Building Trust Within Intelligence Communities TIE Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A threat-intelligence sharing group is composed of members from the financial and healthcare sectors. A new regulation in the healthcare sector requires that any shared data be anonymized before it is shared. The financial members are concerned that anonymization will reduce the value of the intelligence. The group wants to maintain trust and continue sharing. What is the best approach?

   • AHave the healthcare members share only anonymized data, and have the financial members share raw data, with a clear labeling system.
   • BRequire all members to anonymize their data to ensure consistency.
   • CCreate a separate sharing group for healthcare members only.
   • DExclude healthcare members from the group to avoid the regulatory burden.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A threat-intelligence sharing group has been operating for several years. Recently, a member organization was acquired by another company, and the new owner has a different approach to data sharing. The group is concerned that the acquired member may start sharing data that is inconsistent with the group's norms. What is the best way to maintain trust in this situation?

   • AImmediately suspend the acquired member's access until the new owner signs a new agreement.
   • BAllow the acquired member to continue as before, assuming the new owner will follow the existing agreement.
   • CReach out to the new owner to discuss the group's values, expectations, and the existing agreement, and offer a refresher on the group's norms.
   • DChange the group's data-sharing platform to require more technical controls, such as automated data classification.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A threat-intelligence sharing group has been operating successfully for years, but a recent data breach at one of its members has exposed shared intelligence to unauthorized parties. The group's members are questioning whether they can trust the group's security. The group wants to restore trust and continue operations. What is the most important action to take?

   • AConduct a thorough post-incident review, share the findings with all members, and implement the recommended security improvements.
   • BKeep the breach details confidential to avoid panic and reassure members that the group is still secure.
   • CIncrease the technical security controls on the sharing platform, such as adding multi-factor authentication.
   • DImmediately expel the member that was breached to show that the group takes security seriously.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which practice helps sustain trust by keeping partners informed about how shared intelligence is being used and any changes in handling policies?

   • AData minimization
   • BCompetitive analysis
   • CAccess restriction
   • DContinuous communication
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   Two competing cybersecurity vendors are part of the same threat-intelligence sharing group. Vendor A has repeatedly provided high-quality, actionable intelligence. Vendor B has been reluctant to share because it fears losing a competitive advantage. The group wants to encourage Vendor B to share more while maintaining the group's overall reliability. What is the most effective approach?

   • AAllow Vendor B to share only non-sensitive, low-value indicators to avoid competitive harm.
   • BAsk Vendor A to share its most sensitive data with Vendor B privately to demonstrate trust.
   • CRemove Vendor B from the group if it does not share within 30 days.
   • DImplement a reputation system that scores members on the quality and timeliness of their contributions, and make the scores visible to all members.
   Reveal Solution Discussion Select an answer first