Threat Intelligence Program Requirements and Planning CTIA Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A multinational retail company is establishing a threat intelligence program. The CISO wants to ensure the program directly supports the board's risk appetite and the security operations center's daily alert triage. The legal team also needs to understand regulatory exposure from data breaches. Which stakeholder engagement approach best aligns the program with these diverse needs?

   • ARely on the CISO's summary of organizational priorities to define all intelligence requirements.
   • BInterview each stakeholder group separately to document their specific intelligence requirements and preferred reporting cadence.
   • CUse threat intelligence reports from industry peers to infer what the stakeholders likely need.
   • DSend a single survey to all stakeholders asking them to rank a predefined list of threat types by importance.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   What is the primary purpose of a threat intelligence program within an organization?

   • ATo replace the need for other security controls such as firewalls and endpoint protection
   • BTo provide timely, relevant, and actionable intelligence that informs and improves an organization's security decisions
   • CTo collect as much threat data as possible from all available sources
   • DTo automate all security operations without human intervention
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   What is the primary focus of a strategic goal in a threat intelligence program?

   • AResponding to an active phishing campaign within hours
   • BAligning intelligence activities with the organization's long-term risk posture and business objectives
   • CIdentifying specific malware hashes to block at the endpoint
   • DEnsuring that security analysts have the latest threat feeds
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A government contractor is planning a threat intelligence program. The program must handle classified information and comply with strict government regulations. The budget is limited, and the organization cannot hire a large team. The program will support both strategic decision-making and tactical incident response. Which resource planning strategy is most appropriate?

   • AHire a small team of cleared analysts and invest in secure, government-approved tools that support both strategic and tactical intelligence workflows.
   • BInvest heavily in automated tools to reduce the need for human analysts.
   • COutsource the intelligence function to a commercial vendor that specializes in threat intelligence.
   • DUse open-source tools and free threat feeds to minimize costs, and rely on existing staff to perform intelligence duties part-time.
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   Which type of goal is primarily focused on immediate, day-to-day security operations such as identifying indicators of compromise?

   • ATactical goal
   • BCompliance goal
   • COperational goal
   • DStrategic goal
   Reveal Solution Discussion Select an answer first