Certified Information Security Manager (CISM) — Question 698

Which of the following is the BEST way to obtain reliable information to help an incident response team maintain awareness of emerging security threats and vulnerabilities?

Answer options

• A. Subscribe to a reputed threat intelligence group.
• B. Assign staff to engage with social media hacking groups.
• C. Review alerts from a security information and event management (SIEM) system.
• D. Implement vulnerability scanners.

Correct answer: A

Explanation

Subscribing to a reputed threat intelligence group provides curated and timely information about emerging threats and vulnerabilities, making it the best option. Engaging with social media hacking groups may expose the team to unreliable or misleading information. While reviewing SIEM alerts and implementing vulnerability scanners are important, they do not specifically focus on emerging threats like threat intelligence subscriptions do.