Intelligence Fundamentals GCTI Practice Questions (Page 3)

Questions 11–15

1. 11expert · medium

   A CTI team has been producing monthly intelligence reports for the security leadership. The reports are well-received, but the team notices that the same types of threats are being reported each month without any change in the organization's security posture. The team suspects that the reports are not being used to make decisions. Which action would BEST address this issue?

   • AStop producing reports until the team can identify new threats.
   • BAdd more technical details to the reports to make them more comprehensive.
   • CConduct a feedback session with the report consumers to understand how they use the intelligence and what decisions it supports.
   • DIncrease the frequency of the reports to provide more timely intelligence.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary role of intelligence requirements in the intelligence process?

   • ATo focus collection and analysis on the information that decision-makers actually need
   • BTo replace the need for analyst judgment during analysis
   • CTo provide a template for writing intelligence reports
   • DTo ensure that all available data is collected regardless of relevance
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary purpose of cyber threat intelligence as a discipline?

   • ATo automatically block all malicious IP addresses and domains in real time
   • BTo collect as much data as possible about potential adversaries
   • CTo provide context that enables an organization to make informed decisions about threats and defenses
   • DTo replace the need for traditional security controls such as firewalls and antivirus
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which stage of the intelligence lifecycle involves turning processed data into judgments and assessments?

   • AAnalysis
   • BProcessing
   • CDissemination
   • DCollection
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A threat intelligence team is reviewing its intelligence cycle after a major incident. The team collected a large amount of data but failed to identify the attack in time. The post-incident review reveals that the team spent too much time on collection and not enough on analysis and dissemination. What is the most important adjustment to the intelligence cycle?

   • AIncrease the amount of data collected to ensure no indicator is missed
   • BReallocate resources to prioritize analysis and timely dissemination over exhaustive collection
   • CEliminate the feedback stage to save time
   • DFocus only on the collection stage and automate it to save time
   Reveal Solution Discussion Select an answer first