Which technique is used to transform raw threat data into actionable intelligence?

Data correlation and contextualization

A threat intelligence analyst is tasked with producing a monthly report on emerging threats. The analyst has collected data from multiple sources but is unsure how to prioritize the analysis. Which step of the threat intelligence lifecycle should the analyst perform first?

Disseminate the raw data to stakeholders

Define the intelligence requirements and objectives

Collect more data from additional sources

Integrate the data into the SIEM immediately

A threat intelligence team needs to monitor for emerging threats in a specific industry. They have a limited budget and need both real-time indicators and in-depth analysis. Which sourcing strategy best balances cost, timeliness, and depth?

Use only internal data from past incidents to avoid external costs.

Rely solely on free OSINT feeds to minimize cost.

Subscribe to multiple commercial feeds to ensure comprehensive coverage.

Use free OSINT feeds for real-time indicators and subscribe to a commercial feed that provides deep analysis reports.

What is the primary purpose of cyber threat intelligence in an organization?

To enable proactive security decisions by providing actionable insights about potential threats

To automate all security responses without human intervention

To replace traditional antivirus solutions

To provide evidence for legal prosecution of attackers

After analyzing a new malware campaign, the threat intelligence team must share findings with different audiences. The executive board needs a summary of business risk, the SOC needs technical IoCs, and the IT helpdesk needs user guidance. What is the most effective dissemination approach?

Publish the IoCs on the company's public website for transparency.

Create tailored reports for each audience: a risk summary for executives, IoC lists for the SOC, and user awareness tips for the helpdesk.

Hold a single meeting with all groups and present the raw data.

Send the full technical report to all three groups to ensure everyone has the same information.

EC-CouncilCertified Network Defender

Domain 7Objective 3

Threat Prediction with Cyber Threat Intelligence CND Practice Questions (Page 3)

Part of the Risk and Threat Management domain, which makes up ~16% of our current practice bank.

57questions here

12free pages

10concepts

Questions 11–15

11foundation · easy
Which technique is used to transform raw threat data into actionable intelligence?
Select an answer first
12application · medium
A threat intelligence analyst is tasked with producing a monthly report on emerging threats. The analyst has collected data from multiple sources but is unsure how to prioritize the analysis. Which step of the threat intelligence lifecycle should the analyst perform first?
Select an answer first
13expert · hard
A threat intelligence team needs to monitor for emerging threats in a specific industry. They have a limited budget and need both real-time indicators and in-depth analysis. Which sourcing strategy best balances cost, timeliness, and depth?
Select an answer first
14foundation · easy
What is the primary purpose of cyber threat intelligence in an organization?
Select an answer first
15application · medium
After analyzing a new malware campaign, the threat intelligence team must share findings with different audiences. The executive board needs a summary of business risk, the SOC needs technical IoCs, and the IT helpdesk needs user guidance. What is the most effective dissemination approach?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CND

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CND” is a trademark of its owner, used for identification only.