QuestionQ29

Data Collection and Processing

An organization experienced numerous major attacks and lost critical information, including employee records and financial information. Therefore, management decides to hire a threat analyst to extract strategic threat intelligence that provides high-level information regarding the current cyber-security posture, threats, details on the financial impact of various cyber-activities, and so on.

Which of the following sources will help the analyst collect the required intelligence?

  • A Active campaigns, attacks on other organizations, data feeds from external third parties
  • B OSINT, CTI vendors, ISAO/ISACs
  • C Campaign reports, malware, incident reports, attack group reports, human intelligence
  • D Human, social media, chat rooms
Explanation

Strategic threat intelligence is high-level, business-focused intelligence used to understand organizational risk, threat trends, security posture, and potential financial impact. OSINT, commercial CTI vendors, and ISAO/ISAC communities provide broad external and sector-specific context suitable for that purpose.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!