Sharing Intelligence GCTI Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A healthcare organization wants to share threat intelligence with other hospitals and also with government agencies. They need a model that supports both industry-specific sharing and public-sector collaboration. Which sharing model best fits this requirement?

   • ACreate a private sharing group with only local hospitals.
   • BJoin a healthcare ISAC and participate in its public-private partnership programs.
   • CRely on social media to share indicators with other hospitals.
   • DUse only a public threat intelligence feed.
   Reveal Solution Discussion Select an answer first
2. 37expert · medium

   A company is considering joining multiple intelligence sharing communities, including an ISAC, an ISAO, and a local threat sharing group. The company has limited resources to manage these relationships. What is the best strategy to maximize value while minimizing resource drain?

   • AJoin the ISAC only and ignore all other communities.
   • BJoin all available communities to maximize intelligence coverage.
   • CJoin only the local threat sharing group because it is free.
   • DJoin the communities that align most closely with the company's sector and threat profile, and automate ingestion where possible.
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A small manufacturing company wants to share threat intelligence with peers but cannot afford to join a formal ISAC. Which alternative model would best meet their needs?

   • ARely solely on open-source threat feeds.
   • BCreate a private intelligence sharing platform from scratch.
   • CJoin an Information Sharing and Analysis Organization (ISAO) that is sector-agnostic and has low-cost membership options.
   • DWait for a major incident before seeking sharing partners.
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   Two companies in the same sector want to share threat intelligence but are competitors. They are concerned about antitrust implications and want to share only non-competitive information. What is the best way to structure their sharing?

   • AShare only through informal personal contacts.
   • BJoin a sector ISAC that has established legal frameworks and guidelines for sharing.
   • CAvoid sharing altogether to eliminate risk.
   • DShare all information freely without any restrictions.
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   A multinational company operates in several countries with different data protection laws. They want to share threat intelligence with a global ISAO, but are concerned about cross-border data transfers. The ISAO is based in a country with different privacy regulations. What is the most appropriate approach?

   • AOnly share data with organizations in the same country.
   • BRefuse to share any data internationally.
   • CAssess the legal basis for cross-border data sharing and implement appropriate safeguards, such as pseudonymization and contractual clauses.
   • DShare all data without considering local laws.
   Reveal Solution Discussion Select an answer first