Examkin

Question

Difficulty: MediumThreat Intelligence Sources and Research

Match each threat intelligence concept on the left with its primary operational role within an enterprise security framework on the right.

  • STIX / TAXII ProtocolsStandardized machine-readable format and transport mechanism for automated ingestion of indicator data.
  • Information Sharing and Analysis Center (ISAC)Sector-specific trust community facilitating peer-to-peer threat information sharing among critical infrastructure organizations.
  • Open-Source Intelligence (OSINT)Publicly accessible information gathered from open web resources, code repositories, and public vulnerability registries.
  • Commercial Threat Intelligence FeedSubscription-based curated intelligence service providing validated threat actor attribution and high-fidelity indicators.

Answer

STIX / TAXII Protocols pairs with standardized machine-readable format and transport mechanism; ISAC pairs with sector-specific trust community for peer sharing; OSINT pairs with publicly accessible information gathered from open web resources; Commercial Threat Intelligence Feed pairs with subscription-based curated intelligence service.
Each concept correctly maps to its functional definition in security operations: STIX/TAXII provides standardized machine-readable data formatting and transport; ISAC serves as a peer-to-peer industry trust community; OSINT refers to publicly available intelligence gathered from open sources; and Commercial Threat Intelligence Feeds deliver curated, proprietary subscription-based threat data.

Step-by-Step Solution

1
Identify the primary mechanism used for automated technical threat exchange.
STIX/TAXII protocols provide the structured schema and HTTPS-based transport needed to feed machine-readable IOCs directly into SIEM or SOAR platforms.
Automated ingestion requires standardized schemas (STIX) and defined transport mechanisms (TAXII).
2
Determine the resource designed for industry-wide collaborative threat sharing.
An ISAC connects peer entities operating within the same sector to share industry-relevant attack trends and early warnings.
ISACs are specifically structured around vertical industry sectors to address common threat vectors.
3
Distinguish between freely accessible public intelligence and closed subscription sources.
OSINT uses freely available web data, whereas Commercial Feeds rely on paid vendor subscriptions for high-fidelity, processed intelligence.
OSINT is open to all without licensing, whereas Commercial Feeds are proprietary closed-source services.

Key Concept

Threat Intelligence Sources and Information Sharing Protocols
Rate this question

Topics

Threat Intelligence Sources and Research

More questions from this topic