Exam 350-701 topic 1 question 350 discussion

Correct is : B & E: TAXII, short for Trusted Automated eXchange of Intelligence Information, defines how cyber threat information can be shared via services and message exchanges. It is designed specifically to support STIX information, which it does by defining an API that aligns with common sharing models. The three principal models for TAXII include: TAXII defines four services. Users can select and implement as many as they require, and combine them for different sharing models.

I will go with D & E

Answer b,e

I would choose B and D, but the word anomaly does not fit in with TAXII. E is not a function of TAXII, but it's interoperability is with STIX important, and I hope that the guys who wrote the question, had that in their focus.

Supports STIX, main feature. B is good description and matches phrasing of question.

STIX support does not determines Sharing. I think BD is more accurate to this question.

E for SURE... and ging with B... BE final answer. TAXI acronym... A is automated, not anomaly.

D isn't correct - STIX exchanges threat intelligence information, not anomaly intelligence information. As per the link Anonymous983475 provided, its quite interesting that the company that defines STIX and TAXII is called "Anomali".

TAXII, short for Trusted Automated eXchange of Intelligence Information, defines how cyber threat information can be shared via services and message exchanges. It is designed specifically to support STIX information, which it does by defining an API that aligns with common sharing models. https://www.anomali.com/resources/what-are-stix-taxii#:~:text=TAXII%2C%20short%20for%20Trusted%20Automated,aligns%20with%20common%20sharing%20models.

TAXII, short for Trusted Automated eXchange of Intelligence Information, defines how cyber threat information can be shared via services and message exchanges. It is designed specifically to support STIX information, which it does by defining an API that aligns with common sharing models.

E is a feature not a function I think BD is correct

https://www.anomali.com/resources/what-are-stix-taxii --- TAXII, short for Trusted Automated eXchange of Intelligence Information, defines how cyber threat information can be shared via services and message exchanges. It is designed specifically to support STIX information, which it does by defining an API that aligns with common sharing models. The three principal models for TAXII include:

As per this Cisco documentation, https://www.cisco.com/c/en/us/td/docs/security/stealthwatch/global-threat-alerts-in-secure-network-analytics/m_stix-taxii-service.html, I think B and D is correct. The question is asking for two functions (use) of TAXII in threat intelligence sharing. E seems to be more of a feature.