Sharing Intelligence GCTI Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Why is trust a critical element in effective intelligence sharing?

   • ATrust allows organizations to share all information without any restrictions
   • BTrust encourages participants to share sensitive information without fear of misuse
   • CTrust ensures that shared intelligence is always accurate and complete
   • DTrust eliminates the need for legal agreements in sharing arrangements
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which of the following is a legal consideration that can affect cyber threat intelligence sharing?

   • AThe color of the threat intelligence report
   • BThe number of indicators in the report
   • CThe privacy and data protection laws of the jurisdictions involved
   • DThe format of the intelligence file
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company receives a MISP event containing a list of malicious IP addresses and file hashes. The SOC wants to use this intelligence to block traffic and detect malware. What is the most effective way to operationalize this data?

   • AOnly review the event for context and do not take immediate action.
   • BAutomatically push the indicators to the firewall and EDR via MISP's export and integration features.
   • CStore the MISP event in a ticketing system for future reference.
   • DManually add the IPs to the firewall blocklist and the hashes to the EDR's IOC list.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   Two organizations in a public-private partnership want to share threat intelligence but have different legal constraints regarding data sharing. What is the best way to establish a trusted sharing relationship?

   • ASign a formal information sharing agreement that defines data handling, permitted uses, and liability limitations.
   • BHave each organization's legal team review every indicator before sharing.
   • COnly share data that is already public to avoid legal issues.
   • DShare data informally through personal contacts without any written agreement.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company is considering sharing its threat intelligence with a competitor through a trusted intermediary. The company's leadership is concerned about losing competitive advantage. What is the key principle that makes sharing beneficial despite this concern?

   • ASharing intelligence is required by law in all industries.
   • BSharing intelligence guarantees that the company will not be attacked.
   • CSharing intelligence allows the company to access the competitor's proprietary data.
   • DShared intelligence improves collective defense, reducing the overall threat landscape for all participants.
   Reveal Solution Discussion Select an answer first