How does threat intelligence primarily contribute to the risk assessment phase of risk management?

By providing data on the likelihood and potential impact of threats

By automatically implementing security controls

By guaranteeing that all risks are eliminated

By eliminating the need for vulnerability scanning

A bank has a risk management framework that includes a risk register. Threat intelligence feeds indicate a new phishing campaign targeting bank customers. How should the bank update its risk register?

Wait until the campaign is confirmed to have affected the bank before updating the register.

Add a new risk entry for the phishing campaign and assign a risk score based on the intelligence.

Update the risk score of an existing entry for 'phishing' without adding details.

Ignore the campaign because it targets customers, not the bank's internal systems.

What is the purpose of the feedback loop in a continuous monitoring process that uses threat intelligence?

To automatically block all malicious IP addresses without human review

To eliminate the need for risk treatment decisions

To use lessons learned from incidents and new intelligence to improve future risk assessments

To ensure that threat intelligence is only reviewed annually

A university is conducting a risk assessment for its research data. Threat intelligence indicates that academic institutions are increasingly targeted by state-sponsored actors seeking intellectual property. How should this intelligence be used in the risk assessment?

Decrease the likelihood rating because the university has not been targeted before.

Increase the likelihood rating for threats targeting research data and prioritize mitigation controls.

Use the intelligence only to update the impact rating, not the likelihood.

Keep the risk score the same because the intelligence is about other institutions.

In a continuous monitoring process, what is the primary role of threat intelligence?

To provide up-to-date information that triggers reassessment of risks

To eliminate the need for human security analysts

To replace the need for regular vulnerability scans

To automatically patch all vulnerabilities

EC-CouncilThreat Intelligence Essentials

Domain 2Objective 5

Integrating Threat Intelligence with Risk Management TIE Practice Questions (Page 3)

Part of the Types of Threat Intelligence domain, which makes up ~11% of our current practice bank.

43questions here

9free pages

5concepts

Questions 11–15

11foundation · easy
How does threat intelligence primarily contribute to the risk assessment phase of risk management?
Select an answer first
12application · medium
A bank has a risk management framework that includes a risk register. Threat intelligence feeds indicate a new phishing campaign targeting bank customers. How should the bank update its risk register?
Select an answer first
13foundation · easy
What is the purpose of the feedback loop in a continuous monitoring process that uses threat intelligence?
Select an answer first
14application · medium
A university is conducting a risk assessment for its research data. Threat intelligence indicates that academic institutions are increasingly targeted by state-sponsored actors seeking intellectual property. How should this intelligence be used in the risk assessment?
Select an answer first
15foundation · easy
In a continuous monitoring process, what is the primary role of threat intelligence?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to TIE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “TIE” is a trademark of its owner, used for identification only.