CIS-SIR
Security Incident and Threat Intelligence Integrations
medium
Question 5 of 28

Which statement correctly describes WHOISIQ enrichment behavior?

AURL and domain observables are enriched automatically when incidents are created, while manual lookups can be used for email addresses, organization names, phone numbers, or mailing addresses
BIP addresses and URLs are enriched every five minutes by WHOISIQ
CCertificate serial numbers are the only automatic WHOISIQ lookup type
DWHOISIQ requires only the Security Incident Response plugin and nothing else

More Security Incident and Threat Intelligence Integrations Questions

28 questions

Full Certified Implementation Specialist - Security Incident Response Practice Test

All topics covered

All Certified Implementation Specialist - Security Incident Response Questions

Browse by topic

Related Questions

Which observable types are enriched by the Shodan integration?...

easy

An analyst wants to manually send observables from a security incident to TISC. Which path is correc...

medium

When an analyst uses Send Observable to TISC, which data is captured during the push?...

medium

Which role performs Microsoft Graph alert profile setup and field mapping for security incidents?...

medium

Before Microsoft Graph Security API alert ingestion can be configured, which product and dependency ...

hard
View all Security Incident and Threat Intelligence Integrations questions

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.

Sign in to join the discussion

Sign InCreate free account