Use Threat Intelligence Techniques to Identify Potential Network Vulnerabilities 100-160 Practice Questions (Page 12)

Questions 56–57

1. 56application · medium

   A security manager is evaluating threat intelligence subscription services. The organization needs timely alerts about vulnerabilities affecting its specific technology stack, and it also wants to contribute to a community of shared threat data. Which type of service best matches these requirements?

   • AA free RSS feed from a security news website that publishes general vulnerability announcements.
   • BAn internal threat intelligence team that manually curates reports from public sources.
   • CA vendor-specific mailing list that only covers that vendor's products.
   • DA commercial feed that offers customizable alerts based on the organization's asset inventory and includes a community-sharing platform.
   Reveal Solution Discussion Select an answer first
2. 57foundation · easy

   A security analyst reads a cybersecurity news article about a new ransomware campaign targeting a specific VPN appliance. What is the most immediate action the analyst should take based on this information?

   • AImmediately disconnect all VPN services
   • BPurchase a new VPN appliance
   • CCheck if the organization uses the affected VPN appliance and assess exposure
   • DIgnore the news because it is not an official vulnerability database
   Reveal Solution Discussion Select an answer first