In which of the following forms of bulk data collection are large amounts of data first collected from multiple sources in multiple formats and then processed to achieve threat intelligence?

Question

Options

• AStructured form
• BHybrid form
• CProduction form
• DUnstructured form

• A
  5% (2)
• B
  3% (1)
• C
  3% (1)
• D
  90% (35)

Explanation

Unstructured form (D) describes the approach where raw data is gathered from diverse sources in various formats - logs, social media, emails, documents - without a predefined schema, and then processed afterward to extract actionable threat intelligence. Structured form (A) is wrong because it refers to data already organized in a defined format (like databases or CSV files) before processing, not the collect-then-process model described. Hybrid form (B) combines elements of both structured and unstructured data but is not a recognized standard term in threat intelligence data collection taxonomy. Production form (C) is not a standard classification in this context and serves as a distractor with a plausible-sounding name.

Memory tip: Think "Unstructured = Unsorted first, sorted later" - you vacuum up everything raw from everywhere, then make sense of it. If the question describes a collect-now, process-later pipeline with mixed formats, that's always unstructured.

No community discussion yet for this question.