Bulk Data Collection Methods and Considerations TIE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which ethical principle should guide bulk data collection in threat intelligence?

   • ACollecting as much data as possible regardless of relevance
   • BMinimizing the collection of personally identifiable information (PII) to only what is necessary
   • CUsing data only for commercial purposes
   • DSharing all collected data publicly without restriction
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   An organization wants to collect threat intelligence from public datasets, including government breach databases and academic research repositories. They need to automate the collection process. Which method is most suitable for this task?

   • AManually downloading files and uploading them to a central repository.
   • BWeb scraping the websites directly without checking for APIs.
   • CUsing API harvesting to pull data from provided endpoints.
   • DUsing data mining techniques on the raw HTML of the sites.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A threat intelligence team collects indicators from a popular open-source feed that aggregates data from volunteer contributors. The team notices that the feed contains many false positives and is heavily skewed toward a specific country's malware campaigns. The team wants to improve the quality of the data before integrating it into their platform. Which step should they take first?

   • ACross-correlate the feed with at least two independent sources before accepting an indicator.
   • BStore the raw feed as-is and rely on the analyst to manually filter during analysis.
   • CIncrease the collection frequency to get more data points and average out the bias.
   • DRemove all indicators from the country that is overrepresented.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   How does bulk data collection support the dissemination phase of the intelligence lifecycle?

   • ABy replacing the need for analysis with automated reporting
   • BBy directly sending raw data to stakeholders without any analysis
   • CBy providing the raw data that, after analysis, becomes the intelligence products shared with stakeholders
   • DBy ensuring that stakeholders collect their own data
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A threat intelligence team is integrating bulk data collection into their existing workflow. They have limited storage and processing capacity. They need to ensure that the collected data is used effectively throughout the intelligence lifecycle. What is the most efficient approach?

   • AImplement a tiered storage strategy that keeps hot data accessible for analysis and archives cold data for long-term retention.
   • BStore all data in a single high-performance database for quick access.
   • CCompress all data to reduce storage requirements.
   • DDelete data after analysis to free up storage.
   Reveal Solution Discussion Select an answer first