Eccouncil 312-85 Exam - Topic 7 Question 27 Discussion

Actual exam question for Eccouncil's 312-85 exam

Question #: 27
Topic #: 7

Sarah is a security operations center (SOC) analyst working at JW Williams and Sons organization based in Chicago. As a part of security operations, she contacts information providers (sharing partners) for gathering information such as collections of validated and prioritized threat indicators along with a detailed technical analysis of malware samples, botnets, DDoS attack methods, and various other malicious tools. She further used the collected information at the tactical and operational levels.

Sarah obtained the required information from which of the following types of sharing partner?

AProviders of threat data feeds

BProviders of threat indicators

CProviders of comprehensive cyber-threat intelligence

DProviders of threat actors

Show Suggested Answer

Suggested Answer: C

The information Sarah is gathering, which includes collections of validated and prioritized threat indicators along with detailed technical analysis of malware samples, botnets, DDoS methods, and other malicious tools, indicates that she is obtaining this intelligence from providers of comprehensive cyber-threat intelligence. These providers offer a holistic view of the threat landscape, combining tactical and operational threat data with in-depth analysis and context, enabling security teams to make informed decisions and strategically enhance their defenses. Reference:

'Cyber Threat Intelligence Providers: How to Choose the Right One for Your Organization,' by CrowdStrike

'The Role of Comprehensive Cyber Threat Intelligence in Effective Cybersecurity Strategies,' by FireEye

by Tambra at Mar 22, 2025, 08:08 AM

Limited Time Offer

25%

Off

Get Premium 312-85 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jeannetta

5 months ago

I’m surprised she gets all that from sharing partners! Sounds intense.

upvoted 0 times

...

Darnell

5 months ago

A is a solid choice too, but C seems more complete.

upvoted 0 times

...

Gary

6 months ago

I think B makes more sense for specific indicators.

upvoted 0 times

...

Aide

6 months ago

Wait, are we sure Sarah needs all that info from just one type?

upvoted 0 times

...

Sherrell

6 months ago

Definitely C, comprehensive cyber-threat intelligence is key!

upvoted 0 times

...

Dawne

6 months ago

I feel like it could also be threat actors, but that seems more focused on the people behind the attacks rather than the tools and methods.

upvoted 0 times

...

Bernardo

6 months ago

I practiced a similar question, and I think the answer might be threat data feeds. They often provide detailed analysis, right?

upvoted 0 times

...

Sherita

7 months ago

I'm not too sure, but I remember something about threat indicators being important. Could it be providers of threat indicators?

upvoted 0 times

...

Corinne

7 months ago

I think Sarah is likely getting her information from providers of comprehensive cyber-threat intelligence. That seems to cover everything she needs.

upvoted 0 times

...

Anisha

7 months ago

I've got a good feeling about this one. The key details in the question are the types of information the SOC analyst collects, like threat indicators and malware analysis. That points me towards the providers of comprehensive cyber-threat intelligence as the most likely answer.

upvoted 0 times

...

Golda

7 months ago

I'm a little confused by this question. The options seem pretty similar, and I'm not sure I fully understand the differences between them. I'll need to re-read the question stem and options a few times to try to figure out the best answer.

upvoted 0 times

...

Zona

7 months ago

Okay, let's see. The question says the SOC analyst collects things like threat indicators, malware samples, and DDoS attack methods. Based on that, I'm thinking the answer is probably providers of comprehensive cyber-threat intelligence, since that seems to cover the broad range of information mentioned.

upvoted 0 times

...

Alaine

8 months ago

Hmm, I'm a bit unsure about this one. The question mentions different types of information the SOC analyst collects, but I'm not sure which option best matches that. I'll need to think it through carefully.

upvoted 0 times

...

Alesia

8 months ago

This seems like a straightforward question about the types of sharing partners that provide threat information to a SOC analyst. I'll carefully read through the options and think about the specific details mentioned in the question stem.

upvoted 0 times

...

Remedios

1 year ago

I think it might be providers of threat indicators as well, as they provide validated and prioritized threat indicators.

upvoted 0 times

...

Frank

1 year ago

Haha, I bet Sarah wishes she could just ask the threat actors directly for information. That would be a bold strategy, but probably not the most effective approach.

upvoted 0 times

Carlee

12 months ago

User 4: Providers of comprehensive cyber-threat intelligence would be a more reliable source.

upvoted 0 times

...

Lashawna

12 months ago

User 3: Yeah, getting information from threat actors directly could be risky.

upvoted 0 times

...

Aretha

12 months ago

User 2: I think Sarah made the right choice by contacting the providers of threat data feeds.

upvoted 0 times

...

Isabelle

1 year ago

User 1: Haha, that would definitely be a bold move!

upvoted 0 times

...

Kristofer

1 year ago

I agree with Katy, comprehensive cyber-threat intelligence providers could be the source of information.

upvoted 0 times

...

Katy

1 year ago

I believe it could also be providers of comprehensive cyber-threat intelligence.

upvoted 0 times

...

Stephania

1 year ago

This seems straightforward. I don't know why anyone would even consider options A, B, or D. It's clearly C all the way!

upvoted 0 times

...

Bronwyn

1 year ago

I agree with Aron. Sarah needs access to a broad range of threat intelligence to effectively support the security operations of the organization.

upvoted 0 times

Ezekiel

1 year ago

C) Providers of comprehensive cyber-threat intelligence

upvoted 0 times

...

Margo

1 year ago

B) Providers of threat indicators

upvoted 0 times

...

Denae

1 year ago

C) Providers of comprehensive cyber-threat intelligence

upvoted 0 times

...

Wade

1 year ago

A) Providers of threat data feeds

upvoted 0 times

...

Gilma

1 year ago

B) Providers of threat indicators

upvoted 0 times

...

Tony

1 year ago

A) Providers of threat data feeds

upvoted 0 times

...

Laine

1 year ago

I think Sarah obtained the required information from providers of threat data feeds.

upvoted 0 times

...

Aron

1 year ago

The correct answer is C) Providers of comprehensive cyber-threat intelligence. This includes information on threat indicators, malware samples, botnets, and other malicious tools.

upvoted 0 times