A global retail company is building a threat intelligence capability. The CISO wants strategic intelligence for board reporting, while the SOC needs technical IOCs for daily detection. The team has a limited budget and must balance timeliness with reliability. Which approach best meets both needs?

Subscribe only to a premium commercial feed that provides both strategic reports and IOCs

Rely solely on information-sharing communities like ISACs

Combine free OSINT feeds for technical IOCs with a curated commercial strategic report

Use free OSINT feeds for IOCs and rely on internal analysis for strategic reports

EC-CouncilSOC Essentials

Domain 7Objective 1

Threat Intelligence Sources, Types, and Lifecycle SCE Practice Questions (Page 7)

Part of the Threat Intelligence and Hunting domain, which makes up ~12% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

3concepts

Questions 31–32

31foundation · easy
A company subscribes to a threat intelligence feed that provides indicators of compromise (IOCs) and requires a paid annual license. How should this source be categorized?
Select an answer first
32expert · hard
A global retail company is building a threat intelligence capability. The CISO wants strategic intelligence for board reporting, while the SOC needs technical IOCs for daily detection. The team has a limited budget and must balance timeliness with reliability. Which approach best meets both needs?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SCE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “SCE” is a trademark of its owner, used for identification only.

Threat Intelligence Sources, Types, and Lifecycle SCE Practice Questions (Page 7)

Questions 31–32

A company subscribes to a threat intelligence feed that provides indicators of compromise (IOCs) and requires a paid annual license. How should this source be categorized?

A global retail company is building a threat intelligence capability. The CISO wants strategic intelligence for board reporting, while the SOC needs technical IOCs for daily detection. The team has a limited budget and must balance timeliness with reliability. Which approach best meets both needs?

Keep studying — Threat Intelligence and Hunting