A small cybersecurity team wants to enrich its threat detection with external intelligence but has limited budget and no formal sharing agreements. Which public sharing channel is most appropriate for this purpose?

A private internal repository of past incident reports

Open-source intelligence (OSINT) feeds and public threat intel platforms

A commercial threat intelligence platform with a paid subscription

A closed, invitation-only threat intelligence community

A regional bank is building a threat intel sharing program. They need to share non-sensitive indicators (e.g., phishing URLs, malware hashes) with peer banks in the same region to improve early warning, but they must avoid exposing any customer data or internal network details. Which channel is the most appropriate primary choice?

An internal repository accessible only to the bank's own SOC team

A public OSINT feed that aggregates indicators from multiple sources

A public social media account managed by the bank's PR department

A closed, invitation-only community for regional financial institutions

A private threat intel sharing community is struggling with members who share sensitive data outside the community, violating the trust agreement. The community leaders want to enforce the policy without resorting to legal action. What is the most effective governance measure?

Watermark shared data with unique identifiers per member to trace leaks

Publicly name and shame members who leak data

Increase the frequency of data sharing to build more trust

Remove all sensitive data from the platform

A company is setting up a private threat intelligence sharing channel with a few trusted partners. The company wants to ensure that the partners do not redistribute the intelligence to others without permission. What should the company include in the sharing policy?

A clause prohibiting redistribution without prior written consent

A clause that only the company can share intelligence

A clause allowing partners to share with anyone they choose

A clause requiring partners to share all intelligence with the public

A managed security service provider (MSSP) operates a private threat intel sharing platform for its clients. The MSSP wants to ensure that clients only share indicators they are authorized to disclose and that the platform maintains a consistent data format. Which governance measure should the MSSP implement first?

Automatically anonymize all indicators before they are posted

Restrict platform access to a small group of trusted analysts

Publish a formal sharing policy that defines data classification, authorized sources, and required formats

Require all clients to sign a non-disclosure agreement before joining

EC-CouncilThreat Intelligence Essentials

Domain 8Objective 3

Building Public and Private Sharing Channels TIE Practice Questions (Page 8)

Part of the Sharing, Collaboration, and Incident Response domain, which makes up ~13% of our current practice bank.

43questions here

9free pages

5concepts

Questions 36–40

36application · medium
A small cybersecurity team wants to enrich its threat detection with external intelligence but has limited budget and no formal sharing agreements. Which public sharing channel is most appropriate for this purpose?
Select an answer first
37application · medium
A regional bank is building a threat intel sharing program. They need to share non-sensitive indicators (e.g., phishing URLs, malware hashes) with peer banks in the same region to improve early warning, but they must avoid exposing any customer data or internal network details. Which channel is the most appropriate primary choice?
Select an answer first
38expert · hard
A private threat intel sharing community is struggling with members who share sensitive data outside the community, violating the trust agreement. The community leaders want to enforce the policy without resorting to legal action. What is the most effective governance measure?
Select an answer first
39application · medium
A company is setting up a private threat intelligence sharing channel with a few trusted partners. The company wants to ensure that the partners do not redistribute the intelligence to others without permission. What should the company include in the sharing policy?
Select an answer first
40application · medium
A managed security service provider (MSSP) operates a private threat intel sharing platform for its clients. The MSSP wants to ensure that clients only share indicators they are authorized to disclose and that the platform maintains a consistent data format. Which governance measure should the MSSP implement first?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to TIE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “TIE” is a trademark of its owner, used for identification only.

Building Public and Private Sharing Channels TIE Practice Questions (Page 8)

Questions 36–40

A small cybersecurity team wants to enrich its threat detection with external intelligence but has limited budget and no formal sharing agreements. Which public sharing channel is most appropriate for this purpose?

A private threat intel sharing community is struggling with members who share sensitive data outside the community, violating the trust agreement. The community leaders want to enforce the policy without resorting to legal action. What is the most effective governance measure?

A company is setting up a private threat intelligence sharing channel with a few trusted partners. The company wants to ensure that the partners do not redistribute the intelligence to others without permission. What should the company include in the sharing policy?

Keep studying — Sharing, Collaboration, and Incident Response