300-215 Question 225
Single answerDuring an investigation, you are provided with threat intelligence data in STIX format. Your team wants to share this data with a partner organization securely and in a structured manner using an automated system. Which protocol would be most appropriate for this purpose?
- A
TAXII
- B
SNMP
- C
SMTP
- D
HTTPS
Show answer and explanation
Correct answer: A
Explanation
TAXII is the correct protocol for securely sharing structured threat intelligence data, such as that in STIX format. It is specifically designed for this purpose, enabling automated and standardized communication between organizations or systems.
- A. Correct.
TAXII (Trusted Automated Exchange of Indicator Information) is the standard protocol designed to securely share threat intelligence data in structured formats such as STIX.
- B. Incorrect.
SNMP (Simple Network Management Protocol) is used for monitoring and managing network devices, not for sharing threat intelligence.
- C. Incorrect.
SMTP (Simple Mail Transfer Protocol) is used for sending email messages, not for securely sharing structured threat intelligence.
- D. Incorrect.
HTTPS (Hypertext Transfer Protocol Secure) is a protocol for secure communication over the web, but it is not specifically designed for sharing threat intelligence like TAXII.