Augmenting Vulnerability Management with Threat Intelligence TIE Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A security team has integrated threat intelligence into its vulnerability management process. They want to evaluate whether the integration is effective. They have collected data on the number of vulnerabilities remediated, the time to remediate, and the number of incidents related to known vulnerabilities. Which combination of metrics would provide the most balanced assessment of the integration's impact?

   • AThe number of false positives from the threat intelligence feed and the number of vulnerabilities with CVSS scores above 9.0.
   • BThe total number of vulnerabilities discovered and the total number patched.
   • CThe mean time to remediate actively exploited vulnerabilities and the number of incidents related to known vulnerabilities.
   • DThe number of vulnerabilities remediated and the number of threat intelligence feeds used.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which sequence correctly represents the typical vulnerability management lifecycle stages?

   • APrioritization, Identification, Assessment, Remediation
   • BRemediation, Prioritization, Assessment, Identification
   • CIdentification, Assessment, Prioritization, Remediation
   • DAssessment, Identification, Remediation, Prioritization
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which type of threat intelligence data would be most useful for contextualizing a vulnerability with information about a specific threat actor's tactics?

   • ATactics, techniques, and procedures (TTPs) associated with the vulnerability
   • BThe CVSS environmental score of the vulnerability
   • CThe vulnerability's CVE identifier
   • DThe vendor's patch release notes
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   After implementing threat-intelligence-informed vulnerability management, a security manager wants to evaluate its effectiveness. Which combination of metrics would provide the most comprehensive view?

   • ATime to remediate actively exploited vulnerabilities and percentage of vulnerabilities remediated before exploitation.
   • BNumber of security incidents and number of vulnerabilities patched.
   • CNumber of vulnerabilities discovered and number of patches deployed.
   • DTotal number of threat intelligence feeds and number of alerts generated.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A vulnerability management analyst is reviewing a list of vulnerabilities affecting internet-facing systems. One vulnerability has a CVSS score of 7.5, but threat intelligence shows that a known ransomware group is actively exploiting it as an initial access vector. Another vulnerability has a CVSS score of 9.8, but there is no known exploit and no observed threat actor activity. How should the analyst prioritize these vulnerabilities?

   • ADefer both vulnerabilities until more threat intelligence is available.
   • BPrioritize the CVSS 9.8 vulnerability because it has a higher severity score.
   • CTreat both vulnerabilities with equal priority because they are both above the critical threshold.
   • DPrioritize the CVSS 7.5 vulnerability because it is actively exploited by a known threat actor.
   Reveal Solution Discussion Select an answer first