Certified Threat Intelligence Analyst (CTIA) — Question 51

In which of the following levels of the threat hunting maturity model (HMM) does an organization use threat intelligence to search for anomalies in the network, follow the latest threat reports gathered from open and closed sources, and use open-source tools for analysis?

Answer options

Correct answer: A

Explanation

The correct answer is A because Level 2: Procedural involves the use of threat intelligence to actively search for anomalies and analyze threats using various tools. The other levels either do not involve the same level of proactive threat intelligence usage (Level 1) or are focused on more advanced practices (Levels 3 and 4) that go beyond the procedural use of intelligence.