Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

EC-Council 312-85 Exam - Topic 11 Question 4 Discussion

Posted by Van on May 08, 2022 at 02:53 PM

Kim, an analyst, is looking for an intelligence-sharing platform to gather and share threat information from a variety of sources. He wants to use this information to develop security policies to enhance the overall security posture of his organization.

Which of the following sharing platforms should be used by Kim?

Suggested Answer: D

Get Premium 312-85 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
13 comments · newest first
JU
Junita 12 months ago
OmniPeek is great for network analysis, but not really for threat sharing.
PH
Phillip 12 months ago
Wait, is Blueliv really the best option? I've heard mixed reviews.
JO
Joaquin 12 months ago
Totally agree, Blueliv has a solid reputation!
AM
Amina 1 year ago
Cuckoo sandbox is more for malware analysis, not sharing.
MI
Mitsue 1 year ago
I think Blueliv is the best choice for threat sharing.
EL
Elena 1 year ago
I have a vague memory of PortDroid being used for network analysis too, but I can't recall if it has any intelligence-sharing features.
DA
Davida 1 year ago
I practiced a similar question where we had to choose between different tools for security analysis. I think OmniPeek might be more focused on network analysis, not threat sharing.
SA
Sabra 1 year ago
I remember discussing threat intelligence platforms in class, and I think Blueliv was mentioned as a good option for sharing threat information.
JU
Juliana 1 year ago
I'm not entirely sure, but I feel like Cuckoo sandbox is more for malware analysis rather than sharing intelligence.
AM
Amie 1 year ago
I've got a good strategy for approaching this type of question. I've got this!
LA
Layla 1 year ago
I feel pretty confident about this approach. Livestreams in Azure Sentinel are a powerful way to detect and respond to security events in real-time. As long as I can get the query right, I think this should meet the goal.
EL
Elza 1 year ago
I had a similar practice question about visibility in classes. I think being bright definitely helps in group workouts, especially for safety.
GA
Gail 1 year ago
I'm not sure about this one. I'm torn between reviewing the OFAC wire policies and procedures or self-reporting the activity to OFAC. I guess it depends on how urgent the situation is and how much time we have to address it.
0/2000 characters

Save Cancel