nerdexam
EC-Council

312-50V12 · Question #293

Leverox Solutions hired Arnold, a security professional, for the threat intelligence process. Arnold collected information about specific threats against the organization. From this information, he re

The correct answer is B. Operational threat intelligence. Arnold's collection of contextual information about security events, attacker methodologies, and recommended actions from sources like humans and social media represents operational threat intelligence.

Submitted by daniela_cl· Mar 4, 2026Information Security and Ethical Hacking Overview

Question

Leverox Solutions hired Arnold, a security professional, for the threat intelligence process. Arnold collected information about specific threats against the organization. From this information, he retrieved contextual information about security events and incidents that helped him disclose potential risks and gain insight into attacker methodologies. He collected the information from sources such as humans, social media, and chat rooms as well as from events that resulted in cyberattacks. In this process, he also prepared a report that includes identified malicious activities, recommended courses of action, and warnings for emerging attacks. What is the type of threat intelligence collected by Arnold in the above scenario?

Options

  • AStrategic threat intelligence
  • BOperational threat intelligence
  • CTechnical threat intelligence
  • DTactical threat intelligence

How the community answered

(24 responses)
  • A
    13% (3)
  • B
    79% (19)
  • C
    8% (2)

Why each option

Arnold's collection of contextual information about security events, attacker methodologies, and recommended actions from sources like humans and social media represents operational threat intelligence.

AStrategic threat intelligence

Strategic threat intelligence focuses on high-level organizational risks, long-term trends, and the overall threat landscape, rather than specific attacker methodologies or incident details.

BOperational threat intelligenceCorrect

Operational threat intelligence focuses on the 'how' and 'who' of attacks, providing insights into specific attacker methodologies, tools, and motivations. Arnold's activities, including gathering contextual information on events, understanding attacker methodologies from human and social media sources, and providing recommendations, directly align with the purpose of operational intelligence to help defend against specific threats and campaigns.

CTechnical threat intelligence

Technical threat intelligence deals with specific indicators of compromise (IOCs) like IP addresses, hashes, and domains, which is a narrower focus than the contextual information and methodologies described.

DTactical threat intelligence

Tactical threat intelligence focuses on specific tactics, techniques, and procedures (TTPs) used by attackers, which, while related, is more granular than the broader contextual and methodological insights derived from human and social media sources characteristic of operational intelligence.

Concept tested: Types of threat intelligence (operational)

Source: https://www.ibm.com/topics/threat-intelligence

Topics

#threat intelligence#operational threat intelligence#attacker methodologies#TTPs

Community Discussion

No community discussion yet for this question.

Full 312-50V12 Practice