Examkin

Soru

Zorluk: OrtaThreat Intelligence Sources and Research

A chief information security officer (CISO) at a regional healthcare network wants to establish a secure, bidirectional threat intelligence sharing channel to exchange sector-specific cyber threat indicators and attacker tactics directly with peer healthcare organizations. Which threat intelligence source or framework is best suited to fulfill this requirement?

  1. Information Sharing and Analysis Center (ISAC)Cevap
  2. B
    National Vulnerability Database (NVD)
  3. C
    Open-Source Intelligence (OSINT) security blogs
  4. D
    Dark web intelligence feeds

Cevap

Information Sharing and Analysis Center (ISAC)
An Information Sharing and Analysis Center (ISAC) is a non-profit organization that provides a central resource for gathering and sharing cyber threat information between entity peers within specific industry sectors (such as healthcare, financial services, or aviation). It fulfills the requirement for trusted, bidirectional indicator exchange.

Adım Adım Çözüm

1
Analyze the operational requirements stated in the scenario.
The scenario requires bidirectional, sector-specific threat intelligence sharing among peer healthcare institutions within a trusted framework.
Identifying key constraints (sector-specific, bidirectional sharing, peer trust) filters out non-collaboration intelligence sources.
2
Evaluate the available threat intelligence sources against these requirements.
An Information Sharing and Analysis Center (ISAC) is explicitly established to facilitate trusted cyber threat sharing across specific critical infrastructure sectors.
Healthcare ISACs (H-ISAC) enable member organizations to exchange real-time threat indicators, remediation strategies, and emerging vector data.

Anahtar Kavram

Information Sharing and Analysis Centers (ISACs)
Bu soruyu puanla

Konular

Threat Intelligence Sources and Research

Bu konudan daha fazla soru