Leveraging Predictive and Proactive Threat Intelligence TIE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a typical activity in proactive threat hunting?

   • AWaiting for the next scheduled vulnerability scan to identify weaknesses
   • BDeveloping hypotheses based on threat intelligence and searching for evidence of those hypotheses
   • CReviewing incident reports from other organizations
   • DUpdating firewall rules based on known attack patterns
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is an Indicator of Compromise (IoC)?

   • AA security control designed to prevent unauthorized access
   • BA tool used to automate incident response
   • CA type of vulnerability that can be exploited by attackers
   • DA piece of forensic data that suggests a system may have been compromised
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A large e-commerce company wants to anticipate which of its products might be targeted by credit card skimming attacks based on past attack patterns and customer behavior data. The security team has access to historical attack data and machine learning tools. Which approach best uses predictive analytics to anticipate this threat?

   • AWait for a new skimming campaign to be reported by industry partners before taking action.
   • BDeploy additional web application firewalls to all product pages equally.
   • CTrain a machine learning model on historical skimming attack data to identify product categories and customer segments at higher risk.
   • DManually review all past skimming incidents and create a list of affected products for immediate patching.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which activity best exemplifies proactive threat intelligence?

   • ASearching for signs of a known threat actor's tactics in the network before an attack occurs
   • BAnalyzing logs after a breach to determine the attack vector
   • CUpdating antivirus signatures after a new malware is discovered
   • DWaiting for the next scheduled vulnerability scan to identify weaknesses
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A small business wants to implement a proactive defense strategy but has a very limited budget. The owner is concerned about targeted attacks from a known cybercriminal group. Which proactive defense strategy is most cost-effective for this business?

   • APurchase an expensive commercial threat intelligence platform with automated feeds.
   • BDeploy a large-scale honeypot infrastructure to deceive the group.
   • CHire a full-time threat hunter to proactively search for the group's activities.
   • DJoin a local threat intelligence sharing group to receive warnings about the group's tactics and indicators.
   Reveal Solution Discussion Select an answer first