Data Analysis Techniques TIE Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A security team has identified two active threats: a ransomware campaign targeting the marketing department and a credential-stuffing attack targeting the customer portal. The marketing department has no critical data, while the customer portal contains sensitive customer information. The team has limited resources to respond. What should they do first?

   • AWait for more data before making a decision.
   • BPrioritize the ransomware campaign because ransomware is always more severe.
   • CPrioritize the credential-stuffing attack because it has higher impact on sensitive customer data.
   • DAddress both threats simultaneously with equal resources.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A threat intelligence team needs to present to executives the geographic distribution of attack sources targeting the company's infrastructure. Which visualization is most effective for this purpose?

   • AA heat map on a world map showing the intensity of attacks by country.
   • BA pie chart showing the percentage of attacks per country.
   • CA bar chart listing the top 10 countries by number of attacks.
   • DA line chart showing the number of attacks over time.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is an Indicator of Compromise (IoC)?

   • AA security control implemented to prevent attacks
   • BA vulnerability in a software application
   • CA piece of evidence that suggests a system has been compromised
   • DA type of malware that infects a system
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A software development team is building a new customer-facing web application. The security team wants to integrate threat modeling into the development lifecycle. The team has limited time and resources. Which approach is most effective?

   • AConduct a lightweight threat modeling session during the design phase, focusing on the most critical components and data flows.
   • BSkip threat modeling and rely on penetration testing after deployment.
   • CWait until the application is fully developed and then perform a thorough threat model.
   • DUse a generic threat model template for all applications to save time.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What are the two primary factors considered when assessing risk in threat intelligence?

   • ASeverity and urgency
   • BLikelihood and impact
   • CCost and benefit
   • DThreat and vulnerability
   Reveal Solution Discussion Select an answer first