Threat Intelligence and Essential Terminology TIE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following best defines a threat actor in threat intelligence?

   • AA security analyst who investigates incidents
   • BA software tool used to automate attacks
   • CA vulnerability that is actively exploited in the wild
   • DAn individual or group that intentionally causes harm to an organization's assets
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which statement best describes the role of threat intelligence in a security operations center (SOC)?

   • AIt replaces the need for human analysts by fully automating incident response
   • BIt ensures compliance with all regulatory requirements without additional controls
   • CIt automatically patches all vulnerable systems in the organization
   • DIt provides context that helps analysts prioritize alerts and investigate potential incidents
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A threat intelligence team wants to incorporate information about attacker behaviors and techniques into their detection strategy. Which source would provide the most structured and comprehensive knowledge of adversary TTPs?

   • AA commercial vulnerability scanner report.
   • BMITRE ATT&CK framework.
   • CInternal firewall logs.
   • DA list of known malware hashes.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A threat intelligence team produces a weekly report that is distributed to both the SOC and executive leadership. The SOC finds the report too high-level, while executives find it too technical. What is the best way to address this feedback?

   • AProduce a single report that is a compromise between technical and strategic detail.
   • BAsk the SOC to explain the technical details to the executives in a meeting.
   • CCreate two tailored reports: one with technical IoCs for the SOC and one with strategic summaries for executives.
   • DStop distributing the report to executives because they do not understand it.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   During a threat intelligence review, an analyst finds a vulnerability in a web application that the organization uses. The analyst also knows that a known threat actor has been exploiting this vulnerability in the wild. The organization has not yet patched the application. Which statement correctly describes the relationship between these elements?

   • AThe vulnerability is a weakness, the threat actor is the threat, and the likelihood of exploitation combined with impact represents the risk.
   • BThe threat actor is the vulnerability, and the exploit is the risk.
   • CThe vulnerability is the risk, and the threat actor is the threat.
   • DThe exploit is the threat, and the vulnerability is the risk.
   Reveal Solution Discussion Select an answer first