Importance of Information Sharing Initiatives TIE Practice Questions (Page 8)

Questions 36–40

1. 36expert · medium

   A government agency wants to share threat intelligence with private sector partners, but the agency is concerned about the sensitivity of the information and the potential for leaks. The agency also wants to ensure that the information is used only for defensive purposes. Which approach best addresses these concerns?

   • AUse TLP:AMBER or TLP:RED designations and require partners to sign non-disclosure agreements.
   • BShare the information publicly to ensure transparency and avoid any appearance of secrecy.
   • CProvide the information only through verbal briefings and prohibit any written records.
   • DShare the information only with partners that have government security clearances.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   What is a direct impact of information sharing on incident response capabilities?

   • AIt guarantees that all incidents are prevented before they occur
   • BIt shortens the time needed to detect and contain threats
   • CIt reduces the need for security monitoring tools
   • DIt removes the need for post-incident analysis
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A cybersecurity company discovers a zero-day vulnerability in a popular email server product. The company is a member of a CERT and wants to share the information to help protect other organizations. However, the company is concerned about being sued by the vendor if it discloses the vulnerability before a patch is available. What is the most legally prudent and ethical approach?

   • AKeep the vulnerability secret and not share it with anyone to avoid any legal risk.
   • BCoordinate with the vendor and the CERT to establish a disclosure timeline that allows for a patch to be developed.
   • CPublish the vulnerability details immediately to the public to force the vendor to act.
   • DShare the vulnerability only with the vendor and not with the CERT to avoid any legal issues.
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A city's municipal government wants to improve its cyber resilience by sharing threat information with local businesses and other government agencies. Which stakeholder is best positioned to coordinate this cross-sector sharing effort?

   • AA regional Computer Emergency Response Team (CERT) or Computer Security Incident Response Team (CSIRT).
   • BA single private company that volunteers to host a mailing list.
   • CA local newspaper that can publish alerts to the public.
   • DA local internet service provider (ISP) that provides connectivity to the city.
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   Which pair of standards is commonly used to structure and exchange threat intelligence in a machine-readable format?

   • ASSL and TLS
   • BHTML and XML
   • CSTIX and TAXII
   • DTCP and UDP
   Reveal Solution Discussion Select an answer first