CompTIA A+ Core 1 (CA1-005) — Question 3

A financial technology firm works collaboratively with business partners in the industry to share threat intelligence within a central platform. This collaboration gives partner organizations the ability to obtain and share data associated with emerging threats from a variety of adversaries. Which of the following should the organization most likely leverage to facilitate this activity? (Choose two.)

Answer options

• A. CWPP
• B. YARA
• C. ATT&CK
• D. STIX
• E. TAXII
• F. JTAG

Correct answer: D, E

Explanation

STIX (Structured Threat Information Expression) is a language for describing threat information in a standardized format, making it easier to share among partners. TAXII (Trusted Automated eXchange of Indicator Information) is a protocol that enables the sharing of cyber threat information over the internet. The other options, while useful for security purposes, do not specifically focus on the structured sharing of threat data like STIX and TAXII do.