nerdexam
EC-Council

312-85 · Question #25

Henry. a threat intelligence analyst at ABC Inc., is working on a threat intelligence program. He was assigned to work on establishing criteria for prioritization of intelligence needs and…

The correct answer is A. Understand frequency and impact of a threat. Prioritizing intelligence requirements means determining which threats matter most and how urgently they need attention - and that judgment hinges on understanding a threat's frequency (how often it occurs) and impact (how much damage it can cause), making option A the correct…

Cyber Threat Intelligence Lifecycle

Question

Henry. a threat intelligence analyst at ABC Inc., is working on a threat intelligence program. He was assigned to work on establishing criteria for prioritization of intelligence needs and requirements. Which of the following considerations must be employed by Henry to prioritize intelligence requirements?

Options

  • AUnderstand frequency and impact of a threat
  • BUnderstand data reliability
  • CDevelop a collection plan
  • DProduce actionable data

How the community answered

(46 responses)
  • A
    93% (43)
  • B
    2% (1)
  • D
    4% (2)

Explanation

Prioritizing intelligence requirements means determining which threats matter most and how urgently they need attention - and that judgment hinges on understanding a threat's frequency (how often it occurs) and impact (how much damage it can cause), making option A the correct consideration for establishing prioritization criteria.

Why the distractors are wrong:

  • B (Data reliability) is a data evaluation concern used when assessing sources, not a prioritization criterion for intelligence needs.
  • C (Develop a collection plan) is the next step after priorities are established - you collect based on what's already been prioritized.
  • D (Produce actionable data) is an output/dissemination goal of the intelligence cycle, not a factor used to rank requirements.

Memory tip: Think of the acronym FI - Frequency and Impact - as your "prioritization filter." High-frequency + high-impact threats rise to the top of the list. The other options describe what you do before (collect) or after (produce/disseminate) prioritization, or belong to a different part of the process (source evaluation).

Topics

#Threat Intelligence Prioritization#Intelligence Requirements#Risk/Impact Assessment#Threat Analysis

Community Discussion

No community discussion yet for this question.

Full 312-85 Practice