Examkin

Soru

Zorluk: OrtaThreat Intelligence Sources and Research

Match each threat intelligence source classification on the left with its primary enterprise operational use case on the right.

  • Open-Source Intelligence (OSINT)Gathering freely available security research from public vendor blogs, code repositories, and open advisories.
  • Information Sharing and Analysis Center (ISAC)Sharing sector-specific, confidential threat warnings and adversary indicators with industry peer organizations.
  • Proprietary Threat Intelligence FeedIngesting paid, commercial indicator streams curated by specialized vendors for low-noise alert enrichment.
  • National Vulnerability Database (NVD)Correlating enterprise software inventory against standardized Common Vulnerabilities and Exposures (CVE) and CVSS risk scores.

Cevap

Open-Source Intelligence (OSINT) matches with gathering freely available security research from public sources; Information Sharing and Analysis Center (ISAC) matches with sharing sector-specific, confidential threat warnings with industry peers; Proprietary Threat Intelligence Feed matches with ingesting paid, commercial indicator streams from specialized vendors; National Vulnerability Database (NVD) matches with correlating software inventory against standardized CVE identifiers and CVSS risk scores.
Open-Source Intelligence (OSINT) involves analyzing publicly accessible security data without cost. Information Sharing and Analysis Centers (ISACs) provide trusted peer-to-peer threat sharing specifically tailored to industry sectors like finance or healthcare. Proprietary threat feeds offer commercially licensed, high-fidelity threat indicators for specialized SOC ingestion. The National Vulnerability Database (NVD) acts as the primary repository for standardized CVE records and CVSS scoring to drive vulnerability management.

Adım Adım Çözüm

1
Analyze the access model and distribution method of each threat intelligence source.
OSINT is publicly accessible; ISAC is peer-shared within an industry sector; Proprietary feeds are commercial/paid; NVD is a public standardized database.
Differentiating sources by cost, access controls, and target usage enables correct alignment with operational workflows.
2
Match each intelligence source to its intended security outcome.
Public research maps to OSINT; sector peer sharing maps to ISAC; paid vendor feeds map to Proprietary Intelligence; vulnerability scoring maps to NVD.
Security operations rely on specific intelligence types for different tasks such as patch management, alert enrichment, or peer warning.

Anahtar Kavram

Categorization and Application of Threat Intelligence Sources
Bu soruyu puanla

Konular

Threat Intelligence Sources and Research

Bu konudan daha fazla soru