Certified Threat Intelligence Analyst (CTIA) — Question 47
A threat analyst wants to incorporate a requirement in the threat knowledge repository that provides an ability to modify or delete past or irrelevant threat data.
Which of the following requirement must he include in the threat knowledge repository to fulfil his needs?
Answer options
- A. Evaluating performance
- B. Protection ranking
- C. Searchable functionality
- D. Data management
Correct answer: D
Explanation
The correct answer is D, as data management encompasses the processes of maintaining, modifying, and deleting data, which is exactly what the analyst needs. The other options do not directly address the requirement to manage the data effectively; they focus on performance evaluation, ranking protection levels, and search capabilities.