Building Trust Within Intelligence Communities TIE Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   A threat-intelligence sharing community has been operating for a year. The community's members have expressed concerns that some members are 'free-riding'—receiving intelligence without contributing. The community wants to maintain trust and encourage active participation. What is the most effective practice to sustain trust in this situation?

   • ARequire all members to sign a new agreement that mandates a minimum number of contributions per quarter.
   • BDisband the community and form a smaller group of only the most active members.
   • CPublicly name and shame members who do not contribute regularly.
   • DImplement a reciprocity policy that ties access to premium intelligence to a member's contribution history.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   A threat-intelligence sharing group has a member that consistently provides high-quality, actionable intelligence. The group's coordinator wants to recognize this member to encourage others to contribute more. However, the coordinator is concerned that public recognition might make the member a target for retaliation. What is the best way to recognize the member while maintaining trust and security?

   • AGive the member a monetary reward but do not disclose the reason publicly.
   • BDo not recognize the member at all to avoid any risk.
   • CPublicly announce the member's name and the number of contributions they have made.
   • DPrivately thank the member and give them a 'top contributor' badge that is visible only to the group's administrators.
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   A government agency and a private-sector company are considering a threat-intelligence sharing partnership. The company is concerned that the agency may request data that could reveal the company's proprietary security weaknesses. The agency is concerned that the company may not share sensitive incident data due to privacy regulations. What is the most important step to build trust between these two parties?

   • AHave the agency sign a non-disclosure agreement and promise not to request proprietary data.
   • BRely on the existing personal relationships between the agency's and the company's security teams.
   • CEstablish a formal data-sharing agreement that specifies the types of data to be shared, the purposes for which it can be used, and the protections for proprietary information.
   • DBegin with a pilot program where the company shares only low-sensitivity data and the agency provides general threat reports.
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A threat intelligence sharing group has a reputation system where members rate the usefulness of shared indicators. A member consistently receives high ratings for its indicators. What does this most directly indicate about the member?

   • AThe member is highly credible and reliable.
   • BThe member shares more data than anyone else.
   • CThe member is the most powerful organization in the group.
   • DThe member has been in the group the longest.
   Reveal Solution Discussion Select an answer first
6. 45application · medium

   An analyst is evaluating whether to trust a new intelligence source that has been sharing indicators for three months. The source's indicators have been accurate, but the source has not provided any feedback on whether the indicators were useful. Which assessment is most accurate?

   • AThe source is unreliable because it does not respond to feedback.
   • BThe source should be distrusted because it is not participating in two-way communication.
   • CThe source is fully trustworthy because accuracy is the most important factor.
   • DThe source is credible but has not yet demonstrated reciprocity.
   Reveal Solution Discussion Select an answer first