Examkin

Soru

Zorluk: OrtaThreat Intelligence Sources and Research

Match each threat intelligence source classification on the left with its corresponding operational security use case on the right.

  • Proprietary Threat FeedSubscribing to vendor-curated commercial indicator feeds to dynamically block active command-and-control infrastructure.
  • Information Sharing and Analysis Center (ISAC)Exchanging sector-specific attack data and defensive strategies securely among trusted industry peer organizations.
  • Open-Source Intelligence (OSINT)Analyzing publicly available technical research blogs, social media discussions, and code repositories.
  • Vulnerability DatabaseReviewing standardized CVSS severity metrics and technical patch advisories for disclosed software weaknesses.

Cevap

Proprietary Threat Feed pairs with vendor-curated commercial indicator feeds; Information Sharing and Analysis Center (ISAC) pairs with exchanging sector-specific attack data among trusted peers; Open-Source Intelligence (OSINT) pairs with analyzing publicly available technical research blogs and repositories; Vulnerability Database pairs with reviewing standardized CVSS metrics and technical patch advisories.
Each threat intelligence source corresponds directly to its defined operational role: Proprietary feeds supply commercial, vendor-curated indicators; ISACs provide a trust network for sector-specific peer sharing; OSINT relies on freely available web information; and Vulnerability Databases offer standardized risk scores (CVSS) and patch advisories.

Adım Adım Çözüm

1
Analyze the scope, access level, and governance model of each threat intelligence source.
Differentiate between commercial vendor services, sector-specific peer communities, open public platforms, and standardized vulnerability archives.
Threat intelligence sources serve distinct operational needs based on trust boundaries, access permissions, and data content.
2
Map each threat intelligence source to its primary enterprise operational application.
Match Proprietary feeds to paid C2 blocking feeds, ISACs to sector peer sharing, OSINT to open web analysis, and Vulnerability Databases to CVSS/CVE patch evaluation.
Aligning intelligence sources with appropriate operational workflows ensures efficient risk management and incident prevention.

Anahtar Kavram

Operational applications and classification of threat intelligence sources
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Threat Intelligence Sources and Research

Bu konudan daha fazla soru