Augmenting Vulnerability Management with Threat Intelligence TIE Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company wants to automate the process of identifying which vulnerabilities are most likely to be exploited. They have access to multiple threat intelligence feeds, including exploit databases, dark web monitoring, and vendor advisories. Which automation approach would be most effective?

   • AManually review each threat intelligence feed and correlate findings with vulnerabilities.
   • BConfigure an automated correlation engine that ingests multiple feeds and flags vulnerabilities with active exploit evidence.
   • CUse a single threat intelligence feed that provides CVSS scores.
   • DUse a single feed that lists all known vulnerabilities without any context.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   How can automation leverage threat intelligence to streamline vulnerability detection?

   • ABy automatically correlating new threat intelligence with existing vulnerability scan data
   • BBy eliminating the need for vulnerability assessments
   • CBy automatically patching all vulnerabilities without human review
   • DBy replacing vulnerability scanners with threat intelligence feeds
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An organization is prioritizing vulnerabilities for remediation. They have a vulnerability with a CVSS score of 9.0 that affects a non-critical internal application with no known exploits. They also have a vulnerability with a CVSS score of 6.5 that affects an internet-facing customer portal and is listed in CISA's Known Exploited Vulnerabilities catalog. Which vulnerability should be remediated first?

   • AThe CVSS 6.5 vulnerability because it is internet-facing and known to be exploited.
   • BBoth vulnerabilities at the same time because they are both above the medium severity threshold.
   • CNeither vulnerability until a full risk assessment is completed.
   • DThe CVSS 9.0 vulnerability because it has a higher severity score.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What does a KPI like 'mean time to remediate (MTTR) for vulnerabilities with active exploit intelligence' indicate?

   • AThe accuracy of vulnerability scanners
   • BThe total number of vulnerabilities patched in a year
   • CHow quickly the organization responds to vulnerabilities that are being actively exploited
   • DThe number of threat intelligence sources used
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company has a mature vulnerability management program but is struggling with alert fatigue from its vulnerability scanner. The scanner generates thousands of findings, many of which are not relevant to the organization's threat landscape. They want to reduce noise while ensuring that genuinely critical vulnerabilities are not missed. Which integration point would best achieve this?

   • ADisable all vulnerability alerts and rely on manual monthly reviews.
   • BUse a single, generic threat intelligence feed without filtering to ensure comprehensive coverage.
   • CIncrease the scanner's scan frequency to catch more vulnerabilities.
   • DIntegrate threat intelligence into the scanner's reporting so that findings are automatically filtered or prioritized based on relevance to the organization's industry and threat actors.
   Reveal Solution Discussion Select an answer first