Key Differences Between Intelligence, Information, and Data TIE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which statement best defines intelligence in the context of threat intelligence?

   • AOrganized data that has been sorted and labeled
   • BAnalyzed information that has been interpreted and contextualized to support decision-making
   • CRaw facts and figures collected from various sources
   • DA collection of unverified alerts from security tools
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A threat intelligence analyst is building a daily report for the SOC. The analyst collects raw firewall logs, extracts and sorts the top 10 source IPs, and then correlates these IPs with a threat feed to identify which ones are known malicious. The analyst then writes a recommendation to block those IPs. Which sequence correctly represents the transformation from data to intelligence in this workflow?

   • ARaw logs → sorted list of top IPs → correlated with threat feed → recommendation to block
   • BRaw logs → recommendation to block → sorted list of top IPs → correlated with threat feed
   • CSorted list of top IPs → raw logs → correlated with threat feed → recommendation to block
   • DRaw logs → correlated with threat feed → sorted list of top IPs → recommendation to block
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   In threat intelligence, what is the role of raw threat data such as malware hashes and suspicious IP addresses?

   • AIt serves as the starting point that must be processed and analyzed to become actionable intelligence
   • BIt is already intelligence because it comes from security tools
   • CIt is only useful for legal purposes, not for security decisions
   • DIt is information because it is collected from external sources
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A junior analyst is asked to produce a daily summary of phishing emails received by the organization. The analyst extracts the sender addresses, subject lines, and timestamps from the email gateway and compiles them into a table. The table is then sent to the security team. Which statement best describes the table?

   • AIt is both data and information because it contains raw fields in a structured format.
   • BIt is information because the raw email fields have been organized into a structured format with context.
   • CIt is intelligence because it supports the security team's decision-making.
   • DIt is data because the email fields are still unprocessed facts.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A security team is designing a threat intelligence process. They have a limited budget and must choose between two tools: Tool A automatically enriches raw indicators with context (e.g., geolocation, WHOIS) and Tool B automatically generates reports with recommendations. The team already has a manual process for writing reports. Which tool should they prioritize to improve the transformation from data to intelligence?

   • ATool A, because it can replace the manual reporting process.
   • BTool B, because it can automate the entire intelligence process.
   • CTool A, because enrichment adds context to raw data, which is a necessary step to produce meaningful information and intelligence.
   • DTool B, because reports are the final intelligence product.
   Reveal Solution Discussion Select an answer first