Kopieren und bearbeiten

SFPC 4

Beschreibung

Security
Arthur Casto
Quiz von Arthur Casto, aktualisiert more than 1 year ago
Arthur Casto
Erstellt von Arthur Casto vor mehr als 5 Jahre
10345
3
0

Zusammenfassung der Ressource

Frage 1

Frage
ISCM strategy at this level is focused on ensuring that all system-level security controls are implemented correctly, operate as intended, produce the desired outcome with respect to meeting the security requirements for the system, and continue to be effective over time.
Antworten
  • Tier 1
  • Tier 2
  • Tier 3

Frage 2

Frage
Which of the following are security-focused configuration management (SecCM) roles in risk management?
Antworten
  • Ensuring that adjustments to the system configuration do not adversely affect the security of the information system
  • Establishing configuration baselines and tracking, controlling, and managing aspects of business development
  • Ensuring that adjustments to the system configuration do not adversely affect the organizations operations
  • Establishing a firm schedule for security patch updates every six months

Frage 3

Frage
This security Configuration Management (CM) control includes physical and logical access controls and prevents the installation of software and firmware unless verified with an approved certificate.
Antworten
  • Configuration Change Control
  • Access Restrictions for Change
  • Configuration Settings
  • Least Functionality
  • Software Usage Restrictions
  • User-Installed Software

Frage 4

Frage
This security Configuration Management (CM) control ensures that software use complies with contract agreements and copyright laws, tracks usage, and is not used for unauthorized distribution, display, performance, or reproduction.
Antworten
  • Configuration Change Control
  • Access Restrictions for Change
  • Configuration Settings
  • Least Functionality
  • Software Usage Restrictions
  • User-Installed Software

Frage 5

Frage
This security Configuration Management (CM) control involves the systematic proposal, justification, implementation, testing, review, and disposition of changes to the systems, including system upgrades and modifications.
Antworten
  • Configuration Change Control
  • Access Restrictions for Change
  • Configurations Settings
  • Least Functionality
  • Software Usage Restrictions
  • User-Installed Software

Frage 6

Frage
This security Configuration Management (CM) control applies to the parameters that can be changed in hardware, software, or firmware components that affect the security posture and/or funtionality of the system, including registry settings, account/directory permission setting, and settings for functions, ports and protocols.
Antworten
  • Configuration Change Control
  • Access Restrictions for Change
  • Configuration Settings
  • Least Functionality
  • Software Usage Restrictions
  • User-Installed Software

Frage 7

Frage
Which of the following describes the role of the National Industrial Security Program (NISP) in continuous monitoring?
Antworten
  • The NISP ensures that requirements for continuous monitoring are undertaken by the government before any classified work may begin
  • The NISP ensures the partnership between the federal government and private industry places the burden of risk on the subcontractors.
  • The NISP ensures that restrictions on continuous monitoring activities are in place before any classified work may begin.
  • The NISP ensures that monitoring requirements, restrictions, and safeguards that industry must follow are in place before any classified work may begin.

Frage 8

Frage
Which of the following describes the relationship between configuration management controls and continuous monitoring?
Antworten
  • The configuration management process ensures that patches are applied on systems once a year as a continuous monitoring activity.
  • Implementing information system changes almost always results in some adjustment to the system configuration that requires continuous monitoring of security controls.
  • The configuration management process ensures that a schedule for continuous monitoring is in place for anticipated future interconnected systems.

Frage 9

Frage
Which of the following is a role of risk management in continuous monitoring?
Antworten
  • Risk management in continuous monitoring ensures that information security solutions are broad-based, consensus-driven, and address the ongoing needs of and risks to the government and industry.
  • Cybersecurity requirements are managed through the risk management framework while continuous monitoring activities address password changes and Help Desk tasks.
  • Risk management facilitates an organization-wide vision for security but does not impact continuous monitoring daily and weekly activities.

Frage 10

Frage
Select ALL the correct responses. Which of the following describe continuous monitoring capabilities for detecting threats and mitigating vulnerabilities?
Antworten
  • Conducting frequent audits
  • Not relying on firewalls to protect against all attacks
  • Disseminating a fillable form to information system owners to log suspicious activity
  • Reporting intrusion attempts

Frage 11

Frage
Which of the following describes how the Information System Continuous Monitoring (ISCM) strategy supports the Tier 2 MISSION/BUSINESS PROCESSES approach to risk management?
Antworten
  • Tier 2 ISCM strategies focus on ensuring that all system-level security controls are implemented correctly, operate as intended, produce the desired outcome with respect to meeting the security requirements for the system, and continue to be effective over time.
  • Tier 2 ISCM strategies focus on the controls that address the establishment and management of the organization’s information security program, including establishing the minimum frequency with which each security control or metric is to be assessed or monitored.
  • Tier 2 ISCM strategies focus on high-level information security governance policy as it relates to risk to the organization as a whole, to its core missions, and to its business functions.

Frage 12

Frage
Which of the following is an example of how counterintelligence and cybersecurity personnel support continuous monitoring?
Antworten
  • Counterintelligence and cybersecurity personnel test automated tools and make recommendations to industry and DoD organizations.
  • Through aggregation and analysis of Suspicious Network Activity via cyber intrusion, viruses, malware, backdoor attacks, acquisition of user names and passwords, and similar targeting, the DSS CI Directorate produces and disseminates reports on trends in cyberattacks and espionage.

Frage 13

Frage
Which of the following describes how audit logs support continuous monitoring?
Antworten
  • Security auditing is a fundamental activity in continuous monitoring in order to schedule automatic security maintenance.
  • Security auditing is a fundamental activity in continuous monitoring in order to ensure access restriction controls are in place on an information system.
  • Security auditing is a fundamental activity in continuous monitoring in order to determine what activities occurred and which user or process was responsible for them on an information system.

Frage 14

Frage
Which of the following identifies how the Risk Management Framework (RMF) supports risk management?
Antworten
  • The RMF process provides a flexible approach with decision-making at Tier 3.
  • The RMF process ensures that business process decisions can override user information system concerns.
  • The RMF process emphasizes continuous monitoring and timely correction of deficiencies.

Frage 15

Frage
Select ALL the correct responses. Which of the following are key information provided in a security audit trail analysis?
Antworten
  • Budgeting and cost controls not operating as intended
  • Unsuccessful accesses to security-relevant objects and directories
  • Successful and unsuccessful logons/logoffs
  • Denial of access for excessive logon attempts

Frage 16

Frage
Which of the following fundamental concepts does continuous monitoring support that means DoD information technology is managed to minimize shared risk by ensuring the security posture of one system is not undermined by vulnerabilities of interconnected systems?
Antworten
  • Keep up-to-date inventories
  • Interoperability and operational reciprocity
  • Force users to use encryption

Frage 17

Frage
Which of the following ensures that a process is in place for authorized users to report all cybersecurity-related events and potential threats and vulnerabilities and initiates protective or corrective measures when a cybersecurity incident or vulnerability is discovered?
Antworten
  • Program Manager/System Manager
  • Information System Owner
  • Information System Security Officer
  • User Representative

Frage 18

Frage
Which of the following are the initial steps for finding the Security Event Log on a computer running Windows 7?
Antworten
  • Select Control Panel from the Windows Start menu and then select the Security Event Log
  • Select Control Panel from the Windows Start menu and then select Windows Log
  • Select Control Panel from the Windows Start menu and then select the Administrative Tools link
  • Select Control Panel from the Windows Start menu and then select the System and Security link

Frage 19

Frage
During which of the following Risk Management Framework steps does continuous monitoring take place?
Antworten
  • Step 1, categorize the system
  • Step 4, assess the controls
  • Step 5, authorize the information system
  • Step 6, monitor the security controls

Frage 20

Frage
Which of the following describes the role of counterintelligence and cybersecurity in identifying threats to DoD information systems?
Antworten
  • Counterintelligence and cybersecurity personnel ensure the contractor’s Information System Security Manager checks for unusual activity on a classified system at least once during the contract period of performance.
  • Counterintelligence and cybersecurity personnel share and report unauthorized accesses attempts, denial of service attacks, exfiltrated data, and other threats/vulnerabilities.
  • Counterintelligence and cybersecurity personnel ensure the contractor’s Information System Security Officer checks for unusual activity on a classified system at least once during the contract period of performance.

Frage 21

Frage
Given the information system continuous monitoring (ISCM) process, in which step is security-related information required for metrics, assessments, and reporting collected and, where possible, the collection, analysis, and reporting of data is automated?
Antworten
  • Step 1: Define an ISCM strategy
  • Step 2: Establish an ISCM program
  • Step 3: Implement an ISCM program
  • Step 4: Analyze data and report findings
  • Step 5: Respond to findings
  • Step 6: Review and update the monitoring program

Frage 22

Frage
Which of the following configuration management controls supporting continuous monitoring activities focuses on configuring the IS to provide only essential capabilities to limit risk and to prevent unauthorized connection of devices, unauthorized transfer of information, or unauthorized tunneling?
Antworten
  • Baseline Configuration
  • Least Functionality
  • Software Usage Restrictions
  • Information System Component Inventory

Frage 23

Frage
Select ALL the correct responses. Which of the following are requirements for audits as outlined in the National Industrial Security Program Operating Manual (NISPOM)?
Antworten
  • Audit trail contents must be protected against unauthorized access, modification, or deletion.
  • Audit trail analysis and reporting of security events must be performed annually.
  • Audit trail contents should be made accessible to the information system user upon written request.
  • Audit trail analysis and reporting of security events must be performed at least weekly.

Frage 24

Frage
Which of the following describes the how the patch management process integrates with security-focused configuration management (SecCM)?
Antworten
  • The patch management process integrates with SecCM once a year when system maintenance is performed.
  • The patch management process integrates with SecCM on a regular basis when restrictions must be lifted so that all system users can download software updates.
  • The patch management process integrates with SecCM when performing a Security Impact Analysis to determine whether unanticipated effects from a patch resulted in a change to existing security controls.

Frage 25

Frage
The patch management process integrates with SecCM when performing a Security Impact Analysis to determine whether unanticipated effects from a patch resulted in a change to existing security controls.
Antworten
  • Phase 1: Planning
  • Phase 2: Identifying and Implementing Configurations
  • Phase 3: Controlling Configuration Changes
  • Phase 4: Monitoring

Frage 26

Frage
Select ALL the correct responses. Which of the following are sources of information system change that security-focused configuration management (SecCM) addresses to mitigate risk?
Antworten
  • New, enhanced, corrected, or updated hardware and software capabilities
  • Changing business functions
  • Help Desk tickets
  • Patches for correcting software flaws and other errors to existing components
  • New security threats

Frage 27

Frage
Which of the following requires that individual’s actions on an information system be auditable?
Antworten
  • National Industrial Security Program Operating Manual (NISPOM), Chapter 1.
  • National Industrial Security Program Operating Manual (NISPOM), Chapter 3.
  • National Industrial Security Program Operating Manual (NISPOM), Chapter 5.
  • National Industrial Security Program Operating Manual (NISPOM), Chapter 8.

Frage 28

Frage
At what tier of the Risk Management Framework does continuous monitoring take place?
Antworten
  • Tier 1 - the Organization level
  • Tier 2 - the Mission/Business Process level
  • Tier 3 - the Information System level

Frage 29

Frage
Select ALL the correct responses. Which of the following describe how audit logs support continuous monitoring?
Antworten
  • Audit logs are essential in continuous monitoring because they record system activity, application processes, and user activity.
  • Audit logs are essential in continuous monitoring because they will automatically defragment an information system to increase its speed and response time to user input.
  • Audit logs are essential in continuous monitoring because they can be used to detect security violations, performance problems, and flaws in applications.

Frage 30

Frage
Which of the following configuration management controls supporting continuous monitoring activities focuses on physical and logical access controls, workflow automation, media libraries, abstract layers, and change windows and supports auditing of the enforcement actions?
Antworten
  • Least Functionality
  • User-Installed Software
  • Baseline Configuration
  • Access Restrictions for Change

Frage 31

Frage
Which of the following describes how the Information System Continuous Monitoring (ISCM) strategy supports the Tier 1 ORGANIZATION approach to risk management?
Antworten
  • Tier 1 ISCM strategies focus on assessing and monitoring hybrid and common controls implemented at the system level.
  • Tier 1 ISCM strategies focus on how the organization plans to assess, respond to, and monitor risk as well as the oversight required to ensure that the risk management strategy is effective.
  • Tier 1 ISCM strategies focus on how ensuring that all system-level security controls (technical, operational, and management controls) are implemented correctly and operate as intended.

Frage 32

Frage
Select ALL the correct responses. Which of the following are requirements for audits as outlined in the National Industrial Security Program Operating Manual (NISPOM)?
Antworten
  • Audit trail contents must be protected against unauthorized access, modification, or deletion.
  • Audit trail contents should be made accessible to the information system user upon written request.
  • Audit records must address individual accountability with unique identification and periodic testing of the security posture by the ISSO or ISSM.

Frage 33

Frage
Which of the following identifies how the Risk Management Framework (RMF) supports risk management?
Antworten
  • The RMF process provides a flexible approach to decision-making at Tier 3.
  • The RMF process ensures traceability and transparency across all levels of the organization.
  • The RMF process ensures that business process decisions can override user information system concerns.

Frage 34

Frage
Which of the following is a risk management role in continuous monitoring (CM)?
Antworten
  • Determining whether a contractor should be allowed to monitor and assess their classified network activity.
  • Determining whether a contractor audit trail is a necessary indicator cyber defense
  • Addressing risks from an information system and platform information technology system perspective to ensure a process for analyzing threats and vulnerabilities is in place, defining the impact, and identifying countermeasures.

Frage 35

Frage
Which of the following Event Viewer Logs provides an audit of a user’s log-on events and are classified as successful or failed attempts?
Antworten
  • Security event log
  • Setup event log
  • System event log
  • Forwarded event log

Frage 36

Frage
Which of the following describes the how the patch management process integrates with security-focused configuration management (SecCM)?
Antworten
  • The patch management process integrates with SecCM on a regular basis when restrictions must be lifted so that all system users can download software updates.
  • The patch management process integrates with SecCM once a year when system maintenance is performed.
  • The patch management process integrates with SecCM when updating the baseline configuration to the current patch level and then testing and approving patches as part of the configuration change control process.

Frage 37

Frage
Which of the following describes the relationship between configuration management controls and continuous monitoring?
Antworten
  • A well-defined configuration management process that integrates continuous monitoring ensures a firm schedule for security patch updates once a year.
  • A well-defined configuration management process that integrates continuous monitoring ensures the system baseline will not change.
  • A well-defined configuration management process that integrates continuous monitoring ensures that the required adjustments to the system configuration do not adversely affect the security of the information system.

Frage 38

Frage
Which of the following describes continuous monitoring capabilities for detecting threats and mitigating vulnerabilities?
Antworten
  • Investigation of the reasoning behind access restrictions at all levels of the organization.
  • Investigation into events of unauthorized downloads or uploads of sensitive data; unexplained storage of encrypted data; and unauthorized use of removable media or other transfer devices.
  • Investigation into physical security breaches at the facility.

Frage 39

Frage
Which of the following describes continuous monitoring supports interoperability, operational resilience, and operational reciprocity?
Antworten
  • Continuous monitoring capabilities can detect transmission of information to foreign IP addresses but cannot determine whether classification markings have been removed.
  • Continuous monitoring capabilities enable security professionals to make quick adjustments to access restriction controls.
  • Continuous monitoring capabilities and tools ensure cybersecurity products operate in a net-centric manner to enhance the exchange of data and shared security policies.

Frage 40

Frage
Which of the following would not be considered a possible indicator of recruitment?
Antworten
  • Offer of financial assistance by a foreign national or stranger
  • Unreported or frequent foreign travel
  • Termination notice to go work for a competing company
  • Contact with an individual who is suspected of being associated with foreign intelligence

Frage 41

Frage
An unwitting insider is best described as:
Antworten
  • a person who works overtime
  • a person with access to information who unknowingly reveals more than they should to persons without a need to know
  • a person with access to multiple Special Access Programs
  • a person who discusses their job with co-workers within the Sensitive Compartmented Information Facility (SCIF)

Frage 42

Frage
An insider threat could pose a threat to:
Antworten
  • National security
  • Your job
  • Your company’s proprietary and research information
  • All of the above

Frage 43

Frage
Failure to report suspicious behaviors or possible insider threat indicators could result in punitive or disciplinary actions.
Antworten
  • True
  • False

Frage 44

Frage
Exploitable weaknesses considered by a Foreign Intelligence Service when considering a source for recruitment may include:
Antworten
  • Drugs or alcohol
  • Gambling
  • Adultery
  • Financial problems
  • All of the above

Frage 45

Frage
Known or suspected espionage should always be reported to the FBI.
Antworten
  • True
  • False

Frage 46

Frage
Removing classification markings from a document is not necessarily considered a possible insider threat indicator and should not be reported to the security office unless there are other suspicious behaviors displayed.
Antworten
  • True
  • False

Frage 47

Frage
If a coworker seeks additional information outside the scope of his or her responsibility, this is always a sign that the individual is an insider threat.
Antworten
  • True
  • False

Frage 48

Frage
Elicitation is an effective means of information collection by an insider. When done well, elicitation can seem like simple small talk.
Antworten
  • True
  • False

Frage 49

Frage
A coworker, who may be of Middle Eastern descent and often speaks in Farsi from his work telephone, is considered suspicious behavior and should always be reported to the security officer.
Antworten
  • True
  • False

Frage 50

Frage
Collection methods of operation frequently used by Foreign Intelligence Entities to collect information from DoD on the critical technology being produced within the cleared defense contractor facilities we support include:
Antworten
  • Unsolicited requests for information
  • Solicitation and marketing of services
  • Cyber Attacks
  • International conventions, seminars, and exhibits
  • All of the above

Frage 51

Frage
Select ALL the correct responses. Which of the following are examples of a “Security Anomaly” and should be reported?
Antworten
  • Foreign officials claim they already knew about a program after the program was made public
  • Foreign officials reveal details they should not have known
  • An adversary conducts activities with precision that indicates prior knowledge
  • Media reports on current operations in the Middle East

Frage 52

Frage
To be an “Insider Threat” a person MUST knowingly cause malicious damage to their organization.
Antworten
  • True
  • False

Frage 53

Frage
Personnel who fail to report CI Activities of concern as outlined in Enclosure 4 of DoD Directive 5240.06 are subject to appropriate disciplinary action under regulations.
Antworten
  • True
  • False

Frage 54

Frage
The following actions can potentially reduce or compromise your network security and place in jeopardy the lives of our men and women:
Antworten
  • Hacking
  • Inputting falsified corrupted data
  • Phishing
  • Introducing malicious code such as a virus, logic, or Trojan horse
  • All of the above

Frage 55

Frage
Cyber Vulnerabilities to DoD Systems may include:
Antworten
  • Illegal downloads
  • Viruses
  • Weak passwords
  • Disgruntled or Co-opted employee
  • All of the above

Frage 56

Frage
Select ALL the correct responses. To minimize the ability of an Insider Threat to go undetected, you and your coworkers must:
Antworten
  • Report all security infractions, violations, or suspicious activity to your supervisor and the Office of Security
  • Never log onto your computer network outside of normal working hours
  • Follow all security rules and regulations
  • Never gossip about any of your coworkers
  • Show up to work on time every day

Frage 57

Frage
DoD personnel who suspect a coworker of possible espionage should:
Antworten
  • Call the FBI Hot Line
  • Report directly to your CI or Security Office
  • Start recording their conversations to gather evidence
  • Discuss situation with others to get second opinion

Frage 58

Frage
An adversary uses technical countermeasures to block a previously undisclosed or classified U.S. intercept technology. This is an example of:
Antworten
  • An unidentified press release
  • A lucky guess
  • A paid source
  • A Security Anomaly

Frage 59

Frage
Offers or Invitations for cultural exchanges, individual-to-individual exchanges, or ambassador programs are indicators of this collection method:
Antworten
  • Solicitation and Marketing of Services
  • International conventions, seminars, and exhibits
  • Elicitation
  • Visits to Department of Defense (DoD) or contractor facilities

Frage 60

Frage
This is used to collect documentation regarding FOCI, KMP Lists, SF-328 and other facility documents to the DSS.
Antworten
  • Industrial Security Facilities Database (ISFD)
  • Electronic Facility Clearance (e-FCL) System
  • Joint Personnel Adjudication System (JPAS)
  • Electronic Questionnaires for Investigations Processing (e-QIP)

Frage 61

Frage
This is used by DSS to document Industrial security actions regarding contractor facilities.
Antworten
  • Industrial Security Facilities Database (ISFD)
  • Electronic Facility Clearance (e-FCL) System
  • Joint Personnel Adjudicatoin System (JPAS)
  • Electronic Questionnaires for Investigations Processing (e-QIP)

Frage 62

Frage
Facility M has a facility security clearance at the Confidential level. It has not performed work on an active classified contract in 12 months but expects to begin performance of work on a classified contract next month. What action needs to be taken regarding its facility security clearance?
Antworten
  • It should be downgraded
  • It should be revoked
  • It should be terminated
  • No action is necessary

Frage 63

Frage
In the case of a multiple facility organization, which facility should complete the SF-328?
Antworten
  • The branch facility
  • Both the home office facility and the branch facility
  • The home office facility

Frage 64

Frage
Facility U has a facility security clearance at the Secret level. It has not performed work on an active classified contract in 12 months and does not expect to perform work on a classified contract in the near future. What action needs to be taken regarding its facility security clearance?
Antworten
  • It should be revoked
  • It should be downgraded
  • It should be administratively terminated
  • No action is necessary

Frage 65

Frage
As long as a contractor has a bona fide classified procurement need, it can make the request for its own facility security clearance.
Antworten
  • True
  • False

Frage 66

Frage
A business comprised of two separate and distinct companies that have formed a relationship where one company establishes or takes control of a smaller company is a _____.
Antworten
  • Limited liability company
  • Multiple facility organization
  • Parent-Subsidiary
  • Partnership

Frage 67

Frage
Who evaluates information related to a prospective contractor facility?
Antworten
  • Government Contracting Activity
  • Industrial Security Representative
  • PSMO-I

Frage 68

Frage
In addition to completing an SF-86, an individual being investigated for a personnel security clearance must also submit which form?
Antworten
  • SF-312
  • Exclusion resolution
  • Fingerprint card
  • SF-328

Frage 69

Frage
A DD Form 441-1 is required to be executed for _____.
Antworten
  • A division or branch within a multiple facility organization
  • A partnership
  • A limited liability corporation
  • A cleared parent company

Frage 70

Frage
Whose CAGE code should be provided in the sponsorship letter?
Antworten
  • The government contracting activity sponsoring the facility security clearance request
  • There is no need to provide a CAGE code for any party in the sponsorship letter
  • The cleared prime contractor sponsoring the facility security clearance request and the uncleared contractor being sponsored, if it has one

Frage 71

Frage
A business that has one or more owners, usually known as members, which may be individuals or corporations, is a _____.
Antworten
  • Sole proprietorship
  • Corporation
  • Limited liability company

Frage 72

Frage
If the sponsor is a cleared prime contractor, a copy of which document should be enclosed with the sponsorship letter?
Antworten
  • KMP List
  • DD Form 441
  • DD Form 254

Frage 73

Frage
In a parent-subsidiary relationship where both the parent and the subsidiary require a facility security clearance, but only the subsidiary is required to store classified information, who must execute DD Form 441?
Antworten
  • Only the subsidiary must execute DD Form 441.
  • Only the parent must execute DD Form 441.
  • Both the parent and the subsidiary must execute their own DD Form 441.

Frage 74

Frage
Which of the following is a secure website designed to facilitate the processing of standard investigative forms used when conducting background investigations?
Antworten
  • JPAS
  • ISFD
  • e-QIP
  • e-FCL

Frage 75

Frage
Failure to submit paperwork for security clearance investigations for key management personnel in a timely manner may result in the discontinuance of the facility security clearance request process.
Antworten
  • True
  • False

Frage 76

Frage
Why would an interim facility security clearance be granted instead of a final facility security clearance?
Antworten
  • Because final eligibility determinations for all key management personnel have not yet been completed
  • Because all required documentation has not yet been completed
  • Because all FOCI factors have not yet been favorably adjudicated

Frage 77

Frage
When an uncleared parent with a cleared subsidiary does not require access to classified information, which of the following actions is required?
Antworten
  • The parent must obtain a facility security clearance at a level equal to the level at which the subsidiary is cleared.
  • The parent will be formally excluded from all access to classified information.
  • No action is required.

Frage 78

Frage
The Facility Security Officer of a cleared contractor facility has recently retired. The new FSO is currently cleared but has no security experience. Does this need to be reported to the facility’s Industrial Security Representative as a change condition?
Antworten
  • No, because the new FSO is already cleared, a report is not required
  • No, this does not need to be reported
  • Yes, this is a reportable change

Frage 79

Frage
Does being processed for a facility security clearance have a direct cost to the contractor?
Antworten
  • No, the sponsoring activity is responsible for all costs associated with the facility security clearance process.
  • No, there is no direct cost to the contractor for being processed for a facility security clearance
  • Yes, the contractor must pay the government for services rendered during the facility security clearance request process.

Frage 80

Frage
A post office box is an acceptable address to include on the sponsorship letter for the uncleared contractor facility.
Antworten
  • True
  • False

Frage 81

Frage
A contractor with a cleared facility recently sold some of its shares of stock, but the sale did not result in a change in majority ownership stakes. Does this need to be reported to the facility’s Industrial Security Representative as a change condition?
Antworten
  • No, the sale of stocks is never a reportable change
  • No, this does not need to be reported
  • Yes, this is a reportable change

Frage 82

Frage
The evaluation of which of these identifies key management personnel?
Antworten
  • Sponsorship Letter
  • Business structure
  • SF-328
  • DD Form 441

Frage 83

Frage
To be eligible for consideration for a facility security clearance, a contractor must be physically located within the U.S. or its territories.
Antworten
  • True
  • False

Frage 84

Frage
Can a final facility security clearance be issued if all the key management personnel involved with the facility security clearance request process have not yet received final eligibility determinations for access to classified information?
Antworten
  • No. All the involved key management personnel must have final personnel security clearance determinations in order for the facility to be issued a final facility security clearance.
  • Yes. A final facility security clearance may be issued as long as all the involved key management personnel have interim personnel security clearance determinations.
  • Yes. Personnel security clearance determinations for key management personnel are not required in order to be issued a facility security clearance.

Frage 85

Frage
_____ may terminate the DD Form 441 by written notice 30 days in advance of the requested termination.
Antworten
  • The contractor
  • The government
  • Either the government or the contractor

Frage 86

Frage
Once a contractor has met all the eligibility requirements, which of the following are key evaluation areas examined when determining whether to issue a facility security clearance?
Antworten
  • Sponsorship, bona fide classified procurement need, business structure
  • Legal entity organized under U.S. laws, company has reputation for integrity, FOCI factors sufficiently managed
  • Sponsorship, DD Form 441, key management personnel

Frage 87

Frage
Who works with a contractor facility to ensure that their security program meets NISP requirements?
Antworten
  • Contract Officer
  • FCB Security Specialist
  • Industrial Security Representative

Frage 88

Frage
Within a multiple facility organization, only the home office facility is required to have a CAGE code.
Antworten
  • True
  • False

Frage 89

Frage
Which of the following statements is true?
Antworten
  • Invalidation of a facility security clearance does not prevent a contractor from receiving new contracts.
  • Invalidation of a facility security clearance is a final terminating action revoking all privileges associated with an active clearance.
  • Invalidation of a facility security clearance is an interim measure allowing a contractor to correct negative security circumstances.

Frage 90

Frage
Of the following assessments, which are used to help complete the threat assessment summary? (Select all that apply)
Antworten
  • History assessment
  • Operations assessment
  • Intent assessment
  • Collection capabilities assessment

Frage 91

Frage
Poor tradecraft practices are an example of a/an ______ vulnerability.
Antworten
  • Information
  • Operational
  • Equipment
  • Facility

Frage 92

Frage
Analyzing an asset in an unprotected state first and then analyzing the asset considering the current countermeasures is called ______ analysis.
Antworten
  • Vulnerability
  • Risk
  • Threat
  • Regressive

Frage 93

Frage
When measuring an impact and assigning a value to an undesirable event, which one of the following SME interview questions will help guide you?
Antworten
  • What undesirable events regarding a particular asset concern the asset owner?
  • Could significant damage to national security or loss/injury to human life occur as a result of this event?
  • What critical/valuable equipment is located at this site? Why is it critical or valuable?
  • Where are the assets located?

Frage 94

Frage
________________ is the least expensive countermeasure to implement?
Antworten
  • Manpower
  • Equipment
  • Written Procedure

Frage 95

Frage
The ability of each existing countermeasure to prevent or minimize a specific type of attack defines what vulnerability criteria?
Antworten
  • Quantity
  • Undesirable event
  • Effectiveness
  • Quality

Frage 96

Frage
One step in regressive analysis is reevaluating an asset’s vulnerabilities.
Antworten
  • True
  • False

Frage 97

Frage
The fifth and final step in the risk management process is to determine countermeasure options. Which of the following is the goal of this step?
Antworten
  • To identify potential countermeasures for reducing an asset’s vulnerabilities and overall risk to the asset
  • To identify the value of assets and the degree of impact if they are damaged or lost
  • To identify vulnerabilities

Frage 98

Frage
The criteria used to determine the level of vulnerability include which of the following? (Select all that apply)
Antworten
  • Last testing of the vulnerability
  • Effectiveness of countermeasures
  • Quantity
  • Quality

Frage 99

Frage
After you’ve completed all other steps, what final chart would you use to summarize and record your information in order to get the total cost for all countermeasures?
Antworten
  • Intent Assessment Chart
  • Collection Capability Assessment Chart
  • Threat Assessment Summary Chart
  • Countermeasure Analysis Chart

Frage 100

Frage
When performing a countermeasures cost benefit analysis, which two of the following are good questions to ask?
Antworten
  • To what degree does the option delay, deter, detect, defend, or destroy?
  • Is the option available from several contractors?
  • How does the asset value compare to proposed cost of protection?
  • What are the methods an adversary might use to destroy an asset?

Frage 101

Frage
Criminal, terrorist, insider, and natural disasters are examples of categories of ______.
Antworten
  • Threats
  • Vulnerabilities
  • Countermeasures
  • Assets

Frage 102

Frage
Persons , facilities, materials, information, and activities are categories of ______.
Antworten
  • countermeasures
  • assets
  • vulnerabilities
  • threats

Frage 103

Frage
The smaller the risk area shared by assets, threats, and vulnerabilities, the higher the risk level.
Antworten
  • True
  • False

Frage 104

Frage
One way to describe asset value is:
Antworten
  • What is the potential for an event to take place?
  • What is the capability of a specific threat?
  • What is the impact of an undesirable event?
  • What is the level of weakness at the site?

Frage 105

Frage
Risk management is defined as the process of selecting and implementing ______ to achieve an acceptable level of risk at an acceptable cost.
Antworten
  • countermeasures
  • procedures
  • assets
  • policies

Frage 106

Frage
When determining an adversary’s history, the fact that the adversary might attempt an attack at a foreseeable future event is irrelevant.
Antworten
  • True
  • False

Frage 107

Frage
The time to implement and oversee the countermeasure, the time to prepare for its implementation, and any time required for follow-up and evaluation have no impact when determining the cost of a countermeasure.
Antworten
  • True
  • False

Frage 108

Frage
Which of the following statements defines an adversary?
Antworten
  • Intended plans that may pose a threat to an asset.
  • The identification of an asset’s threats.
  • Any individual, group, organization, or government that conducts activities, or has the intention and capability to conduct activities detrimental to assets.
  • Any indication, circumstance, or event with the potential to cause the loss of, or damage to an asset.

Frage 109

Frage
What is the risk rating of an asset with an impact of 10, a threat rating of .12 and a vulnerability rating of .40?
Antworten
  • 32
  • 48
  • 1
  • 5

Frage 110

Frage
When determining an adversary’s capability, which of the following collection methods includes resources such as newspapers, internet, magazines, and conventions, FOIA requests, seminars, and exhibits?
Antworten
  • IMINT
  • HUMINT
  • SIGINT
  • OSINT

Frage 111

Frage
You should use the intent, capability, and history charts to create the Threat Assessment Summary Chart.
Antworten
  • True
  • False

Frage 112

Frage
You are the one who decides what constitutes an acceptable level of risk for an organization’s assets.
Antworten
  • True
  • False

Frage 113

Frage
The formula R=I [T x V] is used for calculating a risk rating. What risk factors do R, I, T, and V represent?
Antworten
  • return, impact, threat, vulnerability
  • risk, impact, threat, vulnerability
  • return, importance, threat, vulnerability
  • risk, importance, threat, vulnerability

Frage 114

Frage
There are six steps in the analytical risk management process. True or false?
Antworten
  • True
  • False

Frage 115

Frage
When determining the cost associated with a loss, only monetary loss is considered in the risk management process. True or false?
Antworten
  • True
  • False

Frage 116

Frage
An asset can be defined as anything that ______. (Select all that apply)
Antworten
  • Has a weakness
  • Is of value
  • Requires protection

Frage 117

Frage
The five general areas open to potential asset vulnerabilities include: human, operational, information, facility, and equipment. True or false?
Antworten
  • True
  • False

Frage 118

Frage
Which of the following is NOT a good interview question for determining an adversary’s history?
Antworten
  • Has the adversary attacked or exploited assets and personnel before?
  • Does the adversary have the weapons or tools for exploiting or attacking an asset?
  • Has the adversary been suspected of attacking or exploiting assets?
  • Might some foreseeable event cause the adversary to attempt an attack in the future?

Frage 119

Frage
Different perspectives to any terrorist event include which of the following? (Select all that apply.)
Antworten
  • The terrorist perspective that feels killing innocent people is morally justified to achieve objectives.
  • The victim perspective that sees terrorist acts as criminal and immoral.
  • The military perspective that feels that all terrorist events are evil and warrant retaliatory action.
  • The general public perspective that either supports or opposes the terrorist causes.

Frage 120

Frage
A state-supported terrorist group operates:
Antworten
  • As a recognized religion or radical offshoot
  • Independently, but receives some support from governments
  • Primarily by the support of a state or country
  • Autonomously, receiving no support from any governments

Frage 121

Frage
Which of the following is considered a common characteristic of terrorist groups?
Antworten
  • Operating overtly
  • Being rurally based
  • Being highly mobile
  • Considering tactical success as mission success

Frage 122

Frage
Training conducted in a clandestine fashion at the cell level by members of the terrorist group within the targeted country is considered ______________________.
Antworten
  • External training
  • Revolutionary training
  • Militaristic training
  • Internal training

Frage 123

Frage
Internal training
Antworten
  • Having positive contact with the captor
  • Accepting the situation as not long-term since authorities will come to the rescue
  • Seeing the captor's human qualities

Frage 124

Frage
A dirty bomb ______________________. (Select all that apply.)
Antworten
  • Upon detonation will produce mass casualties but will not penetrate a building
  • Is used by terrorists to frighten people and make the land around the explosion unusable for a long period of time
  • Combines conventional explosives with radioactive materials

Frage 125

Frage
To minimize the insider threat, practice:
Antworten
  • Awareness, Prevention, and Deterrence
  • Mitigation, Reaction, and Destruction
  • Detection, Protection, and Action

Frage 126

Frage
Which of the following statement(s) are true?
Antworten
  • A Vulnerability Assessment should focus only on WMD.
  • It is an annual requirement to receive a Higher Headquarters Vulnerability Assessment.
  • The Commander uses a Vulnerability Assessment to determine the susceptibility of assets to attack from threats.
  • All of the above.

Frage 127

Frage
During a Risk Assessment, which element(s) must be considered to make well-informed decisions?
Antworten
  • Vulnerability
  • Asset Criticality
  • Threat
  • All of the above

Frage 128

Frage
A typical AT program organization includes the following members: (Select all that apply.)
Antworten
  • DTRA
  • The ATO and the Installation Commander
  • Antiterrorism Executive Committee
  • The Threat Working Group

Frage 129

Frage
Security functions that must be performed for a physical security system to protect DoD assets include ______________________.
Antworten
  • Threat delay
  • Threat detection
  • Threat response
  • All of the above

Frage 130

Frage
When placing vehicle barriers, consider __________________
Antworten
  • Location
  • Aesthetics
  • Safety

Frage 131

Frage
Which of the following are examples of temporary barriers? (Select all that apply.)
Antworten
  • Berms
  • Jersey barriers
  • Ropes

Frage 132

Frage
DoD AT Construction Standards: (Select all that apply.)
Antworten
  • Specify design criteria for incorporating threat-based AT requirements
  • Provide minimum construction requirements for new construction and major renovations
  • Mandate Services and/or Agencies establish AT guidelines for new construction to counter terrorism threat capabilities

Frage 133

Frage
An AT plan ______________________. (Select all that apply.)
Antworten
  • Is written from the Service or Agency level down to the Installation level for permanent operations or locations
  • Contains all of the specific measures that need to be taken in order to establish and maintain an AT program
  • Is incorporated in operation orders for temporary operations or exercises

Frage 134

Frage
Which paragraph of the AT plan lists the specific tasks for each subordinate unit?
Antworten
  • Execution
  • Annexes
  • Situation
  • Mission

Frage 135

Frage
Which paragraph of the AT plan defines the requirements for supporting the AT Plan?
Antworten
  • Execution
  • Annexes
  • Mission
  • Administration and Logistics

Frage 136

Frage
The ATO is ______________________. (Select all that apply.)
Antworten
  • Responsible for making decisions regarding requirement funding
  • Responsible for continuously documenting funding requirements
  • The expert within an organization for generating, prioritizing, and appropriately documenting AT requirements

Frage 137

Frage
Which funding category does a resource fall in if it is important to the mission, but has a low vulnerability?
Antworten
  • Need to fund
  • Should fund
  • Must fund

Frage 138

Frage
Which of the following are reasons a future captor may have for selecting potential victims?
Antworten
  • The amount of money the U.S. Government offers for hostages
  • The victims' nationality
  • The victims' value to their families
  • The victims' financial resources

Frage 139

Frage
Immediately upon capture, the victim must decide to resist the captor, escape the situation, or surrender and cooperate with the captor. Which of the following will influence the victim's decision?
Antworten
  • The victim's self-defense and survival skills
  • The victim's personal wealth
  • The number of captors
  • Whether or not the captors are armed

Frage 140

Frage
A captor will exert control and dominance over a hostage by:
Antworten
  • Confiscating a hostage's personal items, such as a watch or wallet
  • Isolating a hostage from any human contact
  • Providing a hostage with regular meals
  • Taking all of a hostage's life quality aids, such as glasses or hearing aids

Frage 141

Frage
Which of the following are symptoms that a hostage may be experiencing Stockholm syndrome?
Antworten
  • Receiving insufficient nourishment
  • Perceiving the captor as a victim of circumstance versus an aggressor
  • Being belligerent towards the captor
  • Identifying with the captor

Frage 142

Frage
Which of the following may be reasons for a hostage situation ending with little to no harm to the hostage?
Antworten
  • The hostages become combative with the captors.
  • Authorities may achieve a successful negotiation with the captors resulting in the release of the hostage.
  • Hostages remain uncooperative with the captors.

Frage 143

Frage
The anger and frustration hostage survivors experience may sometimes be directed toward the:
Antworten
  • DoD
  • Rescuers
  • Themselves
  • U.S. Government

Frage 144

Frage
Training related to the Code of Conduct is conducted at different levels based on:
Antworten
  • The amount of sensitive information the Service member has.
  • A potential captor's assessment of the Service member's usefulness.
  • The Service member's tenure in the military.
  • The Service member's susceptibility to capture.

Frage 145

Frage
Specific guidance for captured U.S. military personnel applies to situations in which they:
Antworten
  • Have been released
  • Are on assignment
  • Have been captured
  • All of the above

Frage 146

Frage
What techniques should a victim use to try and avoid unnecessary violence during capture?
Antworten
  • Hide materials indicating affiliation with the U.S. Government for leverage.
  • Resist panicking.
  • Anticipate the captor's efforts to create confusion.
  • Catch the captor off guard in hopes of escaping.

Frage 147

Frage
There are several techniques hostages can use to help them survive a hostage situation. They should:
Antworten
  • Vary their voice levels so their captors do not hear them speaking.
  • Maintain a regular exercise routine.
  • Remain realistic about their situation and not make future plans for themselves.
  • Remain constantly alert for any sign of being rescued.

Frage 148

Frage
If a hostage senses or realizes a rescue attempt is imminent, the hostage should:
Antworten
  • Prepare to escape the situation as soon as there is an opportunity to do so.
  • Drop to the floor.
  • Remain still until rescuers provide instructions.
  • Motion to rescuers so that they are easily identified.

Frage 149

Frage
Techniques for helping a hostage survivor return to a daily routine include:
Antworten
  • Limiting contact with the press.
  • Refraining from making public statements about the captor.
  • Speaking openly about the rescue with reporters.
  • Being accessible to the press to discuss being held hostage and rescued.

Frage 150

Frage
Symptoms exhibited when suffering from the Stockholm Syndrome include:
Antworten
  • Refusing to assist the captor
  • Losing touch with reality
  • Hindering rescue efforts
  • Suffering from long-term emotional instability

Frage 151

Frage
Which of the following statements illustrate the correct application of the DoD Code of Conduct?
Antworten
  • During capture, Service members should resist their potential captors in an effort to break free.
  • As a hostage, Service members should not, under any circumstances, support or encourage their captors.
  • Service members on assignment in an area prone to terrorist activity shall follow the appropriate counter-terrorism measures.
  • As a hostage, Service members should accept release regardless of the consequences of such action.

Frage 152

Frage
If a terrorist group is labeled state-directed:
Antworten
  • The group is primarily supported by a country or state
  • The group is usually an insurgent movement
  • Activities are conducted at the direction of the state
  • The group may be an element of the state's security organization

Frage 153

Frage
Terrorist groups labeled by their political affiliation:
Antworten
  • Are considered to be political extremists
  • Have suicidal members
  • Have a charismatic leader who preaches a form of exclusivity
  • Consist of young members, generally between 19 and 35 years old

Frage 154

Frage
Which of the following are considered common characteristics of terrorist groups?
Antworten
  • Highly mobile
  • Operate covertly
  • Urban based
  • Militarily stronger than their opposition

Frage 155

Frage
Which of the following statements are true?
Antworten
  • To achieve a chaotic atmosphere, a terrorist group will disrupt lines of communication.
  • Terrorist groups will encourage foreign investments to boost and strengthen their country’s economy.
  • Attacks against a state government’s security forces are used to erode public confidence.
  • Major acts or a successful terrorist campaign can attract additional support for the group’s cause.

Frage 156

Frage
Which of the following terrorist group goals is generally accomplished through skyjacking and hostage taking?
Antworten
  • Satisfying vengeance
  • Turning the tide in a Guerrilla War
  • Causing an overreaction
  • Release of incarcerated comrades

Frage 157

Frage
An intelligence cell of a terrorist group:
Antworten
  • Collects target-specific information
  • Is comprised of people who conduct kidnappings
  • Recruits new members
  • Provides OPSEC

Frage 158

Frage
When an operative travels abroad to a training camp, then returns home to put their training into practice, this is considered:
Antworten
  • Internal training
  • External training
  • Survival training
  • Communications training

Frage 159

Frage
Which of the following are considered common goals of terrorist groups?
Antworten
  • Obtaining money and equipment
  • Release of imprisoned comrades
  • Creating a safe environment for their people
  • Influencing government decisions, legislations, or elections

Frage 160

Frage
The number, size, and the overall structure of the terrorist group cells depends on:
Antworten
  • Goals of the terrorist group
  • The security in the group's operating area
  • The abilities of the group's communication network
  • Media publicity of the group

Frage 161

Frage
Training conducted in a clandestine fashion at the cell level by members is referred to as:
Antworten
  • External training
  • Internal training
  • Revolutionary training
  • Militaristic training

Frage 162

Frage
Which of the following statement(s) pertaining to terrorist operations are true?
Antworten
  • Terrorist operations are relatively easy to execute because they are relatively easy to command, control, and support.
  • To ensure a sound operation, terrorists rehearse the operation in an environment mirroring the target location.
  • Terrorists select multiple targets as potential locations for the actual operation.
  • Terrorist operations are designed to impact only direct victims.

Frage 163

Frage
Terrorists gather information on security measures and observable routines.
Antworten
  • Phase II: Intelligence Gathering and Surveillance
  • Phase IV: Pre-Attack Surveillance and Planning
  • Phase V: Attack Rehearsal
  • Phase VII: Escape

Frage 164

Frage
Terrorists deploy into the target area.
Antworten
  • Phase I: Broad Target Selection
  • Phase IV: Pre-Attack Surveillance and Planning
  • Phase V: Attack Rehearsal
  • Phase VI: Actions on the Objectives

Frage 165

Frage
Terrorists determine the weapon or attack method.
Antworten
  • Phase II: Intelligence Gathering and Surveillance
  • Phase III: Specific Target Selection
  • Phase IV: Pre-Attack Surveillance and Planning
  • Phase VI: Actions on the Objectives

Frage 166

Frage
Terrorists collect information from media and internet research.
Antworten
  • Phase I: Broad Target Selection
  • Phase III: Specific Target Selection
  • Phase IV: Pre-Attack Surveillance and Planning
  • Phase VI: Actions on the Objectives

Frage 167

Frage
Skyjacking
Antworten
  • The forceful seizure of an aircraft, its passengers, and cargo.
  • The unlawful seizure and detainment of a person, where the person is usually held for ransom.
  • The most common type of terrorist attack because of the relatively low risk of injury to the terrorist.
  • One of the oldest terrorist tactics, it means murdering someone in a surprise attack, usually with small arms or bombs.

Frage 168

Frage
Assassination
Antworten
  • The most common type of terrorist attack because of the relatively low risk of injury to the terrorist.
  • The unlawful seizure and detainment of a person, where the person is usually held for ransom.
  • The forceful seizure of an aircraft, its passengers, and cargo.
  • One of the oldest terrorist tactics, it means murdering someone in a surprise attack, usually with small arms or bombs.

Frage 169

Frage
Kidnapping
Antworten
  • The forceful seizure of an aircraft, its passengers, and cargo.
  • The unlawful seizure and detainment of a person, where the person is usually held for ransom.
  • The most common type of terrorist attack because of the relatively low risk of injury to the terrorist.
  • One of the oldest terrorist tactics, it means murdering someone in a surprise attack, usually with small arms or bombs.

Frage 170

Frage
Bombing
Antworten
  • The forceful seizure of an aircraft, its passengers, and cargo.
  • The unlawful seizure and detainment of a person, where the person is usually held for ransom.
  • The most common type of terrorist attack because of the relatively low risk of injury to the terrorist.
  • One of the oldest terrorist tactics, it means murdering someone in a surprise attack, usually with small arms or bombs.

Frage 171

Frage
Raid
Antworten
  • The forceful seizure of a surface vehicle, its passengers, and/or its cargo.
  • A surprise attack by a small armed force on a previously defined target.
  • The seizure of a facility to include taking all persons inside hostage.
  • A sudden attack made from a concealed position on a previously defined target.

Frage 172

Frage
Ambush
Antworten
  • The forceful seizure of a surface vehicle, its passengers, and/or its cargo.
  • A surprise attack by a small armed force on a previously defined target.
  • The seizure of a facility to include taking all persons inside hostage.
  • A sudden attack made from a concealed position on a previously defined target.

Frage 173

Frage
Hijacking
Antworten
  • The forceful seizure of a surface vehicle, its passengers, and/or its cargo.
  • A surprise attack by a small armed force on a previously defined target.
  • The seizure of a facility to include taking all persons inside hostage.
  • A sudden attack made from a concealed position on a previously defined target.

Frage 174

Frage
Hostage Barricade
Antworten
  • The forceful seizure of a surface vehicle, its passengers, and/or its cargo.
  • A surprise attack by a small armed force on a previously defined target.
  • The seizure of a facility to include taking all persons inside hostage.
  • A sudden attack made from a concealed position on a previously defined target.

Frage 175

Frage
The deliberate weakening of another entity through subversion, obstruction, disruption, and/or destruction.
Antworten
  • Environmental Destruction
  • Seizure
  • Sabotage
  • Threats/Hoaxes

Frage 176

Frage
The destruction of oil fields or attacks on oil tankers.
Antworten
  • Environmental Destruction
  • Seizure
  • Sabotage
  • Threats/Hoaxes

Frage 177

Frage
An active shooter is an individual actively engaged in killing or attempting to kill people in a confined and populated area.
Antworten
  • True
  • False

Frage 178

Frage
During an active shooter situation, you should:
Antworten
  • Hide
  • Scream
  • Evacuate
  • Take Action

Frage 179

Frage
When law enforcement arrives, you should:
Antworten
  • Immediately raise hands and spread fingers
  • Ask for help
  • Remain calm, and follow officers’ instructions
  • Point to where the active shooter is

Frage 180

Frage
Which of the following are sources of insider security problems?
Antworten
  • Maliciousness
  • Disdain of security practices
  • Carelessness in protecting DoD information
  • Ignorance of security policy and security practices
  • All of the above

Frage 181

Frage
“Insider threat” is that an insider will, by acts of commission or omission, intentionally or unintentionally, use their authorized access to do harm to the security of the U.S.
Antworten
  • True
  • False

Frage 182

Frage
The terrorist’s objectives are controlled and/or condoned by an established state.
Antworten
  • Sub-Revolutionary
  • Establishment
  • Revolutionary

Frage 183

Frage
The terrorist’s objectives are to overthrow the existing government, particularly in the area of operations.
Antworten
  • Sub-Revolutionary
  • Establishment
  • Revolutionary

Frage 184

Frage
The terrorist’s objectives are to influence an unwilling government or group into making political, social, or economic changes.
Antworten
  • Sub-Revolutionary
  • Establishment
  • Revolutionary

Frage 185

Frage
The terrorist threat level that indicates that anti-U.S. terrorists are present with limited operational activity.
Antworten
  • High
  • Significant
  • Moderate
  • Low

Frage 186

Frage
FPCON BRAVO will apply when:
Antworten
  • A general global threat of possible terrorist activity exists
  • An increased threat of terrorist activity exists
  • A terrorist attack has occurred
  • Intelligence indicates some form of terrorist activity is likely

Frage 187

Frage
RAM is the random use of various protective measures in order to:
Antworten
  • Rehearse procedures
  • Frustrate terrorist planning
  • Replace FPCON
  • Heighten unit awareness

Frage 188

Frage
Perspectives to any terrorist event are:
Antworten
  • The terrorist perspective that feels killing innocent people is morally justified to achieve objectives
  • The victim perspective that sees terrorist acts as criminal and immoral
  • The general public perspective that either supports or is against the terrorist causes
  • The military perspective that feels that all terrorist events are evil and warrant retaliatory action

Frage 189

Frage
Which of the following methodology factors did the DoD take into account?
Antworten
  • Terrorist Targets
  • Terrorist History
  • Terrorist Capabilities
  • Terrorist Intentions

Frage 190

Frage
A terrorist threat level is:
Antworten
  • Identified as High, Significant, Moderate, or Low
  • Identified as NORMAL, ALPHA, BRAVO, CHARLIE, or DELTA
  • The random use of various security measures normally employed at higher force protection conditions in order to rehearse procedures
  • An intelligence community judgment about the likelihood of terrorist attacks on U.S. interests

Frage 191

Frage
Force Protection Conditions (FPCONs) are:
Antworten
  • An intelligence community judgment about the likelihood of terrorist attacks on U.S. interests
  • Identified as Normal, Alpha, Bravo, Charlie, or Delta
  • A system of protective measures used by DoD installations and organizations to guard against and deter terrorist attacks

Frage 192

Frage
A terrorist threat level is ________________. (Select all that apply)
Antworten
  • An intelligence community judgment about the likelihood of terrorist attacks on US interests.
  • Identified as NORMAL, ALPHA, BRAVO, CHARLIE, or DELTA.
  • Identified as High, Significant, Moderate, or Low.

Frage 193

Frage
Which of the following are consider common goals of terrorist groups?
Antworten
  • Releasing imprisoned comrades
  • Influencing government decisions, legislations, or elections
  • Obtaining money and equipment
  • All of the above

Frage 194

Frage
The number, size, and overall structure of terrorist group cells depend upon ________________________.
Antworten
  • The goals of the terrorist group
  • The security in the group’s operating area
  • The number of members in the terrorist group
  • The abilities of the group’s communication network

Frage 195

Frage
Which of the following statements are true regarding terrorist operations? (Select all that apply.)
Antworten
  • Terrorist operations are difficult to execute due to the large group of individuals to train and command.
  • Terrorists select multiple targets as potential locations for the actual operation.
  • Terrorist operations are always designed on the defensive.
  • Terrorist rehearse the operation in an environment mirroring the target location or in the target location itself.

Frage 196

Frage
Why might a potential captor take a victim hostage? (Select all that apply.)
Antworten
  • For the publicity the situation would generate
  • Because the victim drives and expensive car
  • Because the victim is in the wrong place at the wrong time
  • Because the victim may be a source of trouble otherwise

Frage 197

Frage
If a hostage senses or realizes a rescue attempt is imminent, the hostage should:
Antworten
  • Motion to rescuers so they are easily identified
  • Prepare to escape the situation as soon as there is an opportunity to do so
  • Drop to the floor and remain still until rescuers provide instructions
  • All of the above

Frage 198

Frage
Chemical agents are:
Antworten
  • Nerve agents, such as sarin, that interfere with the functioning of the nervous system
  • Likely to be used in large quantities by terrorist
  • Substances that are created by plants and animals that are poisonous to humans
  • Identifiable with the sudden onset of symptoms

Frage 199

Frage
Which of the following statements are true? (Select all that apply.)
Antworten
  • There is no antidotal treatment for nerve agent poisoning.
  • A sudden onset of symptoms is a characteristic of chemical agents.
  • Terrorists will likely use small quantities of chemical agents in a highly populated area where the potential for exposure is the greatest.

Frage 200

Frage
Which of the following are potential indicators of an insider threat?
Antworten
  • Copying Files
  • Unusual work hours
  • Taking short trips
  • Unexplained affluence
  • All of the above
Zusammenfassung anzeigen Zusammenfassung ausblenden

Möchten Sie mit GoConqr kostenlos Ihre eigenen Quiz erstellen? eigenen Mehr erfahren.

ähnlicher Inhalt

CCNA Security Final Exam
Maikel Degrande
Security Guard Training
Summit College
ISACA CISM Exam Glossary
Fred Jones
Security
annelieserainey
Securities Regulation
harpratap_singh
2W151 Volume 1: Safety and Security - Quiz 7
Joseph Whilden J
Security Quiz Review
Rylan Blah
Security Policies
indysingh7285
2W151 Volume 1: Safety and Security - Quiz 6
Joseph Whilden J
Security (2)
Daniel Freedman
Certified Security Compliance Specialist
jnkdmls
Bibliothek durchsuchen