Building Trust Within Intelligence Communities TIE Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A threat-intelligence sharing group has a member that has been sharing high-quality intelligence but has also been known to exaggerate the severity of threats to gain attention. The group's coordinator is concerned that this behavior could undermine the credibility of the group's intelligence. The coordinator wants to address this without losing the member's valuable contributions. What is the most effective approach?

   • AIgnore the exaggerations and focus on the member's positive contributions.
   • BPrivately discuss the issue with the member, providing examples of the exaggerations and explaining how they affect the group's credibility.
   • CPublicly call out the member's exaggerations to warn other members.
   • DQuietly reduce the member's access level without explanation.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A regional financial ISAC is onboarding a new member bank. The bank's CISO is hesitant to share threat indicators because the bank has never worked with the ISAC before and is unsure how its data will be used. Which action would most directly address the CISO's hesitation and lay the groundwork for future sharing?

   • AAsk the bank to submit a sample of low-sensitivity indicators to test the ISAC's response.
   • BInvite the CISO to a working group meeting to observe how indicators are discussed and attributed.
   • CSign a non-disclosure agreement and a data-sharing memorandum of understanding with the bank.
   • DProvide the bank with a list of all ISAC members so the CISO can contact peers for references.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A regional threat intelligence sharing community is facing a decline in participation. A survey reveals that members are concerned about the quality of shared data and the lack of feedback on their contributions. The community manager wants to revitalize the community. Which initiative would most effectively address both concerns?

   • AImplement a peer-review system where members rate the quality of submissions and provide feedback.
   • BCreate a newsletter summarizing recent contributions and their impact.
   • CProvide training on how to write better threat intelligence reports.
   • DIncrease the frequency of community meetings to discuss recent threats.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A cross-border threat intelligence sharing initiative is being formed between two countries with different data privacy laws. One country requires strict data minimization, while the other wants to share as much data as possible. What is the most effective way to establish trust despite this legal conflict?

   • AHave each country share data according to its own laws without a common framework.
   • BCreate a tiered data-sharing framework that categorizes data by sensitivity and applies different handling rules.
   • CAdopt the stricter country's data minimization rules for all shared data.
   • DLimit sharing to only non-personal data to avoid privacy laws altogether.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A threat intelligence sharing community has been active for two years. Recently, some members have started to share less frequently, and the quality of submissions has declined. The community manager wants to reverse this trend. Which action would be most effective?

   • AImplement stricter penalties for low-quality submissions.
   • BAllow members to take a break from sharing without consequences.
   • CReduce the amount of shared data to lower the burden on members.
   • DIncrease the frequency of community meetings and status updates.
   Reveal Solution Discussion Select an answer first