Leveraging Predictive and Proactive Threat Intelligence TIE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary goal of threat modeling in the context of predictive and proactive intelligence?

   • ATo collect and store threat intelligence feeds in a central repository
   • BTo identify potential attack vectors and prioritize defenses
   • CTo automate the deployment of security patches across the network
   • DTo create a detailed incident response plan for after a breach
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A mid-sized company has no evidence of a current breach, but the threat intelligence team wants to identify potential attack vectors before they are exploited. They decide to actively search for weaknesses and adversary behaviors that could be used against the organization. Which activity best exemplifies proactive threat intelligence?

   • AConducting a post-incident review of a recent malware infection to improve future response.
   • BWaiting for the next threat intelligence feed update to see if any new malware signatures match the environment.
   • CReviewing firewall logs from the past month to identify any blocked malicious IP addresses.
   • DScanning the external attack surface for exposed services and comparing them to known adversary tactics.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A healthcare organization is updating its threat model. Predictive intelligence indicates that ransomware groups are increasingly targeting healthcare providers via remote desktop protocol (RDP) exposed to the internet. The organization wants to prioritize defenses. Which action is most aligned with threat modeling using this intelligence?

   • ATreat all assets equally and apply the same security controls to every system.
   • BWait for a ransomware incident to occur before making any changes.
   • CIdentify RDP-exposed systems as high-risk assets and implement multi-factor authentication and network-level restrictions.
   • DDisable RDP entirely on all systems, including those that require it for legitimate remote administration.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the main characteristic of proactive threat intelligence?

   • ASharing indicators with partners only after an attack occurs
   • BActively seeking out potential threats before they materialize
   • CCollecting threat data from open-source feeds without analysis
   • DResponding to incidents after they have been detected
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the role of predictive analytics in cybersecurity?

   • ATo analyze past incidents to determine the root cause
   • BTo collect and store large volumes of security data
   • CTo use machine learning and statistical models to anticipate cyber threats and their potential impact
   • DTo automate the response to detected threats
   Reveal Solution Discussion Select an answer first