Augmenting Vulnerability Management with Threat Intelligence TIE Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   How does threat intelligence add context to a vulnerability that a CVSS score alone does not provide?

   • AIt determines the patch release date
   • BIt calculates the base severity score of the vulnerability
   • CIt identifies the affected software version
   • DIt indicates whether the vulnerability is being actively exploited in the wild
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   After integrating threat intelligence into their vulnerability management program, a security team wants to measure whether the integration has improved their ability to focus on the most relevant risks. Which metric would best demonstrate the impact of threat intelligence on prioritization?

   • AThe average time to patch all vulnerabilities, regardless of severity.
   • BThe percentage of remediated vulnerabilities that were identified as actively exploited or targeted by threat actors at the time of remediation.
   • CThe number of vulnerability scans performed per week.
   • DThe total number of vulnerabilities discovered each month.
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A security team is designing an automated vulnerability management workflow that uses threat intelligence. They want to ensure that the workflow is both efficient and accurate. They are considering whether to fully automate the remediation process or to include a manual approval step. Which factor is MOST important in this decision?

   • AThe number of vulnerabilities that need to be remediated each month.
   • BThe number of threat intelligence feeds used in the workflow.
   • CThe cost of the automation platform.
   • DThe potential impact of false positives and false negatives on the organization.
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A company is establishing a vulnerability management program and wants to incorporate threat intelligence to improve decision-making. At which stage of the vulnerability management lifecycle should threat intelligence be integrated to have the most significant impact?

   • ADuring the prioritization stage, by using threat intelligence to rank vulnerabilities based on real-world exploitability and impact.
   • BDuring the assessment stage, by using threat intelligence to determine the technical severity of vulnerabilities.
   • CDuring the identification stage, by using threat intelligence to select which systems to scan.
   • DDuring the remediation stage, by using threat intelligence to choose the patching method.
   Reveal Solution Discussion Select an answer first
6. 35expert · hard

   A vulnerability management team is prioritizing vulnerabilities for remediation. They have a vulnerability with a CVSS score of 8.5 that affects a critical internal system but is not being exploited and has no known exploit code. They also have a vulnerability with a CVSS score of 6.0 that affects an internet-facing system and is being actively exploited by a known threat actor group. The team has limited resources and can only remediate one vulnerability this sprint. Which vulnerability should they remediate first?

   • ANeither vulnerability until a full risk assessment is completed.
   • BBoth vulnerabilities at the same time by splitting the team's resources.
   • CThe CVSS 6.0 vulnerability because it is actively exploited and internet-facing.
   • DThe CVSS 8.5 vulnerability because it affects a critical internal system.
   Reveal Solution Discussion Select an answer first