Kathy wants to ensure that she shares threat intelligence containing sensitive information with the appropriate audience. Hence, she used traffic light protocol (TLP). Which TLP color would you…

Question

Options

• ARed
• BWhite
• CGreen
• DAmber

• A
  3% (1)
• B
  8% (3)
• C
  86% (32)
• D
  3% (1)

Explanation

TLP:Green designates information that may be shared freely within a specific community - such as a trusted group of security professionals or partner organizations - but must not be released to the public or posted on public channels. This makes it the correct choice for sharing sensitive threat intelligence within a defined audience.

Why the distractors are wrong:

• Red (A) is the most restrictive - information is shared only with the immediate recipients in the room/call and cannot be passed on at all.
• White (B) is the least restrictive - information carries no sharing restrictions and is effectively public.
• Amber (D) sits between Green and Red - it restricts sharing to the recipient's own organization and its direct clients, not a broader community.

Memory tip: Think of a traffic light in reverse by openness: White = wide open (public), Green = go ahead and share (community), Amber = slow down (your org only), Red = stop (recipients only). The "community" keyword on the exam is your signal to pick Green.

No community discussion yet for this question.