During analysis of a threat intelligence report, an analyst identifies a list of IP addresses and domain names associated with a malware campaign. What type of information is this?

Indicators of compromise (IOCs)

An organization must decide which of two threats to address first. Threat A has a high likelihood of occurring but low impact. Threat B has a low likelihood but high impact. According to risk prioritization principles, which threat should be prioritized first?

The threat with the higher risk score, calculated from both likelihood and impact

Threat B, because its impact is high

Both threats should be addressed simultaneously

Threat A, because it is more likely to occur

F5Certified Solution Expert, Security

Domain 1Objective 1

1.01 Analyze External Threat Research to Determine the Potential Impact to an Organization 401 Practice Questions (Page 5)

Part of the THREAT ANALYSIS domain, which makes up ~11% of our current practice bank. F5 does not publish an official question count, but from its 105-minute exam (~40–70 total, ~4–8 in this domain), expect 2–4 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

4concepts

Questions 21–22

21foundation · easy
During analysis of a threat intelligence report, an analyst identifies a list of IP addresses and domain names associated with a malware campaign. What type of information is this?
Select an answer first
22foundation · easy
An organization must decide which of two threats to address first. Threat A has a high likelihood of occurring but low impact. Threat B has a low likelihood but high impact. According to risk prioritization principles, which threat should be prioritized first?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to 401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “401” is a trademark of its owner, used for identification only.

1.01 Analyze External Threat Research to Determine the Potential Impact to an Organization 401 Practice Questions (Page 5)

Questions 21–22

During analysis of a threat intelligence report, an analyst identifies a list of IP addresses and domain names associated with a malware campaign. What type of information is this?

An organization must decide which of two threats to address first. Threat A has a high likelihood of occurring but low impact. Threat B has a low likelihood but high impact. According to risk prioritization principles, which threat should be prioritized first?

Keep studying — THREAT ANALYSIS