Building Public and Private Sharing Channels TIE Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A company has discovered a zero-day vulnerability in a widely used software product. The company wants to share this information to help the broader community but is concerned about attackers using the information before a patch is available. What is the most appropriate sharing channel?

   • AA public blog post with full technical details immediately
   • BA private, coordinated disclosure to the vendor and trusted security groups
   • CAn internal email to the company's own IT team only
   • DA public tweet with the exploit code
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which of the following is an example of a private threat intelligence sharing channel?

   • AA public Twitter feed of indicators
   • BA members-only information sharing and analysis center (ISAC)
   • CAn open-source malware sample repository
   • DA government open data portal
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A multinational corporation is establishing a private threat intel sharing channel with partners in different countries. The legal team warns that some indicators may be subject to export control regulations or data residency laws. What should the intel team do to ensure the channel remains compliant?

   • ARestrict the channel to partners located in the same country as the corporation
   • BShare all indicators but require partners to sign a legal waiver
   • CUse a public OSINT feed to avoid any legal restrictions
   • DClassify indicators by sensitivity and apply automated rules to block sharing of regulated data
   Reveal Solution Discussion Select an answer first
5. 34application · easy

   A small cybersecurity consultancy wants to contribute to the wider security community by sharing anonymized malware samples and indicators. They have no budget for a private platform and want the broadest possible distribution. Which public sharing channel is the most appropriate?

   • AA direct email distribution list to selected government agencies
   • BA private Slack workspace with a few trusted peers
   • CA public threat intel platform that accepts community submissions
   • DAn internal wiki for the consultancy's own analysts
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   When building a threat intelligence sharing channel, why is trust among participants an important operational consideration?

   • ATrust allows all data to be shared publicly without concern
   • BTrust ensures that shared intelligence is reliable and less likely to be misused
   • CTrust eliminates the need for any data validation
   • DTrust is only relevant for public channels, not private ones
   Reveal Solution Discussion Select an answer first