Eccouncil 312-85 Exam - Topic 11 Question 4 Discussion

Actual exam question for Eccouncil's 312-85 exam

Question #: 4
Topic #: 11

Kim, an analyst, is looking for an intelligence-sharing platform to gather and share threat information from a variety of sources. He wants to use this information to develop security policies to enhance the overall security posture of his organization.

Which of the following sharing platforms should be used by Kim?

ACuckoo sandbox

BOmniPeek

CPortDroid network analysis

DBlueliv threat exchange network

Show Suggested Answer

Suggested Answer: D

by Van at May 08, 2022, 02:53 PM

Limited Time Offer

25%

Off

Get Premium 312-85 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Junita

4 months ago

OmniPeek is great for network analysis, but not really for threat sharing.

upvoted 0 times

...

Phillip

4 months ago

Wait, is Blueliv really the best option? I've heard mixed reviews.

upvoted 0 times

...

Joaquin

4 months ago

Totally agree, Blueliv has a solid reputation!

upvoted 0 times

...

Amina

4 months ago

Cuckoo sandbox is more for malware analysis, not sharing.

upvoted 0 times

...

Mitsue

5 months ago

I think Blueliv is the best choice for threat sharing.

upvoted 0 times

...

Elena

5 months ago

I have a vague memory of PortDroid being used for network analysis too, but I can't recall if it has any intelligence-sharing features.

upvoted 0 times

...

Davida

5 months ago

I practiced a similar question where we had to choose between different tools for security analysis. I think OmniPeek might be more focused on network analysis, not threat sharing.

upvoted 0 times

...

Sabra

5 months ago

I remember discussing threat intelligence platforms in class, and I think Blueliv was mentioned as a good option for sharing threat information.

upvoted 0 times

...

Juliana

5 months ago

I'm not entirely sure, but I feel like Cuckoo sandbox is more for malware analysis rather than sharing intelligence.

upvoted 0 times

...

Amie

5 months ago

I've got a good strategy for approaching this type of question. I've got this!

upvoted 0 times

...

Layla

5 months ago

I feel pretty confident about this approach. Livestreams in Azure Sentinel are a powerful way to detect and respond to security events in real-time. As long as I can get the query right, I think this should meet the goal.

upvoted 0 times

...

Elza

5 months ago

I had a similar practice question about visibility in classes. I think being bright definitely helps in group workouts, especially for safety.

upvoted 0 times

...

Gail

5 months ago

I'm not sure about this one. I'm torn between reviewing the OFAC wire policies and procedures or self-reporting the activity to OFAC. I guess it depends on how urgent the situation is and how much time we have to address it.

upvoted 0 times

...