Karry, a threat analyst at an XYZ organization, is performing threat intelligence analysis. During the data collection phase, he used a data collection method that involves no participants and is…

Question

Options

• AActive data collection
• BPassive data collection
• CExploited data collection
• DRaw data collection

• B
  93% (25)
• C
  4% (1)
• D
  4% (1)

Explanation

Passive data collection (B) is correct because Karry's method involves no interaction with participants - he simply observes and analyzes activities occurring naturally within the organization's environment, which is the defining characteristic of passive collection.

• A (Active) is wrong because active collection requires direct engagement or participation, such as interviews, surveys, or actively querying systems/people for information.
• C (Exploited) is wrong because this is not a recognized standard data collection methodology in threat intelligence frameworks - it's a distractor.
• D (Raw) is wrong because "raw data" describes the format or state of data, not a collection method, making it categorically incorrect here.

Memory tip: Think of it like wildlife observation - a passive researcher watches animals without disturbing them (no participants), while an active researcher tags or interacts with them. If Karry isn't touching or talking to anyone, it's Passive = Pure observation.

No community discussion yet for this question.