Examkin

Question

Difficulty: MediumThreat Intelligence Sources and Research

A security operations team at a commercial enterprise needs to proactively monitor illicit underground marketplaces and non-indexed digital forums for stolen employee credentials and compromised API keys. Which threat intelligence source type best fulfills this requirement?

  1. Dark web threat intelligence feedsAnswer
  2. B
    Nation-state threat actor motivation advisories
  3. C
    Inline Web Application Firewall threat feeds
  4. D
    National Vulnerability Database repository feeds

Answer

Dark web threat intelligence feeds are designed to monitor non-indexed networks and underground marketplaces for leaked organizational assets such as employee credentials.
Dark web threat intelligence specializes in crawling and analyzing darknets, hidden services, and invite-only criminal cyber forums. It allows organizations to proactively identify leaked sensitive data, such as compromised employee logins or secret keys, before attackers leverage them for initial access.

Step-by-Step Solution

1
Analyze the operational requirement in the scenario.
The goal is to monitor non-indexed forums and illicit underground marketplaces specifically for compromised corporate credentials and API keys.
Understanding the specific operational outcome determines which threat intelligence source specialization is required.
2
Evaluate candidate threat intelligence source types.
Dark web threat intelligence specifically gathers intelligence from encrypted, non-indexed networks (e.g., Tor, I2P) and illicit forums where criminal actors trade stolen data.
Standard search engines and vulnerability repositories do not index or cover these illicit underground criminal networks.
3
Confirm why alternative options do not meet the primary requirement.
Vulnerability databases publish software flaws, APT advisories focus on strategic nation-state motivations, and WAF feeds act as preventive filtering mechanisms.
None of these alternatives cover the continuous monitoring of underground criminal marketplaces for compromised organizational assets.

Key Concept

Threat Intelligence Sources and Research
Rate this question

Topics

Threat Intelligence Sources and Research

More questions from this topic