Study. uk . com
  1. Home
  2. All questions
  3. Question 61

CompTIA Security+ study material · question 61 of 611

An analyst receives a report marked TLP:AMBER. Who may they share it with?

  1. Anyone, subject to copyright
  2. Their own organisation and its clients, on a need-to-know basis
  3. Only themselves, with no further disclosure
  4. Anyone in the wider security community
Show the answer

Answer: B. Their own organisation and its clients, on a need-to-know basis

AMBER permits the organisation and its clients on need-to-know. AMBER+STRICT would remove the clients.

Source: FIRST Traffic Light Protocol (FIRST) — FIRST TLP 2.0 § 3 TLP definitions

Challenge yourself on this topic → Study as cards