Threat Intelligence Program Requirements and Planning CTIA Practice Questions (Page 14)

Questions 66–68

1. 66foundation · easy

   Which stakeholder group is most likely to need tactical threat intelligence for immediate incident response?

   • ASecurity operations center (SOC) analysts
   • BBoard of directors
   • CLegal counsel
   • DChief executive officer (CEO)
   Reveal Solution Discussion Select an answer first
2. 67expert · hard

   A large enterprise is establishing a threat intelligence program. The CISO wants to focus on nation-state threats, the fraud team needs real-time phishing intelligence, and the network team wants vulnerability intelligence for patching. The budget allows for only two of these three focus areas in the first year. How should the program manager decide which two to prioritize?

   • APrioritize the needs of the CISO, since they are the highest-ranking stakeholder.
   • BChoose the two areas that are easiest to implement with existing tools and data sources.
   • CSplit the budget equally across all three areas, even if it means each area is underfunded.
   • DConduct a risk assessment to determine which threats pose the greatest potential impact to the organization's critical assets and operations.
   Reveal Solution Discussion Select an answer first
3. 68expert · hard

   A threat intelligence program has been in operation for two years. The team has been producing weekly reports, but stakeholder engagement has declined. The program's KPIs show that the reports are not being used to make decisions. The team wants to improve the program's effectiveness. Which approach is most likely to lead to meaningful improvement?

   • AReduce the number of reports and focus only on high-priority threats to reduce noise.
   • BIncrease the frequency of reports to keep stakeholders more engaged.
   • CConduct a comprehensive review of stakeholder needs, revise the intelligence requirements, and adjust the reporting format and cadence based on feedback.
   • DReplace the current reporting tool with a more advanced platform to improve delivery.
   Reveal Solution Discussion Select an answer first