Threat Intelligence and Landscape Questions

Covers understanding of the current and evolving cyber threat landscape, including major threat actor types such as nation states, organized crime groups, and hacktivists, as well as advanced persistent threats and common attack techniques. Candidates should be able to describe tactics, techniques, and procedures and map them to a recognized framework such as the MITRE ATTACK framework. This topic includes awareness of industry and sector specific risks that affect cloud native environments, supply chain security, internet of things devices, and large technology organizations. It also covers how to read and operationalize threat intelligence reports and feeds, perform threat hunting and detection engineering, derive indicators of compromise, prioritize risks for remediation, and adapt security architecture and controls as threats emerge. Familiarity with the threat intelligence lifecycle, information sharing practices, and concrete examples of translating intelligence into detection, prevention, and incident response measures is expected.