Security Policies and Procedures →mediumMultiple ChoiceObjective-mapped

200-201 Security Policies and Procedures Practice Question

An organization uses STIX and TAXII to share threat intelligence with an ISAC. What is the purpose of TAXII in this scenario?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

It provides a method to transport threat intelligence

TAXII is a protocol for exchanging STIX data.

Answer analysis

For each option: why learners choose it and why it is or isn't the right answer here.

✗
It stores threat intelligence locally
Why it's wrong here
MISP or similar platforms store intelligence.
✗
It is a platform for malware analysis
Why it's wrong here
TAXII is not a platform.
✓
It provides a method to transport threat intelligence
Why this is correct
TAXII is the transport mechanism.
✗
It defines the format for threat indicators
Why it's wrong here
STIX defines the format.

Go deeper