Leveraging Predictive and Proactive Threat Intelligence TIE Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A security operations center (SOC) wants to move from a reactive stance to a proactive one. The team plans to actively search for threats that may already be present but undetected, using external intelligence about emerging attack techniques. Which initiative best embodies proactive threat intelligence?

   • AEstablish a threat hunting team that uses external intelligence to develop hypotheses and search for signs of those techniques in the environment.
   • BSchedule monthly penetration tests against production systems.
   • CPurchase additional threat intelligence feeds and store them for future reference.
   • DIncrease the number of alerts monitored by the SIEM to catch more incidents.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   How does threat intelligence sharing contribute to proactive defense?

   • ABy replacing the need for internal security monitoring
   • BBy providing a legal framework for prosecuting attackers
   • CBy enabling organizations to learn from others' experiences and prepare for emerging threats
   • DBy automatically patching vulnerabilities in all member systems
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A software company is threat modeling its new cloud-based product. Historical data shows that attackers frequently exploit misconfigured cloud storage. The company wants to prioritize defenses against this likely vector. Which threat modeling approach best uses this predictive information?

   • ATreat all attack vectors equally and implement a standard set of controls for each.
   • BFocus only on application-level vulnerabilities because they are more critical.
   • CPrioritize security controls that prevent and detect misconfigured cloud storage, such as automated configuration checks.
   • DWait for a security incident to occur before updating the threat model.
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   A security manager is evaluating whether to invest in predictive threat intelligence tools. The organization has a mature security program but a limited budget. The manager wants to justify the investment by showing how predictive intelligence can reduce the impact of attacks. Which argument is most compelling?

   • APredictive intelligence eliminates the need for other security controls.
   • BPredictive intelligence can forecast likely attack vectors, allowing the organization to prioritize defenses and reduce the likelihood of successful attacks.
   • CPredictive intelligence can guarantee that no attack will succeed.
   • DPredictive intelligence is the only way to detect advanced persistent threats.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   What is the purpose of using deception technologies as a proactive defense strategy?

   • ATo lure attackers into fake systems and gather intelligence about their methods
   • BTo encrypt all data at rest and in transit
   • CTo provide a backup system for critical data
   • DTo automatically block all incoming traffic from unknown sources
   Reveal Solution Discussion Select an answer first