Free Preparation Discussions
MENU
Eccouncil 312-85 Exam - Topic 5 Question 31 Discussion
Topic #: 5
Jian is a member of the security team at Trinity, Inc. He was conducting a real-time assessment of system activities in order to acquire threat intelligence feeds. He acquired feeds from sources like honeynets, P2P monitoring. infrastructure, and application logs.
Which of the following categories of threat intelligence feed was acquired by Jian?
Internal intelligence feeds are derived from data and information collected within an organization's own networks and systems. Jian's activities, such as real-time assessment of system activities and acquiring feeds from honeynets, P2P monitoring, infrastructure, and application logs, fall under the collection of internal intelligence feeds. These feeds are crucial for identifying potential threats and vulnerabilities within the organization and form a fundamental part of a comprehensive threat intelligence program. They contrast with external intelligence feeds, which are sourced from outside the organization and include information on broader cyber threats, trends, and TTPs of threat actors. Reference:
'Building an Intelligence-Led Security Program' by Allan Liska
'Threat Intelligence: Collecting, Analysing, Evaluating' by M-K. Lee, L. Healey, and P. A. Porras
Maurine
5 months agoSalena
6 months agoPaul
6 months agoLawrence
6 months agoReynalda
6 months agoRashida
6 months agoTrina
7 months agoFannie
7 months agoRonald
7 months agoJesusa
7 months agoTruman
7 months agoLavonne
8 months agoLilli
8 months agoBethanie
10 months agoDominic
10 months agoTamesha
9 months agoElli
10 months agoDeandrea
10 months agoCristy
10 months agoLavonna
10 months agoNoel
11 months agoFatima
11 months agoNathalie
10 months agoJudy
10 months agoAlishia
10 months agoMan
10 months agoDalene
10 months agoWhitley
10 months agoFrance
11 months agoMicaela
11 months agoGail
10 months agoSolange
10 months agoTrinidad
10 months ago