Integrating Threat Intelligence with Risk Management TIE Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A manufacturing company uses a qualitative risk matrix (likelihood vs. impact) to prioritize risks. Threat intelligence indicates that a specific industrial control system (ICS) vulnerability is now being exploited in the wild. How should the company adjust the risk score for the ICS asset?

   • AIncrease the impact rating from 'moderate' to 'high' because the vulnerability is being exploited.
   • BDecrease the likelihood rating because the intelligence is from an external source.
   • CKeep the risk score unchanged because the vulnerability existed before the intelligence report.
   • DIncrease the likelihood rating from 'unlikely' to 'possible' and keep the impact rating unchanged.
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A security team is designing a continuous monitoring process for a cloud-based infrastructure. They want to use threat intelligence to update risk scores for their assets. The team has a limited budget and must choose between two approaches: (1) automated threat intelligence ingestion with manual risk score updates, or (2) manual threat intelligence review with automated risk score updates. Which approach is more effective for a continuous monitoring process?

   • AManual threat intelligence review with automated risk score updates.
   • BBoth approaches are equally effective because they both involve manual and automated components.
   • CNeither approach is suitable for continuous monitoring; both must be fully automated.
   • DAutomated threat intelligence ingestion with manual risk score updates.
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   In the risk management process, which activity directly uses threat intelligence to identify new or changing risks?

   • ARisk communication
   • BRisk mitigation
   • CRisk identification
   • DRisk acceptance
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   An insurance company is evaluating the risk of a new online claims portal. They have threat intelligence about credential stuffing attacks on similar portals. Which risk assessment approach would best quantify the potential losses?

   • AHybrid, using qualitative for likelihood and quantitative for impact.
   • BCompliance-based, checking if the portal meets industry standards.
   • CQuantitative, using the attack frequency from threat intelligence to estimate expected losses.
   • DQualitative, rating the risk as 'high' based on the threat intelligence.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A manufacturing company discovers from threat intelligence that a specific industrial control system (ICS) protocol used in its legacy production line has a known vulnerability being actively exploited in the wild. The vendor has not released a patch and will not support the system for another two years. The company cannot afford to replace the production line immediately. Which risk treatment option is most appropriate in this scenario?

   • AMitigate by implementing network segmentation and enhanced monitoring around the ICS network.
   • BAvoid the risk by immediately shutting down the production line until the system is replaced.
   • CAccept the risk because the system is legacy and the company has operated it for years without an incident.
   • DTransfer the risk by purchasing a cyber insurance policy that covers ICS incidents.
   Reveal Solution Discussion Select an answer first