CompTIA SecurityX (CAS-005) — Question 72

A financial technology firm works collaboratively with business partners in the industry to share threat intelligence within a central platform. This collaboration gives partner organizations the ability to obtain and share data associated with emerging threats from a variety of adversaries. Which of the following should the organization most likely leverage to facilitate this activity?
(Choose two.)

Answer options

• A. CWPP
• B. YARA
• C. ATT&CK
• D. STIX
• E. TAXII
• F. JTAG

Correct answer: D, E

Explanation

STIX (Structured Threat Information Expression) is used for representing threat intelligence, while TAXII (Trusted Automated eXchange of Indicator Information) is designed for sharing that intelligence between organizations. The other options, such as CWPP and YARA, focus on different aspects of security and may not directly facilitate the sharing of threat data as effectively as STIX and TAXII.