Threat Intelligence Data Collection CTIA Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is an example of data standardization in threat intelligence collection?

   • AConverting all timestamps to UTC (Coordinated Universal Time) format.
   • BStoring raw logs in their original format for future reference.
   • CEncrypting data at rest using AES-256 encryption.
   • DDeleting logs that are older than 90 days to save storage space.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which factor is most important when assessing the credibility of a threat intelligence source?

   • AThe source's ability to provide data in a structured format
   • BThe source's use of advanced technical terminology
   • CThe source's popularity on social media
   • DThe source's track record of providing accurate and timely information
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following is a common format used by threat intelligence sharing platforms to exchange structured indicator data?

   • AREST
   • BSTIX/TAXII
   • CSNMP
   • DCSV
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A threat hunting team is planning a proactive hunt for signs of lateral movement within the network. The team has access to SIEM data, network flow logs, and endpoint detection and response (EDR) data. The team wants to minimize false positives while maximizing the chance of detecting real threats. Which approach should they take?

   • ADisable endpoint protections to allow all processes to run and capture more data.
   • BCorrelate EDR data with network flow logs to identify unusual process-to-network connections, such as a process spawning a connection to an internal host not seen before.
   • CQuery the SIEM for all failed login events across the network and investigate each one.
   • DSearch for known malware hashes in the SIEM and EDR data.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which of the following is a key ethical consideration when collecting threat intelligence from social media platforms?

   • AThe geographic location of the platform's servers, as it determines all legal obligations
   • BThe number of followers the account has, as more followers imply higher relevance
   • CThe terms of service of the platform and the public/private nature of the content
   • DThe age of the account, as older accounts are more likely to contain reliable intelligence
   Reveal Solution Discussion Select an answer first