Exam 312-85 topic 1 question 3 discussion

The Traffic Light Protocol (TLP) is used to control how sensitive information is shared, especially in threat intelligence contexts. Here's how the TLP colors are defined: 🔴 TLP:RED – Restricted to specific individuals only. Information cannot be shared beyond the original recipients. 🟡 TLP:AMBER – Can be shared within a specific organization or community on a need-to-know basis. This is the correct answer to Kathy’s situation — sharing only within a particular community. 🟢 TLP:GREEN – Can be shared within the organization and its partners or peers in the community, but not publicly. ⚪ TLP:WHITE – Unrestricted. Can be shared freely, even publicly.

I think sensitive and particular community is key here and would lead you to answer Amber. If data is sensitive, you wouldn't share with a partner community as noted with Green.

Answer is C as per CTIA (page 584)

green for community ; amber for organization

Has anyone confirmed the answer is actually C? As it mentions 'sensitive information', I am inclined to agree with emoram, even though it mentions 'community'. TLP GREEN is for awareness only, with no 'risk to privacy, reputation, or operations if shared outside of the organization[s] involved'.

Answer is C as per CTIA (page 584)

Answer is C As per Module 06 Page 584 of CTIA Courseware

I think the key part here is the sensitive data explicitly mentioned on the question, and therefore it is amber due to the implicit risk it represents on sharing that information with the wrong audience. Green is for awareness. Pag 584 in ECC material

Its actually green. if you read the definition of TLP green it mentions that "limited disclosure, Restricted to community only"