Threat Intelligence Program Requirements and Planning CTIA Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the role of threat intelligence in the risk management process?

   • ATo determine the organization's risk appetite
   • BTo audit the effectiveness of risk management
   • CTo implement risk mitigation controls
   • DTo provide data on the likelihood and impact of threats
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A multinational corporation is establishing a threat intelligence program. The legal team warns that collecting intelligence on threat actors may involve data privacy regulations and cross-border data transfer restrictions. The CISO wants the program to have clear authority to collect and share intelligence. What should the program charter include to address these concerns?

   • AA governance framework that defines the program's authority, data handling rules, and compliance with applicable laws.
   • BA list of all threat actors the program will monitor, along with their known aliases and infrastructure.
   • CA budget allocation for legal review of every intelligence product before dissemination.
   • DA technical architecture diagram showing how intelligence will be collected and stored.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A threat intelligence program has a fixed annual budget. The program needs to renew its commercial threat feed subscriptions, which are essential for collection. The team also wants to invest in a new analytics tool to improve analysis efficiency. The program has been asked to demonstrate cost-effectiveness to justify its budget. Which approach best manages the budget and demonstrates value?

   • ARenew the essential feed subscriptions and defer the analytics tool purchase, while tracking how the feeds contribute to incident prevention.
   • BRequest an emergency budget increase from senior management without providing justification.
   • CPurchase the analytics tool and reduce the number of feed subscriptions to stay within budget.
   • DCancel the feed subscriptions and rely on free open-source feeds to save money for the analytics tool.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company's threat intelligence program has identified a new attack campaign targeting the organization's industry. The company's risk management team is deciding whether to allocate additional resources to mitigate the threat. The threat intelligence team has provided a detailed report with indicators and recommended actions. Which action would best integrate the intelligence into the risk management process?

   • APresent the intelligence report to the risk management team and collaborate to update the risk register and adjust mitigation strategies.
   • BShare the report with the SOC and instruct them to block all indicators immediately.
   • CAutomatically implement all recommended actions from the intelligence report without further review.
   • DFile the report for future reference and continue with existing risk management processes.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is an ethical consideration when handling threat intelligence data?

   • AProtecting the privacy of individuals whose data may be included in intelligence
   • BUsing the most expensive tools available
   • CEnsuring that the data is stored in the cloud
   • DSharing intelligence with all employees regardless of need
   Reveal Solution Discussion Select an answer first