Integrating Threat Intelligence with Risk Management TIE Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A government agency is integrating threat intelligence into its risk management process. The agency uses a hybrid risk assessment methodology and has identified a critical system that processes classified information. Threat intelligence indicates that a nation-state actor is actively targeting similar systems. Which step should the agency take first in the risk management process?

   • AIncorporate the threat intelligence into the risk identification phase to update the threat profile for the critical system.
   • BAccept the risk because the system has been operating without incident for years.
   • CImmediately implement additional security controls without updating the risk assessment.
   • DTransfer the risk to a third-party security provider.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A financial institution is evaluating risk treatment options for a new mobile banking application. Threat intelligence indicates that mobile banking apps are a prime target for banking trojans. The institution has a limited security budget and must choose between investing in additional security controls or purchasing cyber insurance. Which approach best balances risk treatment with the budget constraint?

   • ATransfer the risk by purchasing cyber insurance, since it is cheaper than implementing controls.
   • BAccept the risk because the institution has a strong security team.
   • CMitigate the risk by investing in security controls such as app hardening and anti-tampering, and accept the residual risk.
   • DAvoid the risk by not launching the mobile banking app.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   When applying threat-informed risk scoring, what does threat intelligence primarily adjust?

   • AThe asset's replacement cost
   • BThe security policy's compliance requirements
   • CThe likelihood and impact components of a risk score
   • DThe organization's risk appetite statement
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A retail chain is conducting a risk assessment for its point-of-sale (POS) systems. Threat intelligence indicates that POS malware is a significant threat to the retail sector. The company has limited historical data on cyber incidents. Which risk assessment methodology is most appropriate?

   • AQualitative risk assessment using expert judgment and threat intelligence to rate likelihood and impact.
   • BThreat intelligence-driven assessment that ignores likelihood and impact.
   • CHybrid risk assessment that uses only quantitative data from industry reports.
   • DQuantitative risk assessment using historical incident data to calculate ALE.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A healthcare organization has implemented a continuous monitoring process that ingests threat intelligence feeds. The security team notices that the risk score for a critical patient data system has increased due to a new ransomware campaign. According to the continuous monitoring and feedback loop concept, what should the team do next?

   • AIgnore the increase because the system has never been attacked before.
   • BImmediately implement all available security patches without assessing their impact on operations.
   • CUpdate the risk register with the new score and schedule a review of existing controls.
   • DWait until the next quarterly risk assessment to update the risk register.
   Reveal Solution Discussion Select an answer first