CNDA Threat Intelligence and Vulnerability Management

Question 1

Which threat intelligence sharing format is a community standard for expressing cyber threat indicators in a structured, machine-readable way?

Accepted Answer

STIX (Structured Threat Information eXpression)

Answer

CEF (Common Event Format)

Answer

LEEF (Log Event Extended Format)

Answer

NetFlow

Question 2

What does CVSS (Common Vulnerability Scoring System) measure?

Accepted Answer

The severity and characteristics of a software vulnerability on a 0-10 scale

Answer

The cost to remediate a vulnerability

Answer

The number of systems affected by a vulnerability

Answer

The time required to exploit a vulnerability

Question 3

Which vulnerability management metric tracks the average time from a patch being available to it being deployed?

Accepted Answer

Mean Time to Patch (MTTP) or patch cadence

Answer

MTTD

Answer

CVSS score

Answer

Threat exposure window

Question 4

What is a zero-day vulnerability?

Accepted Answer

A vulnerability unknown to the vendor for which no patch exists

Answer

A vulnerability that has been public for zero days before patching

Answer

A vulnerability with a CVSS score of zero

Answer

A vulnerability in zero-trust architecture

Question 5

Which type of threat intelligence is MOST actionable for a SOC analyst responding to an active incident?

Accepted Answer

Operational intelligence (specific indicators like malicious IPs and hashes)

Answer

Strategic intelligence (geopolitical threat landscape)

Answer

Tactical intelligence (TTPs of threat actors targeting your sector)

Answer

Technical intelligence (vulnerability details)

Question 6

What is the primary purpose of vulnerability scanning in a CNDA security program?

Accepted Answer

To identify and prioritize known weaknesses in systems before attackers can exploit them

Answer

To exploit vulnerabilities in a controlled manner

Answer

To monitor network traffic for intrusions

Answer

To inventory software licenses