Threat Intelligence Program Requirements and Planning CTIA Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   What is the primary purpose of a Threat Intelligence Platform (TIP)?

   • ATo aggregate, correlate, and manage threat intelligence from multiple sources
   • BTo perform automated penetration testing
   • CTo provide a secure communication channel for analysts
   • DTo replace the need for human analysts
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which tool is commonly used for the collection of open-source intelligence (OSINT)?

   • ANessus
   • BMaltego
   • CSIEM (Security Information and Event Management)
   • DWireshark
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which element is typically included in a reporting and communication plan?

   • AThe budget for threat intelligence tools
   • BThe technical specifications of the TIP
   • CThe frequency and format of intelligence reports
   • DThe list of all threat actors being tracked
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Which resource is considered a human resource requirement for a threat intelligence program?

   • AOSINT feeds
   • BSIEM system
   • CThreat intelligence platform (TIP)
   • DSkilled threat intelligence analysts
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A threat intelligence program has been operating for six months. The CISO wants to measure whether the program is providing value to the organization. Which metric would best demonstrate the program's impact on security operations?

   • ANumber of threat feeds subscribed to by the program.
   • BNumber of threat intelligence reports produced per month.
   • CTime spent by analysts on intelligence collection each week.
   • DPercentage of intelligence reports that led to a change in security controls or detection rules.
   Reveal Solution Discussion Select an answer first