312-50V13 · Question #442
Leverox Solutions hired Arnold, a security professional, for the threat intelligence process. Arnold collected information about specific threats against the organization. From this information, he…
The correct answer is C. Operational threat intelligence. Arnold collected information from various sources about specific threats, attacker methodologies, and contextual security events to prepare a report with recommended actions and warnings for emerging attacks.
Question
Options
- AStrategic threat intelligence
- BTactical threat intelligence
- COperational threat intelligence
- DTechnical threat intelligence
How the community answered
(17 responses)- A6% (1)
- B6% (1)
- C88% (15)
Why each option
Arnold collected information from various sources about specific threats, attacker methodologies, and contextual security events to prepare a report with recommended actions and warnings for emerging attacks.
Strategic threat intelligence focuses on high-level organizational risks and long-term security posture, not specific attack methodologies or emerging threats.
Tactical threat intelligence provides detailed information about specific attack vectors, tools, and infrastructure, which is a component of operational intelligence, but operational is broader, encompassing TTPs and actionable recommendations.
Operational threat intelligence focuses on the Tactics, Techniques, and Procedures (TTPs) of specific threats and actors, often derived from observing actual attacks or engaging with human and social intelligence sources. This type of intelligence provides actionable insights into how attacks are carried out and offers recommendations to defend against specific emerging threats, matching Arnold's activities.
Technical threat intelligence provides granular Indicators of Compromise (IOCs) such as IP addresses or file hashes, rather than the broader context of attacker methodologies or recommended courses of action.
Concept tested: Types of threat intelligence
Source: https://www.cisa.gov/news-events/news/cisa-blog-cyber-threat-intelligence-understanding-what-you-need
Topics
Community Discussion
No community discussion yet for this question.