Building Public and Private Sharing Channels TIE Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which of the following is a legal constraint that must be considered when building a threat intelligence sharing channel?

   • AThe speed of the internet connection
   • BData protection regulations such as GDPR
   • CThe number of participants in the channel
   • DThe color scheme of the sharing platform
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the purpose of a sharing policy in threat intelligence governance?

   • ATo eliminate the need for human review of shared data
   • BTo define rules for what, how, and with whom intelligence can be shared
   • CTo ensure that no intelligence is ever shared externally
   • DTo automatically publish all intelligence to public channels
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A government agency is establishing a private threat intelligence sharing channel with trusted partner organizations. What governance element is essential to include in the sharing policy?

   • AA requirement to share all intelligence immediately without review
   • BA policy that allows any partner to redistribute intelligence to third parties
   • CA data classification scheme and handling rules for each intelligence type
   • DA rule that only technical indicators, not contextual reports, may be shared
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A company is joining a private threat intelligence sharing group that requires members to share indicators within 24 hours of discovery. However, the company's legal team requires a review process that can take up to 72 hours for certain types of data. What is the best way to reconcile these conflicting requirements?

   • ANegotiate an exception or a tiered sharing policy with the group
   • BShare only non-sensitive indicators within 24 hours and delay sensitive ones
   • CShare all indicators immediately and accept the legal risk
   • DLeave the sharing group
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A non-profit organization wants to share threat intelligence about a phishing campaign targeting its donors. The organization has no formal partnerships and wants to reach as many other non-profits as possible. What is the most appropriate sharing channel?

   • AA closed Slack workspace for security professionals
   • BA private email list of known non-profits
   • CAn internal document repository
   • DA public threat intelligence platform or OSINT feed
   Reveal Solution Discussion Select an answer first