Question 9 of 10Pro Only
Explain the concept of intelligence-driven detection and response. How do you use the Cyber Kill Chain and MITRE ATT&CK framework together with threat intelligence to build a layered detection strategy? Provide a practical example of how intelligence about a specific threat actor would change your detection and response approach.
Sample answer preview
Intelligence-driven detection and response is a strategic approach where threat intelligence directly shapes what you detect, how you prioritize, and how you respond. Rather than building detections based solely on generic best practices or compliance requirements, this approach…
intelligence-driven defenseCyber Kill ChainMITRE ATT&CKlayered detectiondetection engineeringpurple team