Threat Intelligence Program Requirements and Planning CTIA Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the purpose of prioritizing intelligence requirements?

   • ATo allocate limited resources to the most important intelligence needs
   • BTo reduce the number of intelligence products produced
   • CTo ensure all requirements are equally addressed
   • DTo satisfy all stakeholders equally
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which of the following is an example of a KPI for a threat intelligence program?

   • ATime to produce and disseminate a finished intelligence report
   • BNumber of firewalls deployed
   • CNumber of employees in the organization
   • DAmount of raw data collected per day
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A threat intelligence team produces a detailed technical report on a new malware campaign. The report includes indicators of compromise (IOCs), attack vectors, and recommended detection rules. The team needs to share this information with different stakeholders. What is the most effective communication plan?

   • AEmail the full technical report to all stakeholders, including executives, to ensure transparency.
   • BSend the full technical report to the SOC for immediate action and a summarized executive brief to senior management.
   • CPost the report on the internal wiki and wait for stakeholders to read it.
   • DPresent the report in a monthly meeting, regardless of urgency.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which of the following is a financial resource consideration for a threat intelligence program?

   • AThe type of intelligence collection methods used
   • BThe reporting format for intelligence products
   • CThe number of analysts on the team
   • DThe cost of threat intelligence subscriptions and tools
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A threat intelligence team collects data from multiple sources, including open-source feeds, dark web forums, and internal telemetry. The team is overwhelmed by the volume of raw data and is struggling to produce timely analysis. What process improvement would most directly address this issue?

   • AAutomate the final report generation to save time.
   • BEliminate the analysis phase and share raw data directly with stakeholders.
   • CIncrease the number of data sources to ensure no relevant information is missed.
   • DImplement a triage and prioritization step to filter and rank raw data before it reaches the analysts.
   Reveal Solution Discussion Select an answer first