OffSec Threat Hunter Practice Questions - OffSec Threat Hunter (OSTH TH-200) Exam - OffSec Threat Hunter Practice Questions

Question 1

Which statement BEST describes proactive threat hunting as opposed to traditional alert-driven incident response?

Threat hunting starts with an alert from the SIEM and pivots to scoping Threat hunting is a hypothesis-driven search for adversaries that have evaded existing detections Threat hunting is the process of writing new IDS signatures from CVE feeds Threat hunting only runs after a confirmed breach has been declared

Correct Answer:

Threat hunting is a hypothesis-driven search for adversaries that have evaded existing detections

Question 2

In David Bianco's Pyramid of Pain, which indicator type causes the MOST pain to an attacker when defenders detect it?

File hash values (MD5/SHA1/SHA256) IP addresses Domain names Tactics, Techniques, and Procedures (TTPs)

Correct Answer:

Tactics, Techniques, and Procedures (TTPs)

Question 3

Place these Pyramid of Pain levels in the CORRECT order from LEAST painful (bottom) to MOST painful (top).

Hash Values, IP Addresses, Domain Names, Network/Host Artifacts, Tools, TTPs TTPs, Tools, Network/Host Artifacts, Domain Names, IP Addresses, Hash Values IP Addresses, Hash Values, Domain Names, Tools, Network/Host Artifacts, TTPs Hash Values, Domain Names, IP Addresses, Tools, Network/Host Artifacts, TTPs

Correct Answer:

Hash Values, IP Addresses, Domain Names, Network/Host Artifacts, Tools, TTPs

Question 4

An organization relies almost entirely on automated SIEM and antivirus alerts and collects very little log data centrally. Which level of David Bianco's Hunting Maturity Model BEST describes them?

HM0 — Initial HM2 — Procedural HM3 — Innovative HM4 — Leading

Correct Answer:

HM0 — Initial

Question 5

What single capability differentiates an HM4 (Leading) organization from an HM3 (Innovative) organization in the Hunting Maturity Model?

HM4 organizations have access to commercial threat intelligence feeds HM4 organizations operationalize successful hunts into automated detections HM4 organizations only respond to alerts, while HM3 organizations hunt manually HM4 organizations only collect endpoint data, while HM3 organizations also collect network data

Correct Answer:

HM4 organizations operationalize successful hunts into automated detections

Exam overview

About this Exam

Prepare with the OffSec Threat Hunter Practice Questions - OffSec Threat Hunter (OSTH TH-200) Exam practice quiz. This question bank includes 100 questions covering threat, powershell, hunt, hunter, and hunting. Use it to review important concepts, identify knowledge gaps, and build confidence for the related exam, course, or assessment.

More details

Additional Information

OffSec Threat Hunter Practice Questions - OffSec Threat Hunter (OSTH TH-200) Exam

This practice set contains 100 questions from the matching question bank and focuses on threat, powershell, hunt, hunter, and hunting. Work through each question carefully, review the provided solutions, and revisit topics that need more study before your next attempt.

This is an independent study resource intended for practice and review; it is not an official examination or an endorsement by any organization named in the title.

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.

No fixed duration is currently configured for this quiz.

Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.

Yes. You can retake the practice test again as you continue studying during your available access period.

After your access is confirmed, you can continue into the complete practice exam from this quiz flow.

Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.

Correct Answer:

Correct Answer:

Correct Answer:

Correct Answer:

Correct Answer:

About this Exam

Additional Information

OffSec Threat Hunter Practice Questions - OffSec Threat Hunter (OSTH TH-200) Exam

Frequently Asked Questions

Related Questions

ABC Orthotic & Prosthetic Practice Exam

Arkansas Hunters Ed Practice Exam

Colorado Hunter Education Practice Exam

Colorado Hunters Safety Practice Test

Bow Hunter Education Practice Exam

California Hunters Education License Practice Exam