nerdexam
EC-Council

312-85 · Question #5

Cybersol Technologies initiated a cyber-threat intelligence program with a team of threat intelligence analysts. During the process, the analysts started converting the raw data into useful…

The correct answer is C. Processing and exploitation. Processing and Exploitation (C) is correct because this phase specifically involves transforming raw, collected data into a structured, usable format through automated and statistical methods - exactly what the analysts are doing. The key indicator in the question is…

Cyber Threat Intelligence Lifecycle

Question

Cybersol Technologies initiated a cyber-threat intelligence program with a team of threat intelligence analysts. During the process, the analysts started converting the raw data into useful information by applying various techniques, such as machine-based techniques, and statistical methods. In which of the following phases of the threat intelligence lifecycle is the threat intelligence team currently working?

Options

  • ADissemination and integration
  • BPlanning and direction
  • CProcessing and exploitation
  • DAnalysis and production

How the community answered

(20 responses)
  • A
    5% (1)
  • B
    15% (3)
  • C
    75% (15)
  • D
    5% (1)

Explanation

Processing and Exploitation (C) is correct because this phase specifically involves transforming raw, collected data into a structured, usable format through automated and statistical methods - exactly what the analysts are doing. The key indicator in the question is "converting raw data into useful information" using "machine-based techniques and statistical methods," which are hallmark activities of this phase.

Why the distractors are wrong:

  • (A) Dissemination and Integration is the final phase, where finished intelligence is shared with stakeholders - no data conversion happens here.
  • (B) Planning and Direction is the first phase, focused on defining intelligence requirements and goals, not touching data at all.
  • (D) Analysis and Production comes after processing - analysts interpret already-processed data to generate intelligence products like reports; the raw-to-structured conversion is already complete by then.

Memory tip: Think of the lifecycle as a pipeline - Plan → Collect → Process → Analyze → Disseminate. "Processing" is the machine step (automated, statistical), while "Analysis" is the human step (interpretation, judgment). If the question mentions algorithms or statistical methods, it's Processing; if it mentions conclusions or reports, it's Analysis.

Topics

#Processing and Exploitation#Analytical Techniques#Threat Intelligence Lifecycle#Data Conversion

Community Discussion

No community discussion yet for this question.

Full 312-85 Practice