CNDA Threat Intelligence and Vulnerability Management

Question 1

Which threat intelligence sharing format is a community standard for expressing cyber threat indicators in a structured, machine-readable way?

Accepted Answer

STIX (Structured Threat Information eXpression)

Answer

STIX is an open standard for representing CTI, including threat actors, malware, attack patterns, and IoCs in a structured format.

Question 2

What does CVSS (Common Vulnerability Scoring System) measure?

Accepted Answer

The severity and characteristics of a software vulnerability on a 0-10 scale

Answer

CVSS scores vulnerabilities 0-10 based on attack vector, complexity, privileges required, user interaction, and impact metrics.

Question 3

Which vulnerability management metric tracks the average time from a patch being available to it being deployed?

Accepted Answer

Mean Time to Patch (MTTP) or patch cadence

Answer

Mean Time to Patch measures the speed of an organization's patching program, with shorter times reducing the exposure window for known vulnerabilities.

Question 4

What is a zero-day vulnerability?

Accepted Answer

A vulnerability unknown to the vendor for which no patch exists

Answer

A zero-day is a previously unknown vulnerability that the vendor has had zero days to patch, making it especially dangerous since no fix exists.

Question 5

Which type of threat intelligence is MOST actionable for a SOC analyst responding to an active incident?

Accepted Answer

Operational intelligence (specific indicators like malicious IPs and hashes)

Answer

Operational intelligence provides specific, immediately actionable IoCs such as malicious IPs, domains, and file hashes that can be directly used in detection tools.

CNDA - Certified Network Defense Architect Practice Test

CNDA - Certified Network Defense Architect Practice Test

CNDA Threat Intelligence and Vulnerability Management