What does TAXII define?

• A. A standard for sharing cyber threat information using services and message exchanges designed to handle STIX information
• B. A standard for threat data encryption
• C. A language for describing malware behaviors
• D. A method for secure password storage

Answer: (A)

TAXII defines a standard for sharing cyber threat information through a suite of services and message exchanges designed to carry STIX data. It provides the transport, discovery, and collection mechanisms that enable security teams to exchange indicators, tactics, techniques, and other threat intel in a consistent, automatable way. STIX supplies the data model for describing the threat information, while TAXII handles how that information is moved between producers and consumers. This is not about encrypting threat data, describing malware behaviors in a dedicated language, or securely storing passwords, which is why TAXII is the best-fit description for what the standard defines.