Product Dissemination

Question 1

What is the main objective of cyber threat intelligence sharing initiatives?

Answer 1

To facilitate the sharing of threat data between organisations

To provide a centralised repository for threat data

To standardise the format of threat data shared between organisations

Question 2

What is the importance of cyber threat intelligence sharing initiatives in improving national security?

Answer 2

It enables government agencies to pool resources and build a collective defence against cyber threats

It provides government agencies with central repositories of threat data to aid in their threat detection and response efforts

It enables sharing of data between government agencies

Question 3

How is the stix language structured?

Answer 3

As a collection of XML documents

Question 4

What is the relationship between taxii and stix?

Answer 4

Taxii provides a way of exchanging stix formatted threat intelligence information

Question 5

What type of format should the cyber threat intelligence product be disseminated in?

Answer 5

Text based format

Question 6

What is the purpose of stix?

Answer 6

To provide a commmon language for sharing and comparing threat intelligence

Question 7

What does stix use to describe various aspects of a threat?

Answer 7

Standardises vocabularies

Question 8

What does stix use to describe various aspects of a threat?

Answer 8

Standardised vocabularies

Question 9

What data exchange patterns does taxii support?

Answer 9

Request-response, subscription and push-based models

Question 10

What is the main advantage of using stix and taxii for sharing threat intelligence?

Answer 10

Increased speed and efficiency in sharing threat information

Question 11

What is the primary goal of ISAC?

Answer 11

To improve the security of a particular sector or industry by facilitating the exchange of information about cyber threats

Question 12

What is a limitation of ISAC?

Answer 12

They may not have full participation from all organisations in a sector or industry

Question 13

How does a threat intelligence platform help organisations identify threats?

Answer 13

By comparing known threats against data collected from multiple sources

Question 14

How can a threat intelligence platform help organisations mitigate threats?

Answer 14

By providing actionable intelligence that allows security teams to respond quickly and effectively

Question 15

Which of the following is a benefit of using structured data in cyber threat intelligence?

Answer 15

It is easily shareable and machine readable

Question 16

Which of the following is an advantage of using structured data formats for cyber threat intelligence over unstructured formats?

Answer 16

Structured formats allow for easier analysis and correlation of data

Question 17

True or false: when reporting threat intelligence to customers it is important to include all the details and information even if it is not relevant to the customers specific environment?

Answer 17

False - only things relevant to their environment should be given

Question 18

T/f the purpose of reporting threat intelligence is to scare the customer into immediate action?

Answer 18

False

Question 19

T/f when reporting threat intelligence it is important to provide actionable recommendations for the customer to take

Answer 19

True

Question 20

Stix and taxii are only used by government organisations and agencies t/f

Answer 20

False

Question 21

Stix and taxii were developed to provide a standardised way of sharing threstnintelligence information formation and to reduce the duplication of effort in developing threat intelligence feeds

Answer 21

True

Question 22

Which of the following statements would be considered an explanation for TAXII?
- a standarised language for describing and exchanging information about cyber threats
- a tool for building effective cyber defenses
- a protocol that enables the secure and automated exchange of a stix formatted threat intelligence

Answer 22

A standardised language for describing and exchanging information about cyber threats

Question 23

What is the purpose of stix?

Answer 23

To provide a common language for sharing and comparing threat intelligence

Question 24

What is a threat intelligence platform?
- A platform that allows security professionals to share and collaborate on threat intelligence.
-A software application that provides information about the latest cyber threats

Answer 24

A platform that allows security professionals to share and collaborate threat intelligence

Question 25

What is the reason why structured CTI data is delivered through APIs?

Answer 25

APIs allow for real time delivery and automated processing

Question 26

Advantage of using structured data formats over unstructured data formats?

Answer 26

Structured formats allow for easier analysis and correlation of data