The Threat Intelligence Generation Process TIE Practice Questions (Page 9)

Questions 41–42

1. 41expert · hard

   A threat intelligence team has been collecting data from a variety of sources and producing reports. The team notices that the reports are not being used by the incident response team, who prefer to get their threat information from a commercial feed. The team wants to increase the adoption of their intelligence products. What is the best approach?

   • AStop producing reports and rely on the commercial feed.
   • BSend the reports to the IR team's manager and require them to read them.
   • CEngage with the incident response team to understand their workflow and integrate the intelligence products into their existing tools and processes.
   • DMake the reports more detailed and technical so the IR team will find them useful.
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   What is the primary output of the intelligence production stage?

   • AFinished intelligence products such as reports and alerts
   • BFeedback from stakeholders
   • CNormalized datasets ready for analysis
   • DRaw logs from multiple sources
   Reveal Solution Discussion Select an answer first