Exam 312-85 topic 1 question 21 discussion

Actual exam question from ECCouncil's 312-85

Question #: 21
Topic #: 1

Jian is a member of the security team at Trinity, Inc. He was conducting a real-time assessment of system activities in order to acquire threat intelligence feeds. He acquired feeds from sources like honeynets, P2P monitoring. infrastructure, and application logs.
Which of the following categories of threat intelligence feed was acquired by Jian?

A. Internal intelligence feeds
B. External intelligence feeds
C. CSV data feeds
D. Proactive surveillance feeds

Show Suggested Answer

Suggested Answer: D 🗳️

by clouddemohk at Nov. 30, 2022, 12:31 p.m.

Comments

Submit Cancel

clouddemohk

Highly Voted 2 years, 2 months ago

D.Proactive surveillance feeds Proactive surveillance feeds include information that is acquired using the real-time assessment of system activities and events. It enables appropriate defensive measures and immediate response to such activities. These feeds also enable the security teams to build defensive strategies in advance keeping in mind the possible intrusion attempts and securing the vulnerabilities visible in the system. These sources include the following: o Honeynets o Malware forensics o Brand monitoring o P2P monitoring o DNS monitoring o Watchlist monitoring o Infrastructure and application logs

upvoted 9 times

...