Threat Intelligence Roles, Responsibilities, and Use Cases TIE Practice Questions (Page 7)

Questions 31–33

1. 31foundation · easy

   Which responsibility is most directly associated with the 'action' phase of the threat intelligence lifecycle?

   • AInterviewing stakeholders to determine their intelligence requirements
   • BCollecting malware samples from a sandbox environment
   • CWriting a report that summarizes the tactics, techniques, and procedures of a threat actor
   • DUpdating firewall rules and endpoint detection rules based on intelligence
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   During an active ransomware incident, the incident response team needs to know whether the threat actor has been seen in other organizations and what remediation steps were effective. They request this information from the threat intelligence team. Which use case of threat intelligence is being applied?

   • AVulnerability management
   • BThreat detection
   • CRisk management
   • DIncident response
   Reveal Solution Discussion Select an answer first
3. 33foundation · easy

   In the threat intelligence lifecycle, which responsibility is primarily associated with the 'dissemination' phase?

   • ADelivering tailored intelligence reports to relevant stakeholders in a timely manner
   • BApplying intelligence to block malicious indicators in security tools
   • CCollecting raw data from open, commercial, and internal sources
   • DValidating and enriching raw data to remove false positives
   Reveal Solution Discussion Select an answer first