Understanding the Different Types of Threat Intelligence TIE Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   During a major incident, the incident response team has identified the attacker's command-and-control infrastructure and the specific malware used. The team needs to decide whether to block the infrastructure immediately or wait to gather more intelligence. They have access to both operational and technical threat intelligence. What is the most effective approach?

   • AWait for more strategic intelligence before acting
   • BRely only on tactical intelligence to guide the response
   • CUse operational intelligence to understand the campaign and technical intelligence to block the indicators
   • DBlock the indicators immediately without further analysis
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which type of threat intelligence focuses on the tactics, techniques, and procedures (TTPs) used by threat actors?

   • AStrategic threat intelligence
   • BOperational threat intelligence
   • CTactical threat intelligence
   • DTechnical threat intelligence
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following best compares operational and technical threat intelligence?

   • AOperational intelligence focuses on TTPs, while technical intelligence focuses on long-term trends.
   • BOperational intelligence is consumed by executives, while technical intelligence is consumed by incident responders.
   • COperational intelligence provides context about specific attacks, while technical intelligence provides indicators for detection.
   • DOperational intelligence is always real-time, while technical intelligence is always historical.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which statement correctly differentiates strategic and tactical threat intelligence?

   • AStrategic intelligence is machine-readable, while tactical intelligence is human-readable.
   • BStrategic intelligence provides specific indicators of compromise, while tactical intelligence provides real-time alerts.
   • CStrategic intelligence is consumed by executives for long-term planning, while tactical intelligence is used by security analysts to understand attacker TTPs.
   • DStrategic intelligence is used for incident response, while tactical intelligence is used for board reporting.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which statement best defines strategic threat intelligence?

   • AIt provides high-level analysis of threats, risks, and trends to support executive decision-making.
   • BIt provides real-time alerts about ongoing attacks to guide immediate incident response actions.
   • CIt supplies specific indicators of compromise, such as malicious IP addresses and file hashes, for immediate blocking.
   • DIt details the specific tactics, techniques, and procedures used by attackers in a particular campaign.
   Reveal Solution Discussion Select an answer first