Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

WGU (KFO1/D488) Cybersecurity Architecture and Engineering Exam - Topic 2 Question 14 Discussion

An on-call security engineer has been notified after business hours that a possible threat could be impacting production applications.Which type of threat intelligence should be used by first responders?
A) Tactical
B) Commodity malware
C) Operational
D) Strategic

WGU (KFO1/D488) Cybersecurity Architecture and Engineering Exam - Topic 2 Question 14 Discussion

Actual exam question for WGU's WGU (KFO1/D488) Cybersecurity Architecture and Engineering exam
Question #: 14
Topic #: 2
[All WGU (KFO1/D488) Cybersecurity Architecture and Engineering Questions]

An on-call security engineer has been notified after business hours that a possible threat could be impacting production applications.

Which type of threat intelligence should be used by first responders?

Show Suggested Answer Hide Answer
Suggested Answer: A

The correct answer is A --- Tactical.

Based on WGU Cybersecurity Architecture and Engineering (KFO1 / D488) study material, tactical threat intelligence provides technical details such as indicators of compromise (IOCs), IP addresses, file hashes, domain names, and other evidence needed to detect and respond to threats immediately. This type of intelligence is used by security teams to perform real-time monitoring and incident response.

Operational intelligence (C) addresses campaigns or actor behavior but is not immediately actionable. Strategic intelligence (D) provides high-level, long-term threat trends. Commodity malware (B) refers to low-level malware types, not intelligence classifications.

Reference Extract from Study Guide:

'Tactical threat intelligence focuses on technical indicators of compromise (IOCs) and immediate actionable information that responders use to detect and contain active threats.'

--- WGU Cybersecurity Architecture and Engineering (KFO1 / D488), Threat Intelligence Concepts

=============================================


Contribute your Thoughts:

0/2000 characters
I’m leaning towards tactical intelligence because it seems like it would provide actionable insights for the engineers in a crisis.
upvoted 0 times
...
Alita
5 days ago
I feel like this is similar to a practice question we did on incident response. I think operational is the right choice, but I could be mixing it up with strategic.
upvoted 0 times
...
Raina
10 days ago
I'm not entirely sure, but I remember something about tactical intelligence being more about specific attacks. Could that apply here?
upvoted 0 times
...
Glennis
15 days ago
I think the first responders should use operational threat intelligence since it focuses on immediate threats and incidents.
upvoted 0 times
...

Save Cancel