Building Trust Within Intelligence Communities TIE Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A threat intelligence sharing community has a member that has contributed high-quality indicators for years. Recently, the member's indicators have started to be less accurate, and they have missed several deadlines. The community manager is considering how to handle this without losing the member's future contributions. What is the most appropriate course of action?

   • APrivately discuss the decline with the member and offer support to identify the cause.
   • BPublicly call out the member to encourage them to improve.
   • CIgnore the decline and hope the member improves on their own.
   • DImmediately revoke the member's access to the community.
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   Two competing cybersecurity vendors are asked to share threat intelligence with each other as part of a national cyber defense initiative. Both are concerned that shared information could be used to gain a competitive advantage. What is the most effective way to overcome this barrier?

   • AEncourage them to share only non-sensitive, publicly available information.
   • BEstablish a trusted third-party intermediary that anonymizes and aggregates shared data.
   • CRequire them to share all data without restrictions to build trust quickly.
   • DHave the vendors sign a mutual non-disclosure agreement and share directly.
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   In the context of intelligence communities, what is the primary role of trust in enabling effective information sharing?

   • AIt eliminates the need for formal data classification policies.
   • BIt guarantees that all shared intelligence is accurate and timely.
   • CIt replaces the need for legal agreements between organizations.
   • DIt reduces the perceived risk that shared information will be misused or mishandled.
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   Which challenge to trust arises when organizations view each other as rivals and are reluctant to share information that could benefit a competitor?

   • ALack of formal agreements
   • BInter-organizational competition
   • CPrivacy concerns
   • DData sensitivity
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   A threat-intelligence sharing group has a member that has been consistently reliable for years, but recently the member submitted several indicators that turned out to be false positives. The group's coordinator is concerned that the member's reputation may be damaged, and that other members may stop trusting the member's future submissions. What is the most appropriate way to handle this situation?

   • AImmediately reduce the member's access level until they prove their reliability again.
   • BPrivately discuss the false positives with the member to understand the cause, and work together to improve the member's reporting process.
   • CIgnore the false positives and hope they do not happen again.
   • DPublicly flag the member's false positives to warn other members.
   Reveal Solution Discussion Select an answer first