CompTIA CySA+ (CS0-003) — Question 492

An analyst has been asked to validate the potential risk of a new ransomware campaign that the Chief Financial Officer read about in the newspaper. The company is a manufacturer of a very small spring used in the newest fighter jet and is a critical piece of the supply chain for this aircraft. Which of the following would be the best threat intelligence source to learn about this new campaign?

Answer options

• A. Information sharing organization
• B. Blogs/forums
• C. Cybersecurity incident response team
• D. Deep/dark web

Correct answer: A

Explanation

The best source of threat intelligence in this scenario is an Information sharing organization, as it provides timely and relevant data about emerging threats like ransomware campaigns. Blogs and forums may not always have accurate information, while a Cybersecurity incident response team typically reacts to incidents rather than providing proactive intelligence. The deep/dark web might contain information but is less reliable and not focused on immediate threats to business operations.