Integrating Threat Intelligence with Risk Management TIE Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A healthcare provider is integrating threat intelligence into its risk management process. The provider uses a quantitative risk assessment methodology. Threat intelligence reveals a new ransomware strain that specifically targets healthcare organizations and has a high success rate. The provider's current risk assessment for its patient records system does not account for this threat. What should the provider do first?

   • AUpdate the threat profile in the risk identification phase to include the new ransomware strain.
   • BRecalculate the ALE using the new likelihood and impact data from the threat intelligence.
   • CImmediately implement ransomware-specific controls without updating the risk assessment.
   • DAccept the risk because the provider has backup systems in place.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A government agency needs to justify its cybersecurity budget to lawmakers. They have threat intelligence showing a 30% increase in phishing attacks targeting government employees. Which risk assessment methodology would best support a budget request?

   • AHybrid, using qualitative for impact and quantitative for likelihood.
   • BQuantitative, using the increased likelihood to calculate expected annual loss from phishing incidents.
   • CQualitative, rating phishing as 'high risk' based on the threat intelligence.
   • DCompliance-based, focusing on meeting regulatory requirements rather than risk.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which risk assessment methodology uses numerical values, such as monetary amounts and probabilities, to calculate risk?

   • AQuantitative
   • BHeuristic
   • CQualitative
   • DHybrid
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A logistics company has a risk management team that meets monthly. They receive threat intelligence feeds about new malware campaigns. How should the team incorporate this intelligence into their risk management process?

   • AFile the intelligence reports for future reference without immediate action.
   • BShare the intelligence with the IT team only and let them decide what to do.
   • CReview the intelligence at the monthly meeting and update risk scores for affected assets.
   • DWait for a major incident before considering the intelligence.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A multinational corporation operates a legacy system that is critical to operations but cannot be patched for a newly discovered vulnerability. Threat intelligence shows that the vulnerability is being exploited by a sophisticated adversary group. The company has a high risk tolerance for operational downtime but a low tolerance for data breaches. Which risk treatment option best balances these constraints?

   • AAvoid the risk by immediately shutting down the legacy system.
   • BAccept the risk because the system is critical and cannot be taken offline.
   • CMitigate by implementing strict network segmentation and monitoring to reduce the likelihood of exploitation.
   • DTransfer the risk by purchasing a cyber insurance policy that covers data breaches.
   Reveal Solution Discussion Select an answer first