Direction and Review of the Threat Intelligence Program CTIA Practice Questions (Page 8)

Questions 36–40

1. 36expert · medium

   A threat intelligence program's review reveals that the program is producing high-quality intelligence, but it is not being used by the incident response team because the intelligence is delivered in a format that is not integrated with their tools. The program manager must decide how to improve the program's effectiveness. Which action best addresses the root cause?

   • AProvide training to the incident response team on how to use the current format.
   • BReduce the frequency of intelligence delivery to give the IR team more time to use it.
   • CAsk the incident response team to manually review the intelligence reports.
   • DDeliver intelligence in a format that can be automatically ingested by the incident response tools.
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   During a review, a threat intelligence program finds that its analysts spend 70% of their time on manual data collection, leaving little time for analysis. The review also shows that the quality of analysis is high when time is available. The program manager wants to improve efficiency. Which action best supports continuous improvement?

   • AHire more analysts to share the collection workload.
   • BAsk analysts to work longer hours to complete both collection and analysis.
   • CInvest in automation tools to reduce manual collection time.
   • DReduce the frequency of intelligence reports to save time.
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A multinational manufacturing company is establishing a threat intelligence program. The board has approved funding but insists that the program's mission statement explicitly support the company's new strategic goal of expanding into emerging markets. The CISO asks you to draft the program's mission. Which mission statement best aligns the program with the organizational goal?

   • ATo reduce the number of security incidents by providing intelligence that helps the incident response team respond faster and more effectively.
   • BTo protect the company's information assets by providing timely threat intelligence that supports secure business operations and informed risk decisions.
   • CTo enable the company's secure expansion into emerging markets by delivering threat intelligence that informs risk-based decisions and safeguards new operations.
   • DTo collect and analyze threat data from all available sources to produce actionable intelligence for security operations.
   Reveal Solution Discussion Select an answer first
5. 39expert · medium

   A financial institution is defining the strategic direction of its threat intelligence program. The institution faces a trade-off: it wants to expand into new digital services quickly, but it also must comply with strict data protection regulations. The CISO must set a direction that balances speed and compliance. Which approach best achieves this balance?

   • APrioritize compliance and delay expansion until all regulatory requirements are fully met.
   • BCreate two separate programs: one for compliance and one for digital service innovation.
   • CIntegrate threat intelligence into the digital service development process to identify and mitigate risks early while ensuring compliance.
   • DPrioritize speed of service expansion and address compliance issues as they arise.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A government agency is establishing a threat intelligence program. The program will support both national security and law enforcement objectives. The agency's leadership wants to ensure that the program's direction is aligned with these objectives. Which stakeholder group should be primarily engaged to define the program's direction?

   • AThe agency's IT help desk staff.
   • BThe agency's executive leadership and mission owners.
   • CThe agency's external vendors.
   • DThe agency's public affairs office.
   Reveal Solution Discussion Select an answer first