Which of the following are examples of information sources?

• A. Internal logs
• B. External CERT/ISAC networks
• C. Research organizations
• D. All of the above

Answer: (D)

In cybersecurity, information sources come from a mix of internal data, external alerts, and published research. Internal logs are a direct record of what happens on your own systems and networks, capturing events, user activity, and system failures that you can analyze to detect anomalies and investigate incidents. External CERT/ISAC networks provide centralized, timely advisories, vulnerability notices, and indicators of compromise shared across organizations, which helps you stay informed about threats that affect the wider community beyond your own environment. Research organizations—universities, think tanks, and security researchers—offer in-depth analyses, empirical findings, and new insights into threat actors, exploits, and defensive techniques, enriching your understanding and guiding proactive defenses. By combining these diverse sources, you gain a more complete and actionable picture of the threat landscape. All of these are information sources.