Free Preparation Discussions
MENU
Eccouncil 312-85 Exam - Topic 5 Question 31 Discussion
Topic #: 5
Jian is a member of the security team at Trinity, Inc. He was conducting a real-time assessment of system activities in order to acquire threat intelligence feeds. He acquired feeds from sources like honeynets, P2P monitoring. infrastructure, and application logs.
Which of the following categories of threat intelligence feed was acquired by Jian?
Internal intelligence feeds are derived from data and information collected within an organization's own networks and systems. Jian's activities, such as real-time assessment of system activities and acquiring feeds from honeynets, P2P monitoring, infrastructure, and application logs, fall under the collection of internal intelligence feeds. These feeds are crucial for identifying potential threats and vulnerabilities within the organization and form a fundamental part of a comprehensive threat intelligence program. They contrast with external intelligence feeds, which are sourced from outside the organization and include information on broader cyber threats, trends, and TTPs of threat actors. Reference:
'Building an Intelligence-Led Security Program' by Allan Liska
'Threat Intelligence: Collecting, Analysing, Evaluating' by M-K. Lee, L. Healey, and P. A. Porras
Maurine
7 months agoSalena
7 months agoPaul
7 months agoLawrence
8 months agoReynalda
8 months agoRashida
8 months agoTrina
8 months agoFannie
8 months agoRonald
9 months agoJesusa
9 months agoTruman
9 months agoLavonne
9 months agoLilli
9 months agoBethanie
12 months agoDominic
12 months agoTamesha
11 months agoElli
11 months agoDeandrea
11 months agoCristy
12 months agoLavonna
12 months agoNoel
1 year agoFatima
1 year agoNathalie
11 months agoJudy
11 months agoAlishia
11 months agoMan
12 months agoDalene
12 months agoWhitley
12 months agoFrance
1 year agoMicaela
1 year agoGail
11 months agoSolange
12 months agoTrinidad
1 year ago