A security manager wants to justify the investment in a threat intelligence program to the board. The manager needs to explain how threat intelligence can reduce business risk. Which statement best articulates the value of threat intelligence?

Threat intelligence is only useful after an attack occurs

Threat intelligence replaces the need for other security controls

Threat intelligence provides actionable insights that enable proactive defense and informed risk decisions

Threat intelligence eliminates all cyber threats

A SOC wants to automatically block traffic associated with known malicious domains and IPs. The team has a curated list of IoCs from a trusted feed. Which integration would provide immediate enforcement at the network perimeter?

Add the IoCs to the firewall and IDS/IPS block lists

Share the IoCs with an external information-sharing community

Import the IoCs into the SIEM as correlation rules

Store the IoCs in a spreadsheet for manual review

A security manager wants to move from a reactive incident-response posture to a proactive one. They have access to internal logs, open-source feeds, and a commercial threat intelligence platform. What is the first step to using threat intelligence for prediction?

Purchase the most expensive commercial feed available to ensure high-quality data.

Define the intelligence requirements based on the organization's critical assets and likely threat actors.

Immediately block all indicators from the open-source feeds.

Collect as much data as possible from all sources before deciding what to analyze.

Why is threat intelligence sharing important in the cybersecurity community?

It enables organizations to benefit from each other's threat knowledge

It guarantees that all attacks will be prevented

It reduces the need for internal security controls

It allows organizations to hide their own vulnerabilities

EC-CouncilCertified Network Defender

Domain 7Objective 3

Threat Prediction with Cyber Threat Intelligence CND Practice Questions (Page 11)

Part of the Risk and Threat Management domain, which makes up ~16% of our current practice bank.

57questions here

12free pages

10concepts

Questions 51–55

51expert · hard
A security manager wants to justify the investment in a threat intelligence program to the board. The manager needs to explain how threat intelligence can reduce business risk. Which statement best articulates the value of threat intelligence?
Select an answer first
52application · medium
A SOC wants to automatically block traffic associated with known malicious domains and IPs. The team has a curated list of IoCs from a trusted feed. Which integration would provide immediate enforcement at the network perimeter?
Select an answer first
53application · medium
A security manager wants to move from a reactive incident-response posture to a proactive one. They have access to internal logs, open-source feeds, and a commercial threat intelligence platform. What is the first step to using threat intelligence for prediction?
Select an answer first
54foundation · easy
Why is threat intelligence sharing important in the cybersecurity community?
Select an answer first
55foundation · easy
Which security control can be updated with threat intelligence to block known malicious IP addresses?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CND

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CND” is a trademark of its owner, used for identification only.