Marie, a threat analyst at an organization named TechSavvy, was asked to perform operational threat intelligence analysis to get contextual information about security events and incidents.
Which of the following sources does Marie need to use to perform operational threat intelligence analysis?

• A. Activity-related attacks, social media sources, chat room conversations
• B. Malware indicators, network indicators, e-mail indicators
• C. Attack group reports, attack campaign reports, incident reports, malware samples
• D. OSINT, security industry white papers, human contacts

Michael, a threat analyst, works in an organization named TechTop, was asked to conduct a cyber-threat intelligence analysis. After obtaining information regarding threats, he has started analyzing the information and understanding the nature of the threats.
What stage of the cyber-threat intelligence is Michael currently in?

• A. Known unknowns
• B. Unknowns unknown
• C. Known knowns
• D. Unknown unknowns

ABC is a well-established cyber-security company in the United States. The organization implemented the automation of tasks such as data enrichment and indicator aggregation. They also joined various communities to increase their knowledge about the emerging threats. However, the security teams can only detect and prevent identified threats in a reactive approach.
Based on threat intelligence maturity model, identify the level of ABC to know the stage at which the organization stands with its security and vulnerabilities.

• A. Level 3: CTI program in place
• B. Level 2: increasing CTI capabilities
• C. Level 1: preparing for CTI
• D. Level 0: vague where to start

Two cybersecurity teams from different organizations joined forces to combat a rapidly evolving malware campaign targeting their industry. They exchange real-time information about the attackers' techniques, compromised systems, and immediate defensive actions. What type of threat intelligence sharing characterizes this collaboration?

• A. Sharing technical threat intelligence
• B. Sharing strategic threat intelligence
• C. Sharing operational threat intelligence
• D. Sharing tactical threat intelligence

What term describes the trust establishment process, wherein the first organization relies on a body of evidence presented to the second organization, and the level of trust is contingent upon the degree and quality of evidence provided by the initiating organization?

• A. Mediated trust
• B. Direct historical trust
• C. Mandated trust
• D. Validated trust