Bulk Data Collection Methods and Considerations TIE Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   An analyst is tasked with collecting threat data from a large public forum that frequently posts malicious URLs. The forum does not provide an API, and the data is unstructured. The analyst needs to extract URLs and associated timestamps for correlation with other feeds. Which method is most suitable for this task?

   • AData mining the entire forum database after obtaining a copy from the administrator.
   • BManual copy-paste of posts into a spreadsheet.
   • CAPI harvesting using the forum's undocumented internal API.
   • DWeb scraping with a parser to extract URLs and timestamps from the HTML.
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   Which legal consideration is most relevant when collecting bulk data from social media platforms?

   • AObtaining permission from every individual user
   • BCompliance with the platform's terms of service
   • CRegistering the data with a government agency
   • DEnsuring the data is stored on physical media
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   What is a potential bias in bulk-collected data from social media?

   • AThe data is always completely objective and unbiased
   • BThe data is automatically verified by the platform
   • CThe data may overrepresent certain demographics or viewpoints
   • DThe data is only collected during business hours
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A security operations center (SOC) wants to automatically collect threat indicators from a public paste site that does not offer an API. The site's terms of service prohibit automated access. The SOC needs the data to feed its threat intelligence platform. Which action best balances the collection need with legal and ethical considerations?

   • AUse a rotating proxy to scrape the site without being blocked.
   • BIgnore the terms of service because the data is publicly accessible and intended for sharing.
   • CUse a third-party data provider that has a legitimate agreement with the site to supply the data.
   • DPerform low-frequency web scraping during off-peak hours to minimize impact and avoid detection.
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   Which statement best describes the role of bulk data collection within threat intelligence?

   • AIt is a one-time activity performed only when a specific threat is identified
   • BIt is the initial phase where raw data is gathered from various sources to feed into the intelligence lifecycle
   • CIt is the process of validating and correcting data after analysis is complete
   • DIt is the final step where finished intelligence is disseminated to stakeholders
   Reveal Solution Discussion Select an answer first