Importance of Information Sharing Initiatives TIE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How does sharing threat intelligence contribute to faster incident response?

   • ABy enabling organizations to identify indicators of compromise and threat patterns more quickly
   • BBy allowing organizations to share the same security analysts
   • CBy automatically blocking all malicious IP addresses without human review
   • DBy providing pre-written incident reports that can be submitted directly to regulators
   Reveal Solution Discussion Select an answer first
2. 7application · easy

   A small software company wants to participate in a threat intelligence sharing initiative but lacks the resources to maintain a dedicated platform. Which option provides the most practical way to start sharing and receiving intelligence?

   • ABuild a custom STIX/TAXII server to control the entire sharing process.
   • BShare intelligence only through public social media channels.
   • CWait until the company has enough budget to implement a full threat intelligence platform.
   • DJoin an existing ISAC or CERT and use their portal and TLP-based sharing mechanisms.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which type of organization is specifically established to collect and disseminate sector-specific threat intelligence?

   • ACloud Service Provider (CSP)
   • BSecurity Software Vendor
   • CInternet Service Provider (ISP)
   • DInformation Sharing and Analysis Center (ISAC)
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary purpose of information sharing initiatives in cybersecurity?

   • ATo replace the need for individual organizations to perform their own threat analysis
   • BTo provide a legal framework for prosecuting cybercriminals across jurisdictions
   • CTo enable collective defense by exchanging threat intelligence among trusted parties
   • DTo standardize all security products so they use identical detection rules
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A global financial services firm is part of a financial ISAC and also works with a national CERT. The firm has identified a sophisticated phishing campaign targeting its customers. The firm's legal department is concerned about sharing customer-related data under GDPR. The firm wants to warn other organizations without exposing personal data. What is the most appropriate way to share this intelligence?

   • ARefrain from sharing any information until the legal team completes a full GDPR impact assessment.
   • BShare the full email headers and recipient addresses with the CERT to aid in tracing the attackers.
   • CShare the phishing URLs and email subject lines with the ISAC using TLP:AMBER, while ensuring no customer personal data is included.
   • DPublish the phishing campaign details on the firm's public website to alert customers.
   Reveal Solution Discussion Select an answer first