312-39 · Question #89
A SOC team is implementing a threat intelligence strategy to proactively defend against threats. The CISO emphasizes that collecting data is not enough; the team must allocate personnel, tools, and…
The correct answer is B. Tasking. Tasking is the CTI process step where defined intelligence requirements are translated into concrete collection assignments. It answers “who does what, using which sources, and on what schedule.” In practice, tasking allocates analysts, tools, and time to monitor selected…
Question
A SOC team is implementing a threat intelligence strategy to proactively defend against threats. The CISO emphasizes that collecting data is not enough; the team must allocate personnel, tools, and time to gather intelligence aligned with key concerns (fraud, phishing, nation-state threats). They must determine who will collect intelligence, which sources will be monitored, and how frequently collection occurs. What is this process called?
Options
- AResources
- BTasking
- CHigh-level requirements
- DPrioritization
How the community answered
(16 responses)- A6% (1)
- B88% (14)
- C6% (1)
Explanation
Tasking is the CTI process step where defined intelligence requirements are translated into concrete collection assignments. It answers “who does what, using which sources, and on what schedule.” In practice, tasking allocates analysts, tools, and time to monitor selected feeds, communities, reporting channels, telemetry sources, and partner information based on the organization’s priorities. This ensures intelligence collection is deliberate and aligned with business risks rather than random or purely volume-driven. “High-level requirements” define what intelligence is needed availability but not the act of assignment and execution. The scenario explicitly describes assigning responsibility and frequency of monitoring, which is the operationalization of intelligence requirements-tasking. From a SOC perspective, proper tasking improves intelligence relevance, reduces wasted effort, and ensures timely delivery of actionable insights that feed into detections, investigations, and strategic planning.
Topics
Community Discussion
No community discussion yet for this question.