Threat Prioritization, Actor Profiling, and Attribution TIE Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which structured framework is specifically designed to assess the severity of a software vulnerability by scoring its exploitability and impact characteristics?

   • ACVSS (Common Vulnerability Scoring System)
   • BMITRE ATT&CK
   • CCyber Kill Chain
   • DDiamond Model
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is a key requirement for attribution reporting to stakeholders?

   • AAvoiding any mention of uncertainty
   • BUsing highly technical jargon to demonstrate expertise
   • CPresenting evidence and reasoning in a clear, understandable manner
   • DIncluding every raw log entry collected during the investigation
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A multinational corporation is prioritizing threats across its subsidiaries. One subsidiary is a research lab that holds valuable intellectual property, another is a retail chain with a large customer database, and a third is a manufacturing plant with operational technology (OT) systems. The threat intelligence team has limited resources and must focus on the highest-risk threats. Which approach should the team take?

   • APrioritize the research lab because IP theft is the most damaging to the company's future
   • BPrioritize the retail chain because customer data breaches have high regulatory fines
   • CPrioritize the manufacturing plant because OT systems can cause physical damage
   • DConduct a risk assessment for each subsidiary and prioritize based on the combination of asset criticality and threat likelihood
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   When assessing asset criticality for threat prioritization, which factor is most directly considered?

   • AThe asset's IP address range
   • BThe asset's operating system version
   • CThe asset's physical location
   • DThe asset's role in supporting business operations
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the primary goal of threat intelligence triage?

   • ATo filter and categorize incoming threat data to identify items that require deeper analysis
   • BTo permanently block all indicators of compromise
   • CTo attribute attacks to specific threat actors
   • DTo write detailed reports for executive stakeholders
   Reveal Solution Discussion Select an answer first