How are cyber threat intelligence platforms used?

Question

Options

• Ato assess internal asset management to understand potential risks from vendors or malicious insiders
• Bto gather and evaluate the data to recognize the threats that are targeting the business
• Cto verify the vulnerability management process to ensure that critical flaws are not missed during the remediation phase
• Dto analyze and measure the damage that potential threats can deliver to business and its availability

• A
  6% (3)
• B
  88% (42)
• C
  4% (2)
• D
  2% (1)

Explanation

Cyber threat intelligence (CTI) platforms are designed to collect, aggregate, and analyze data from multiple sources to identify and understand threats actively targeting an organization - making B the correct answer. Option A describes a vendor risk management or insider threat program, not CTI. Option C describes vulnerability management or patch management processes. Option D describes a business impact analysis (BIA) or risk quantification exercise, which is a separate discipline from intelligence gathering.

Memory tip: Think of "intelligence" literally - it's about knowing your enemy (gathering and evaluating threat data), not fixing vulnerabilities (C), assessing vendors (A), or calculating damage (D). CTI answers "who is targeting us and how?" before any of those other processes begin.

No community discussion yet for this question.