Which type of threat intelligence focuses on the tactics, techniques, and procedures (TTPs) used by threat actors?

Operational threat intelligence

A threat hunter is using threat intelligence to proactively search for signs of a new attack campaign. The intelligence report includes TTPs and IOCs, but the hunter is unsure which indicators are most likely to be present in the organization's environment. What should the hunter do first?

Wait for the SIEM to generate alerts based on the IOCs.

Prioritize hunting for the TTPs that are most relevant to the organization's environment and industry.

Focus only on the strategic intelligence in the report.

Search for all IOCs in the report across all logs.

EC-CouncilSOC Essentials

Domain 7Objective 3

Role of Threat Intelligence in SOC Operations SCE Practice Questions (Page 9)

Part of the Threat Intelligence and Hunting domain, which makes up ~12% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

6concepts

Questions 41–43

41foundation · easy
Which type of threat intelligence focuses on the tactics, techniques, and procedures (TTPs) used by threat actors?
Select an answer first
42expert · hard
A threat hunter is using threat intelligence to proactively search for signs of a new attack campaign. The intelligence report includes TTPs and IOCs, but the hunter is unsure which indicators are most likely to be present in the organization's environment. What should the hunter do first?
Select an answer first
43foundation · easy
Which stage of the threat intelligence lifecycle involves delivering actionable intelligence to the stakeholders who will use it?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SCE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “SCE” is a trademark of its owner, used for identification only.

Role of Threat Intelligence in SOC Operations SCE Practice Questions (Page 9)

Questions 41–43

Which type of threat intelligence focuses on the tactics, techniques, and procedures (TTPs) used by threat actors?

A threat hunter is using threat intelligence to proactively search for signs of a new attack campaign. The intelligence report includes TTPs and IOCs, but the hunter is unsure which indicators are most likely to be present in the organization's environment. What should the hunter do first?

Which stage of the threat intelligence lifecycle involves delivering actionable intelligence to the stakeholders who will use it?

Keep studying — Threat Intelligence and Hunting