INTS

Question 1

What are the seven principles of security intelligence?

Answer 1

1. Real-Time Analysis
2. Pre-Exploitation Review
3. Data Collection, normalization and analysis
4. Actionable Insights
5. Scalability
6. Flexibility in Size and Cost
7. Data Security and Risk Management

Question 2

What is security intelligence?

Answer 2

The collection and analysis of real-time data gathered from various sources such as networks, users, applications and other infrastructure to respond to security threats.

Question 3

Continuous monitoring of data across networks and sources to pinpoint any suspicious activities. This aspect of security helps with proactive response and minimizes the chances of the spread of the damage.

Answer 3

Real-time analysis

Question 4

Preventative measure that helps pinpoint weaknesses before they are exploited by hackers. It helps minimize downtime or operational disruptions for the organization.

Answer 4

Pre-exploitation review

Question 5

Come from a wide array of sources such as networks, logs, threat intelligence feeds, etc. The next step is to normalize or standardize this data to make it easier to analyze and correlate. This enables the organization to identify any patterns that may be the cause of events.

Answer 5

Data collection, normalization, and analysis

Question 6

Actionable insights to enable security teams to make concrete decisions to enhance security maturity. These can include information on indicators of compromise and tactical recommendations such as implementing new security controls, predictions on emerging threats and more.

Answer 6

Actionable insights

Question 7

Provide a scalable foundation because of automation, cloud integrations and a flexible architecture. This enables them to expeditiously gather and process large volumes of data and respond in real-time.

Answer 7

Scalability

Question 8

Small businesses and startups can also leverage these solutions to deal with security threats per their needs and budgets.
Compliance automation tools are also a lucrative solution here, especially for small and medium businesses as they provide enough actionable intelligence and solve for compliance readiness.

Answer 8

Flexibility in size and cost

Question 9

Security intelligence solutions are only helpful if they help protect data and intellectual property. They provide organizations with tools and insights to protect information against security threats.

Answer 9

Data security and risk management

Question 10

CIA stands for?

Answer 10

Confidentiality, integrity and availability

Question 11

CIO stands for?

Answer 11

Intent, capability and opportunity

Question 12

APT stands for?

Answer 12

Advanced Persistent threats

Question 13

IoC stands for?

Answer 13

Indicators of Compromise

Question 14

TTP stands for?

Answer 14

Techniques, tactics and procedures

Question 15

The right people have access to information and it is protected against unauthorized access
(CIA or CIO)

Answer 15

CIA

Question 16

The reliability and accuracy of information is maintained
(CIA or CIO)

Answer 16

CIA

Question 17

The systems are up and running always for the authorized people
(CIA or CIO)

Answer 17

CIA

Question 18

Intent is the attacker’s desire or interest to harm an organization
(CIA or CIO)

Answer 18

CIO

Question 19

Capability refers to the tools, resources and skill set of the malicious actor to exploit weaknesses
(CIA or CIO)

Answer 19

CIO

Question 20

Opportunities are the vulnerabilities that can be exploited such as misconfigurations, unpatched weaknesses etc.
(CIA OR CIO)

Answer 20

CIO

Question 21

Targeted cyberattacks that aim to gain long-term access to an organization’s network (persistent) for espionage or data theft. To remain undetected, the attacker uses advanced tactics such as spear phishing, data exflitration, zero-day exploits, etc.

Answer 21

ATP

Question 22

Piece of data or evidence to showcase that a system has been breached or infiltrated. In the context of security intelligence, IoC serves as forensic evidence by analysts to detect incidents and respond to threats faster.

Answer 22

IoC

Question 23

Methodologies used by attackers to carry out the attack and accomplish the desired goal. Analysts must understand the TTPs to implement or strengthen technical safeguards and enhance their incident response plan.

Answer 23

TTP