SOC module 5

Which of the following is NOT a direct benefit of implementing Cyber Threat Intelligence in an organization?

• Improved incident response

• Predicting employee resignations

• Enhanced threat detection

• Better risk management decisions

What type of threat intelligence includes indicators such as file hashes, domain names, and IP addresses?

• Strategic Intelligence

• Technical Intelligence

• Operational Intelligence

• Tactical Intelligence

Which phase of the threat intelligence lifecycle involves defining objectives and collection requirements?

• Analysis

• Collection

• Planning and Direction

• Dissemination

Strategic threat intelligence is primarily intended to support which group?

• SOC Analysts

• Legal team

• Executive leadership and decision-makers

• Malware researchers

Which CTI type provides context such as attacker motivations, capabilities, and attack planning?

• Technical

• Operational

• Strategic

• Tactical

What is a core goal of a Threat Intelligence Platform (TIP)?

• Network scanning

• Patch management

• Automating threat data collection and correlation

• VPN creation

What is a benefit of integrating CTI into SIEM solutions?

• Increases alert fatigue

• Enhances precision through contextual enrichment

• Slows down detection processes

• Removes the need for correlation rules

Tactical intelligence is most useful for which of the following roles?

• Executives

• Compliance officers

• Security operations center (SOC) teams

• Legal advisors

What is a major limitation of traditional SOCs compared to intelligence-driven SOCs?

• Lack of visibility

• Dependence on human analysts

• Operating in a reactive mode with limited context

• Use of threat intelligence feeds

Indicators of Compromise (IOCs) such as file hashes and malicious URLs are part of which CTI type?

• Strategic

• Operational

• Tactical

• Technical