Legal and Ethical Considerations for Threat Data Collection TIE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   When using threat data obtained from a commercial vendor, what is the primary intellectual property consideration?

   • AThe vendor's data is considered public domain and can be used without restrictions.
   • BYou can redistribute the data freely as long as you cite the vendor.
   • CThe vendor retains ownership of the data, and you must comply with the terms of the license agreement.
   • DYou automatically own any data derived from the vendor's feed.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A security researcher wants to publish a paper on a newly discovered vulnerability. The research involved collecting data from a public dark web forum, which includes usernames and personal messages. The researcher plans to include quotes from the forum in the paper. What is the most ethical approach?

   • AObtain consent from the forum users before publishing.
   • BDo not publish the paper to avoid ethical issues.
   • CPublish the quotes as-is because the forum is public.
   • DAnonymize usernames and paraphrase quotes to prevent identification of individuals.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A university research team plans to deploy honeypots to collect data on attacker behavior. The honeypots will capture network traffic that may include personal data of students. What is the most ethical approach?

   • AObtain written consent from all students before deploying the honeypots.
   • BDeploy the honeypots without disclosure because attackers have no expectation of privacy.
   • COnly collect data from external IP addresses to avoid any personal data.
   • DInform the university's ethics board and obtain approval, and ensure that any personal data captured is minimized and anonymized.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which ethical principle is most directly violated when a threat intelligence analyst collects personal information from a public forum without informing the users that their posts are being used for security research?

   • APrivacy
   • BAccountability
   • CData minimization
   • DConsent
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A security research firm is planning to deploy a network sensor on a public Wi-Fi network to collect traffic for threat intelligence purposes. The sensor will capture packet headers, including source and destination IP addresses, but not payload content. The firm's legal counsel has advised that this may be considered wiretapping under some jurisdictions. What should the firm do to ensure ethical and legal compliance?

   • AAnonymize the IP addresses in real-time before storing the data to avoid any privacy concerns.
   • BProceed with the collection because only packet headers are captured, not the content of communications.
   • CLimit the collection to only traffic from devices that are not associated with individuals, such as IoT devices.
   • DObtain informed consent from all users of the Wi-Fi network by displaying a clear notice and requiring acceptance of a terms-of-service agreement.
   Reveal Solution Discussion Select an answer first