200-201 Security Policies and Procedures Practice Question

Which TWO standards/protocols are directly associated with threat intelligence sharing as defined by the CyberOps Associate curriculum?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

TAXII

STIX and TAXII are the primary standards for threat intelligence sharing. OpenIOC and MISP are related but not the core standards defined.

Answer analysis

For each option: why learners choose it and why it is or isn't the right answer here.

✗
ISO 27001
Why it's wrong here
ISO 27001 is a security management standard, not threat intelligence sharing.
✓
TAXII
Why this is correct
Trusted Automated eXchange of Indicator Information is a protocol for sharing STIX.
✗
OpenIOC
Why it's wrong here
OpenIOC is a format for indicators of compromise, but not a primary standard in the curriculum.
✓
STIX
Why this is correct
Structured Threat Information Expression is a language for threat intelligence.
✗
MISP
Why it's wrong here
MISP is a platform, not a standard or protocol.

Go deeper