5.6 Explain Threat Intel Sharing with External Security Services XSOAR-ENGINEER Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is a primary benefit of sharing threat intelligence with external security services?

   • AIt ensures compliance with all data protection regulations automatically.
   • BIt guarantees that all threats are automatically blocked without further analysis.
   • CIt enables organizations to benefit from a broader view of threats observed across multiple environments.
   • DIt eliminates the need for internal security monitoring and incident response.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which factor should be considered when sharing threat intel with external services?

   • AThe external service's marketing budget
   • BThe color of the external service's logo
   • CThe number of employees at the external service
   • DData sensitivity and classification
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A threat intel team in a large enterprise wants to share indicators with an external security service. The service requires indicators to be in STIX 2.1 format. The team's XSOAR instance stores indicators with custom fields. What should the team do to ensure the indicators are shared correctly?

   • AManually create STIX 2.1 JSON files for each indicator.
   • BUse a CSV export and hope the external service accepts it.
   • CShare the indicators in the custom format and let the external service handle the conversion.
   • DUse XSOAR's data normalization and STIX 2.1 integration to map custom fields to standard STIX properties.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the role of XSOAR's integration layer in threat intel sharing?

   • AIt stores all threat intel in a central database for manual review.
   • BIt translates threat intel into a format compatible with the external service.
   • CIt replaces the need for external security services entirely.
   • DIt provides a graphical interface for users to manually enter threat intel.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which protocol is commonly used to share threat intelligence with external services?

   • ASMTP
   • BSTIX/TAXII
   • CSNMP
   • DFTP
   Reveal Solution Discussion Select an answer first