Threat Hunting Methodologies and Frameworks TIE Practice Questions (Page 10)

Questions 46–50

1. 46foundation · easy

   Which standard is used to transport threat intelligence in a machine-readable format?

   • AMITRE ATT&CK
   • BTAXII
   • CSTIX
   • DDiamond Model
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   Which HMM level represents an organization that has no formal threat hunting process?

   • AInitial
   • BAdaptive
   • CRepeatable
   • DLeading
   Reveal Solution Discussion Select an answer first
4. 48foundation · easy

   Which statement best contrasts threat hunting with reactive security measures?

   • AThreat hunting is performed only after a breach is confirmed, while reactive measures are preventive
   • BThreat hunting focuses on patching vulnerabilities, while reactive measures focus on detection
   • CThreat hunting is initiated by the analyst, while reactive measures are triggered by alerts or events
   • DThreat hunting relies solely on automated tools, while reactive measures require human analysis
   Reveal Solution Discussion Select an answer first
5. 49foundation · easy

   What is the primary purpose of a threat hunting framework?

   • ATo provide a list of all known malware signatures
   • BTo provide a structured approach for conducting and improving hunting activities
   • CTo replace the need for security tools
   • DTo automatically detect all threats without human intervention
   Reveal Solution Discussion Select an answer first
6. 50foundation · easy

   In the Diamond Model, what does the 'capability' vertex represent?

   • AThe tools, techniques, or malware used by the adversary
   • BThe organization or person being attacked
   • CThe network infrastructure used to launch the attack
   • DThe motivation behind the attack
   Reveal Solution Discussion Select an answer first