Certified Threat Intelligence Analyst (CTIA) — Question 1

Kathy wants to ensure that she shares threat intelligence containing sensitive information with the appropriate audience. Hence, she used traffic light protocol (TLP).
Which TLP color would you signify that information should be shared only within a particular community?

Answer options

• A. Red
• B. White
• C. Green
• D. Amber

Correct answer: C

Explanation

The correct answer is C (Green), as it indicates that information can be shared within a specific community or group. Option A (Red) signifies that the information must not be shared at all, while B (White) allows for unrestricted sharing, and D (Amber) indicates that the information should be shared with caution, typically among a limited audience.