312-85: Certified Threat Intelligence AnalystDemo

Question

John is a lead cybersecurity analyst preparing to collect threat intelligence for a client organization. Arrange the following steps in the correct order to show the process John would use to plan effective threat intelligence collection:

Structuring/normalization
Sharing information
Data collection
Storing and visualizing data

A 3 –> 1 –> 4 –> 2
B 2 –> 1 –> 4 –> 3
C 1 –> 2 –> 3 –> 4
D 4 –> 3 –> 2 –> 1

Explanation

Threat-intelligence workflows begin by collecting source data. That data must be structured and normalized so records use consistent formats and can be correlated effectively. It is then stored and visualized to support analysis and operational use, after which the resulting intelligence is shared with the appropriate stakeholders.

312-85: Certified Threat Intelligence AnalystDemo

AstroTutor

Notes

Readiness

QuestionQ48

Community Discussion