Understanding the Different Types of Threat Intelligence TIE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which type of threat intelligence is most directly used by security operations teams to inform incident response decisions?

   • ATactical threat intelligence
   • BStrategic threat intelligence
   • COperational threat intelligence
   • DTechnical threat intelligence
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following is an example of technical threat intelligence?

   • AA list of malicious IP addresses, domains, and file hashes
   • BA report on the motivations of a state-sponsored threat actor
   • CA description of the phishing technique used in a recent campaign
   • DAn alert about an ongoing distributed denial-of-service attack
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   How is technical threat intelligence most commonly used in an organization?

   • ATo guide executive decisions on security budget allocation
   • BTo feed indicators into security tools for automated detection and blocking
   • CTo develop training programs that teach employees about phishing techniques
   • DTo provide situational awareness during a live incident response
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A large enterprise is creating a threat intelligence program. The CISO wants a quarterly report on emerging cyber threats and their potential impact on the business, while the SOC manager wants real-time feeds of malicious IPs and domains. Which two types of threat intelligence should the program include to satisfy both requirements?

   • ATactical and operational threat intelligence
   • BStrategic and operational threat intelligence
   • CStrategic and technical threat intelligence
   • DTactical and technical threat intelligence
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the primary role of tactical threat intelligence in an organization?

   • ATo provide executive summaries of the overall threat landscape for board-level reporting.
   • BTo supply real-time indicators of compromise for immediate blocking in security tools.
   • CTo identify attacker methodologies and TTPs so defenders can anticipate and counter similar attacks.
   • DTo deliver detailed reports on a specific attack campaign to guide incident response actions.
   Reveal Solution Discussion Select an answer first