data.
Two vendors publish reports on a campaign with overlapping techniques. CrowdStrike refers to the group as 'COZY BEAR' and Microsoft refers to it as 'MIDNIGHT BLIZZARD' (formerly 'NOBELIUM'). Which framework consolidates these naming conventions and provides a vendor-neutral identifier?
- A MITRE ATT&CK Groups catalog (vendor-neutral group identifiers and aliases)
- B NIST SP 800-53
- C OWASP Top 10
- D CISA KEV catalog
Example answer, marked sure: B · Correct answer: A
A is correct. MITRE ATT&CK keeps a Groups catalog where each tracked group has one vendor-neutral ID and a list of the names other vendors use. APT29 is G0016, and its associated names include Cozy Bear, NOBELIUM and Midnight Blizzard. An analyst can map both vendor reports to G0016 and compare techniques in one place. B is wrong because NIST SP 800-53 is a catalog of security and privacy controls and does not track threat groups. C is wrong because the OWASP Top 10 ranks web application security risks. D is wrong because the CISA KEV catalog lists vulnerabilities known to be exploited, keyed by CVE, not by actor. Rule to remember: to reconcile vendor names for a threat group, look up its ATT&CK group ID.
Optional: tell us your exam date and your practice page counts the days left.
This reading is kept on this device until you sign in. Sign in to see where you stand on any device.
How much hands-on security experience do you have?