Eccouncil 312-85 Exam - Topic 1 Question 23 Discussion

Actual exam question for Eccouncil's 312-85 exam

Question #: 23
Topic #: 1

A threat analyst wants to incorporate a requirement in the threat knowledge repository that provides an ability to modify or delete past or irrelevant threat data.

Which of the following requirement must he include in the threat knowledge repository to fulfil his needs?

AProtection ranking

BEvaluating performance

CData management

DSearchable functionality

Show Suggested Answer

Suggested Answer: C

Incorporating a data management requirement in the threat knowledge repository is essential to provide the ability to modify or delete past or irrelevant threat data. Effective data management practices ensure that the repository remains accurate, relevant, and up-to-date by allowing for the adjustment and curation of stored information. This includes removing outdated intelligence, correcting inaccuracies, and updating information as new insights become available. A well-managed repository supports the ongoing relevance and utility of the threat intelligence, aiding in informed decision-making and threat mitigation strategies. Reference:

'Building and Maintaining a Threat Intelligence Library,' by Recorded Future

'Best Practices for Creating a Threat Intelligence Policy, and How to Use It,' by SANS Institute

by Jackie at Jan 09, 2025, 04:21 AM

Limited Time Offer

25%

Off

Get Premium 312-85 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Theola

3 months ago

Evaluating performance is nice, but not the main focus.

upvoted 0 times

...

Delbert

3 months ago

Wait, can we really delete past threat data? Sounds risky.

upvoted 0 times

...

Linwood

3 months ago

Protection ranking seems irrelevant here.

upvoted 0 times

...

Gracia

4 months ago

I think searchable functionality is more important.

upvoted 0 times

...

Kristeen

4 months ago

Definitely need data management for that!

upvoted 0 times

...

Pearly

4 months ago

I’m confused because protection ranking sounds important too, but I don’t see how it relates to modifying data. I guess I’m stuck between C and D.

upvoted 0 times

...

Jani

4 months ago

I practiced a similar question, and I feel like searchable functionality is more about finding data rather than managing it. So I’m leaning towards C as well.

upvoted 0 times

...

Maybelle

4 months ago

I'm not entirely sure, but I remember something about performance evaluation being important. Could it be B? It just feels like it might relate to how we handle data changes.

upvoted 0 times

...

My

5 months ago

I think the requirement should focus on how to manage the data, so maybe it's C, Data management? That seems to fit the need to modify or delete data.

upvoted 0 times

...

Coral

5 months ago

I'm pretty confident that the correct answer is "Data management". That option aligns best with the need to have the capability to update and remove outdated threat data in the repository.

upvoted 0 times

...

Sena

5 months ago

Okay, I think the key here is the requirement to provide the ability to modify or delete past or irrelevant threat data. That points me towards the "Data management" option as the most relevant.

upvoted 0 times

...

Goldie

5 months ago

Hmm, I'm a bit unsure about this one. The question is asking about a specific requirement, but the options don't seem to directly address the need to modify or delete past threat data.

upvoted 0 times

...

Dalene

5 months ago

This seems like a straightforward question about data management requirements. I'll focus on understanding the key details and identifying the most relevant option.

upvoted 0 times

...

Agustin

1 year ago

A) Protection ranking? Seriously? I think this candidate needs to go back to Threat Management 101. That's not even close to the right answer.

upvoted 0 times

Jade

1 year ago

D) Searchable functionality

upvoted 0 times

...

Melodie

1 year ago

C) Data management

upvoted 0 times

...

Isadora

1 year ago

D) Searchable functionality? I mean, yeah, you gotta be able to find the data first, but that's not the main requirement here. Come on, this is basic threat analyst stuff.

upvoted 0 times

...

Hannah

1 year ago

I believe searchable functionality is also important for easily finding and accessing threat data.

upvoted 0 times

...

Josefa

1 year ago

B) Evaluating performance? What does that have to do with managing threat data? Unless the threat is coming from my boss, I don't think that's the right answer.

upvoted 0 times