Augmenting Vulnerability Management with Threat Intelligence TIE Practice Questions (Page 10)

Questions 46–46

1. 46application · medium

   A security operations team wants to automate the creation of remediation tickets for vulnerabilities that are actively exploited in the wild. They have a vulnerability management platform and a threat intelligence feed that provides indicators of compromise and exploit activity. Which automation approach would best achieve this goal?

   • AManually review the threat intelligence feed each morning and create tickets for any relevant vulnerabilities.
   • BConfigure the vulnerability management platform to automatically open a ticket for every vulnerability that matches a threat intelligence indicator, without human review.
   • CUse an orchestration playbook that correlates vulnerability scan results with threat intelligence, and only creates a ticket when a vulnerability is confirmed as actively exploited.
   • DBlock all traffic to any system that appears in the threat intelligence feed, without creating tickets.
   Reveal Solution Discussion Select an answer first