A Cyber Threat Intelligence (CTI) team produces a report detailing a specific threat actor's typical behaviors and intent. This would be an example of what type of intelligence?

Question

Options

• AOperational
• BExecutive
• CTactical
• DStrategic

• A
  6% (2)
• C
  3% (1)
• D
  90% (28)

Explanation

Strategic intelligence (D) focuses on long-term understanding of threat actors - their motivations, capabilities, and intent - to inform organizational decisions and policies. A report profiling who a threat actor is and why they act maps directly to that definition.

Why the distractors are wrong:

• A. Operational - covers specific planned or ongoing attacks (e.g., an active campaign's infrastructure details), not actor profiles.
• B. Executive - this isn't a standard CTI tier; executive is sometimes used informally to describe strategic intel presented to leadership, making it a tempting trap.
• C. Tactical - covers how attacks are executed: TTPs, IOCs, malware signatures - the technical nuts and bolts, not actor intent.

Memory tip: Think of the four intelligence types as zoom levels. Tactical = the weapon, Operational = the mission, Strategic = the enemy's goals and worldview. If the question asks about who/why, it's Strategic; if it asks about how/what tools, it's Tactical.

No community discussion yet for this question.