Arthur Casto
Quiz von , erstellt am more than 1 year ago

Security

20799
6
0
Arthur Casto
Erstellt von Arthur Casto vor fast 6 Jahre
Schließen

SFPC 5

Frage 1 von 172

1

Which of the following statements are true?

Wähle eine oder mehr der folgenden:

  • Physical security systems provide the means to counter threats only during wartime.

  • Physical security measures are a combination of active or passive systems, devices, and security personnel used to protect a security interest from possible threats.

  • DoD 5200.8-R addresses the physical security of personnel, installations, operations, and assets of DoD Components.

Erklärung

Frage 2 von 172

1

Which of the following statements are true? (Select all that apply.)

Wähle eine oder mehr der folgenden:

  • The Commander is responsible for the development of the AT plan.

  • The ATO is responsible for the writing of the AT plan.

  • The ATO is responsible for leveraging the capabilities of the organization’s AT Working Group to assist with creating the AT plan.

Erklärung

Frage 3 von 172

1

Which paragraph of the AT plan lists the specific task for each subordinate unit?

Wähle eine der folgenden:

  • Execution

  • Situation

  • Mission

  • Annexes

Erklärung

Frage 4 von 172

1

Which AT plan exercise(s) uses scenario driven events to test specific portions of the AT plan?

Wähle eine der folgenden:

  • Table-top

  • Drill

  • Full-scale

  • All of the above

Erklärung

Frage 5 von 172

1

Which of the following are reasons why AT plan exercises are important?

Wähle eine der folgenden:

  • They increase anti-terrorism awareness

  • They provide a way to assess and identify vulnerabilities and resources

  • They confirm training adequacy

  • All of the above

Erklärung

Frage 6 von 172

1

Whose primary responsibility is working with Industrial Security Representatives (IS Reps) and contractor personnel to authorize and maintain classified Information Systems?

Wähle eine der folgenden:

  • Counterintelligence Special Agent (CISA)

  • Information System Security Professional/Security Control Assessor (ISSP/SCA)

  • Information System Security Manager (ISSM)

  • Facility Security Officer (FSO)

Erklärung

Frage 7 von 172

1

True or false? An employee’s need for a Personnel Security Clearance (PCL) is determined by the program manager, but the clearance level is determined by the Government Contracting Activity (GCA).

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 8 von 172

1

When an employee no longer needs access to classified information, who is responsible for removing access and debriefing the employee?

Wähle eine der folgenden:

  • Industrial Security Representative (IS Rep)

  • Information System Security Manager (ISSM)

  • Facility Security Officer (FSO)

  • Information System Security Professional/Security Control Assessor (ISSP/SCA)

Erklärung

Frage 9 von 172

1

Which of the following organizations conducts periodic Security Vulnerability Assessments (SVAs) of contractor facilities as the CSO to the Department of Defense?

Wähle eine der folgenden:

  • Defense Security Service (DSS)

  • Federal Bureau of Investigations (FBI)

  • Department of Homeland Security (DHS)

  • Federal Acquisition Service (FAS)

Erklärung

Frage 10 von 172

1

When cleared contractors visit a cleared facility or government installation, whose security requirements take precedence?

Wähle eine der folgenden:

  • The security requirements of the contractor’s home facility

  • The security requirements of the host activity/facility

Erklärung

Frage 11 von 172

1

After a need is identified, the Government Contracting Activity (GCA) ___________________.

Wähle eine der folgenden:

  • awards the contract

  • defines the initial requirements for the product/service

  • publishes a Request for Proposal (RFP)

  • evaluates the contractors’ proposals

Erklärung

Frage 12 von 172

1

Who administers and oversees the contractor security program?

Wähle eine der folgenden:

  • Facility Security Officer (FSO)

  • Information System Security Manager (ISSM)

  • Information System Security Professional/Security Control Assessor (ISSP/SCA)

  • Counterintelligence Special Agent (CISA)

Erklärung

Frage 13 von 172

1

True or false? The Contracting Officer’s Representative (COR) is authorized to make changes to the contract, even if those changes affect price or quality.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 14 von 172

1

Which contracting document provides a record of the contractor’s commitment to comply with the National Industrial Security Program Operating Manual (NISPOM)?

Wähle eine der folgenden:

  • DD Form 254, Department of Defense Contract Security Classification Specification

  • Statement of Work (SOW)

  • DD Form 441, Department of Defense Security Agreement

Erklärung

Frage 15 von 172

1

The ______________ has been designated as the Cognizant Security Office (CSO) for the DoD and over 30 other non-DoD agencies.

Wähle eine der folgenden:

  • Department of Energy (DOE)

  • Defense Security Service (DSS)

  • Office of the Director of National Intelligence (ODNI)

  • Department of Homeland Security (DHS)

Erklärung

Frage 16 von 172

1

Department of Homeland Security (DHS)

Wähle eine der folgenden:

  • works for a company with a Facility Clearance (FCL)

  • might work on a classified contract

  • requires access to classified information

Erklärung

Frage 17 von 172

1

True or false? A contractor facility may access and store classified material as soon as the Facility Clearance (FCL) is granted.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 18 von 172

1

Which of the following topics is NOT included in the National Industrial Security Program Operating Manual (NISPOM)?

Wähle eine der folgenden:

  • General policies and procedures

  • Facility Clearances (FCLs)

  • Acquisitions guidelines

  • Reporting requirements

Erklärung

Frage 19 von 172

1

Select ALL the correct responses. Which of the following roles are filled by contractor employees?

Wähle eine oder mehr der folgenden:

  • Information System Security Manager (ISSM)

  • Insider Threat Program Senior Official (ITPSO)

  • Information System Security Professional/Security Control Assessor (ISSP/SCA)

  • Facility Security Officer (FSO)

Erklärung

Frage 20 von 172

1

Select ALL the correct responses. The National Industrial Security Program (NISP) is:

Wähle eine oder mehr der folgenden:

  • a voluntary program for cleared contractor facilities

  • designed to safeguard classified information entrusted to industry

  • a government-industry partnership

  • established by Executive Order 12829

Erklärung

Frage 21 von 172

1

Select ALL the correct responses. The Cognizant Security Office (CSO) does which of the following?

Wähle eine oder mehr der folgenden:

  • Establishes industrial security programs

  • Provides security guidance

  • Provides policy clarifications

  • Administers the National Industrial Security Program (NISP)

Erklärung

Frage 22 von 172

1

Select ALL the correct responses. Which of the following are Counterintelligence Special Agent (CISA) responsibilities?

Wähle eine oder mehr der folgenden:

  • Provide advice, assistance, and guidance regarding counterintelligence best practices

  • Authorize and maintain Information Systems

  • Assist with foreign travel briefings and debriefings

Erklärung

Frage 23 von 172

1

To issue a Facility Clearance (FCL), the Facility Clearance Branch (FCB) reviews which of the following?

Wähle eine der folgenden:

  • Information System Security Plans

  • Facility sponsorship

  • Employee foreign travel records

Erklärung

Frage 24 von 172

1

Who performs classified Information System assessments?

Wähle eine der folgenden:

  • Insider Threat Program Senior Official (ITPSO)

  • Information System Security Professional/Security Control Assessor (ISSP/SCA)

  • Counterintelligence Special Agent (CISA)

  • Facility Security Officer (FSO)

Erklärung

Frage 25 von 172

1

Select ALL the correct responses. DD Form 254, Department of Defense Contract Security Classification Specification, contains which of the following?

Wähle eine oder mehr der folgenden:

  • Travel requirements

  • Specific clearance and access requirements

  • Authorization to generate classified information

  • Classified storage requirements

Erklärung

Frage 26 von 172

1

What is OPSEC?

Wähle eine der folgenden:

  • A process, not a set of rules

  • A method for denying an adversary access to our critical information

  • Part of everyone’s job – including yours

  • All of the above

Erklärung

Frage 27 von 172

1

How many steps are there in the OPSEC process?

Wähle eine der folgenden:

  • Two

  • Five

  • Six

  • Too many

Erklärung

Frage 28 von 172

1

What step in the OPSEC process is Analyzing Threats?

Wähle eine der folgenden:

  • Step Three

  • Step Five

  • Step Six

  • Step Two

Erklärung

Frage 29 von 172

1

____________ are like pieces of a puzzle an adversary uses to reveal a picture of our operations.

Wähle eine der folgenden:

  • Threats

  • Indicators

  • Questions

  • Critical information

Erklärung

Frage 30 von 172

1

What is the last step in the OPSEC process?

Wähle eine der folgenden:

  • Identify threats

  • Identify OPSEC countermeasures

  • Identify vulnerabilities

  • Identify critical information

Erklärung

Frage 31 von 172

1

Simonne left a safe containing classified material open while she went out for lunch. There is no evidence that anyone had access to the material while she was out, but nobody can confirm that the materials were safe from disclosure. What type of violation has occurred?

Wähle eine der folgenden:

  • Suspected compromise of classified information

  • Loss of classified information

  • Compromise of classified information

Erklärung

Frage 32 von 172

1

Security violations are reported to which entity?

Wähle eine der folgenden:

  • the DoD System of Record

  • PSMO-I

  • DSS IS Rep

  • FBI

Erklärung

Frage 33 von 172

1

Changes in a facility's storage capability are reported how?

Wähle eine der folgenden:

  • By phone to the FBI

  • To PSMO-I via the DoD System of Record

  • In writing to your DSS IS Rep at the DSS field office

  • To your DSS IS Rep via e-FCL

Erklärung

Frage 34 von 172

1

Cleared employees who refuse to execute Standard Form 312 are reported how?

Wähle eine der folgenden:

  • In writing to your IS Rep at the DSS field office

  • To PSMO-I via the DoD System of Record

  • By phone to the FBI

  • To your IS Rep via e-FCL

Erklärung

Frage 35 von 172

1

Loss, compromise, and suspected compromise of classified information are reported how?

Wähle eine der folgenden:

  • In writing to your DSS IS Rep at the DSS field office

  • By phone to the FBI

  • To PSMO-I via the DoD System of Record

  • To your IS Rep via e-FCL

Erklärung

Frage 36 von 172

1

Any individual or group that represents a foreign government is considered a security threat.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 37 von 172

1

Reports on changes in KMP are required only when there is a change in the president, CEO, or FSO.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 38 von 172

1

Of the scenarios listed below, which ones must be reported to your IS Rep as change conditions affecting the facility's clearance?

a. The company has merged with another company and is under new ownership.
b. The company has hired 12 new employees to support a new major contract.
c. The company is moving to a new location to meet the needs of its growing staff.
d. The company just lost its largest contract and has filed for bankruptcy.

Wähle eine der folgenden:

  • a, b, c, and d

  • a, b, and c

  • a, c, and d

  • a and d

Erklärung

Frage 39 von 172

1

Evidence of tampering with your facility's classified storage container is an example of what type of security threat?

Wähle eine der folgenden:

  • Espionage

  • Sabotage

  • Subversive activity

  • Terrorism

Erklärung

Frage 40 von 172

1

Which of the following is reported to PSMO-I?

Wähle eine der folgenden:

  • Suspicious contacts

  • Unauthorized receipt of classified material

  • Security equipment vulnerabilities

  • Changes in cleared employee status

Erklärung

Frage 41 von 172

1

After returning from a recent professional conference, Franklin received a request for classified information from an uncleared person that he met at the conference. What kind of report should be submitted?

Wähle eine der folgenden:

  • Suspicious contact

  • Individual culpability

  • Adverse information

  • Unauthorized receipt of classified material

Erklärung

Frage 42 von 172

1

The two primary methods of submitting reports to your DSS IS Rep at the DSS Field Office are _________ and __________.

Wähle eine der folgenden:

  • in writing; through e-FCL

  • in writing; through the DoD System of Record

  • through the DoD System of Record; through e-FCL

  • by phone; through e-FCL

Erklärung

Frage 43 von 172

1

Working late one evening on a priority project, Helen left several classified documents visible on her desk while she stepped away from her desk for a moment. When she returned, she found a member of the cleaning crew straightening the classified documents on her desk. What type of violation has occurred?

Wähle eine der folgenden:

  • Loss of classified information

  • Suspected compromise of classified information

  • Compromise of classified information

Erklärung

Frage 44 von 172

1

Of the following types of personnel-related information, which is NOT reported to PSMO-I?

Wähle eine der folgenden:

  • Suspicious contacts

  • Adverse information

  • Refusal to execute Standard Form (SF) 312

  • Citizenship by naturalization

Erklärung

Frage 45 von 172

1

Failure to report unauthorized disclosure of classified information does not affect the service members’ safety.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 46 von 172

1

According to the NISPOM, espionage, sabotage, terrorism, or subversive activities should be reported as a(n) ___________________.

Wähle eine der folgenden:

  • National security threat

  • Individual culpability

  • Security violation

Erklärung

Frage 47 von 172

1

Contractors must report to the DSS IS Rep only those violations that result in the loss, compromise, or suspected compromise of classified information.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 48 von 172

1

NISPOM paragraph 1-300 states that contractors must report certain events to the government.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 49 von 172

1

According to NISPOM paragraph 1-300, which of the following is the contractor required to report to the government?

Wähle eine der folgenden:

  • Events that require the facility to be open outside of regular business hours

  • Events that affect the proper safeguarding of classified information

  • Any change in the number of GSA security containers being used at the contractor facility to protect classified information

  • An increase or decrease in the number of classified documents stored at the contractor facility

Erklärung

Frage 50 von 172

1

Assessing a vulnerability in conjunction with the threat, and then determining the impact this would have on an operation if the vulnerability is exploited determines the level of risk.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 51 von 172

1

OPSEC is a systematic, proven process to identify, control and protect classified information about a mission, operation or activity, and, thus, denying/mitigating adversary's ability to compromise/interrupt that mission, operation or activity.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 52 von 172

1

Patterns, stereotypes, and predictable actions are all types of which of the following?

Wähle eine der folgenden:

  • Risks

  • Indicators

  • Vulnerabilities

  • Threats

Erklärung

Frage 53 von 172

1

An adversary's capability is defined as his ability to do which of the following?

Wähle eine der folgenden:

  • Acquire critical information

  • None of these choices

  • Acquire and exploit critical information

  • Exploit critical information

Erklärung

Frage 54 von 172

1

What are the elements of threat?

Wähle eine der folgenden:

  • All of these choices

  • Intent and Capability

  • Friendly and Adversarial perspectives

  • Vulnerabilities and Indicators

Erklärung

Frage 55 von 172

1

Which step in the OPSEC process is a decision making step because it helps the decision maker prioritize and decide whether or not to apply a countermeasure?

Wähle eine der folgenden:

  • Identify critical information

  • Apply countermeasures

  • Assess Risk

  • Analyze vulnerabilities

Erklärung

Frage 56 von 172

1

The development of a countermeasure focuses directly on the

Wähle eine der folgenden:

  • level of risk to the organization.

  • adversary it is guarding against.

  • importance of the critical information item.

  • vulnerability it is designed to protect.

Erklärung

Frage 57 von 172

1

Why do we need to have threat information?

Wähle eine der folgenden:

  • We need to identify an adversary's intent.

  • We need to identify an adversary's capability.

  • Knowledge of the threat supports all other steps in the OPSEC process.

  • All of these choices

Erklärung

Frage 58 von 172

1

What is the preferred method of assessing the risk to your organization?

Wähle eine der folgenden:

  • Use of expert testimony

  • All of the choices

  • Intuitive reasoning

  • The committee approach

Erklärung

Frage 59 von 172

1

Which organizations are tasked with establishing OPSEC programs under the law signed by President Reagan?

Wähle eine der folgenden:

  • The Interagency OPSEC Support Staff

  • All executive departments and agencies

  • All executive departments and agencies with national security missions

  • All government departments and agencies

Erklärung

Frage 60 von 172

1

What factor takes into account the impact that a compromise would have on your operation?

Wähle eine der folgenden:

  • Threat

  • Risk

  • Countermeasure

  • Vulnerability

Erklärung

Frage 61 von 172

1

Why should organizations use and practice OPSEC?

Wähle eine der folgenden:

  • To protect their critical information

  • To maintain the element of surprise

  • To protect the integrity of their mission

  • All of these choices

Erklärung

Frage 62 von 172

1

OPSEC focuses on what type of critical information?

Wähle eine der folgenden:

  • Sensitive but unclassified information

  • All of these choices

  • All levels of classified information

  • Highly classified information

Erklärung

Frage 63 von 172

1

Lack of proper training, use of non-secure communications, and poor system design are all examples of

Wähle eine der folgenden:

  • risks.

  • vulnerabilities.

  • indicators.

  • threats.

Erklärung

Frage 64 von 172

1

When dealing with countermeasure development, what is the bottom line?

Wähle eine der folgenden:

  • Always develop countermeasures on a first-come, first-served basis

  • Always apply a unique countermeasure to each vulnerability

  • Always think of a countermeasure as a smarter way to do a task

  • Always weigh the cost of the countermeasure against its benefit

Erklärung

Frage 65 von 172

1

Identifying what an adversary already knows about your operation helps you to

Wähle eine der folgenden:

  • determine the collection methods the adversary is using against you.

  • prioritize the distribution of resources for applying countermeasures.

  • look at your operation from both the friendly and adversary perspectives.

  • assess the level of risk to your operation.

Erklärung

Frage 66 von 172

1

In order to determine our critical information, we need to consider both the friendly and adversary points of view.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 67 von 172

1

Which of the following statements concerning activity tip-offs is correct?

Wähle eine der folgenden:

  • They are indicators that tell adversaries where to focus their collection efforts

  • They are vulnerabilities that tell adversaries where to focus their collection efforts

  • They are indicators that are not part of a unit's normal conduct

  • They are vulnerabilities that are not part of a unit's normal conduct

Erklärung

Frage 68 von 172

1

The level of risk is indirectly proportional to all three factors of risk.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 69 von 172

1

The more we know about an adversary's intent and capability, the better we can judge how and why he may collect the information that he needs.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 70 von 172

1

Identifying a unit based upon how they deploy their equipment is an example of

Wähle eine der folgenden:

  • a pattern example of an indicator.

  • a predictable action example of a risk.

  • a stereotype example of a vulnerability.

  • pattern example of a threat.

Erklärung

Frage 71 von 172

1

Which of the following is NOT a step in the OPSEC process?

Wähle eine der folgenden:

  • Lock all classified material

  • Identify critical information

  • Analyze the threat

  • Apply countermeasures

Erklärung

Frage 72 von 172

1

Which step in the OPSEC process requires you to look at your operation through the eyes of the adversary?

Wähle eine der folgenden:

  • Analyze vulnerabilities

  • Apply countermeasures

  • Identify critical information

  • All of the choices

Erklärung

Frage 73 von 172

1

Which of the following statements BEST describes the risk status if any one element of risk shrinks to zero?

Wähle eine der folgenden:

  • There is no risk.

  • The level of risk remains constant.

  • The level of risk increases.

  • The level of risk decreases.

Erklärung

Frage 74 von 172

1

Specific facts about friendly intentions, capabilities, and operations vitally needed by adversaries to plan and act effectively is called

Wähle eine der folgenden:

  • critical information.

  • vulnerabilities.

  • indicators.

  • risk

Erklärung

Frage 75 von 172

1

Which of the following countermeasures may be necessary if routine activities provide an adversary with tip-offs to critical information?

Wähle eine der folgenden:

  • Awareness training

  • Speed of execution

  • Cover and deception

  • Changes in procedure

Erklärung

Frage 76 von 172

1

An advantage of incorporating the use of OPSEC surveys is that it

Wähle eine der folgenden:

  • provides for early detection of OPSEC problems.

  • reduces indicators and avoids giving an adversary activity tip-offs.

  • makes OPSEC principles second nature to your employees

  • allows for any changes in OPSEC factors over time.

Erklärung

Frage 77 von 172

1

Which of the following countermeasures should be used sparingly because of its expense and maintenance difficulty?

Wähle eine der folgenden:

  • Changes in procedure

  • Cover and deception

  • Speed of execution

  • Awareness training

Erklärung

Frage 78 von 172

1

Your knowledge of which factors impact your capability to analyze your vulnerabilities?

Wähle eine der folgenden:

  • Your mission

  • Your operations

  • The interaction with other OPSEC steps

  • All of these choices

Erklärung

Frage 79 von 172

1

Which of the following BEST identifies the goal of OPSEC?

Wähle eine der folgenden:

  • To provide you with a holistic picture of your operation

  • To protect your operation by properly controlling classified information

  • To establish a systematic process to assess the requirements for mission success

  • To control information about your capabilities and intentions

Erklärung

Frage 80 von 172

1

What document signed by President Reagan directed the establishment of OPSEC programs, and in what year did this document become law?

Wähle eine der folgenden:

  • NSDD 289; in 1988

  • NSDD 289; in 1989

  • NSDD 298; in 1988

  • NSDD 298; in 1989

Erklärung

Frage 81 von 172

1

Observable and detectable items that can be pieced together through analysis to reveal sensitive information about your operation are called

Wähle eine der folgenden:

  • indicators.

  • critical information items.

  • threats.

  • vulnerabilities.

Erklärung

Frage 82 von 172

1

Which of the following countermeasures is considered among the most effective for all organizations?

Wähle eine der folgenden:

  • Cover and deception

  • Changes in procedure

  • Awareness training

  • Speed of execution

Erklärung

Frage 83 von 172

1

It's often the little things we do every day that can develop into vulnerabilities and cause damage to our operation.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 84 von 172

1

An advantage of incorporating OPSEC principles in the planning stage of any operation is that it

Wähle eine der folgenden:

  • makes OPSEC principles second nature to your employees.

  • provides for early detection of OPSEC problems.

  • reduces indicators and avoids giving an adversary activity tip-offs.

  • allows for any changes in OPSEC factors over time.

Erklärung

Frage 85 von 172

1

An advantage of using good OPSEC principles during contingencies is that it

Wähle eine der folgenden:

  • makes OPSEC principles second nature to your employees.

  • reduces indicators and avoids giving an adversary activity tip-offs.

  • allows for any changes in OPSEC factors over time.

  • provides for early detection of OPSEC problems.

Erklärung

Frage 86 von 172

1

Because each adversary may have different intentions and capabilities, you may need to enact different scenarios for different adversaries.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 87 von 172

1

Which of the following, when looked at by itself or in conjunction with something else, can point to a vulnerability that an adversary can exploit?

Wähle eine der folgenden:

  • Critical information item

  • Risk

  • Indicator

  • Threat

Erklärung

Frage 88 von 172

1

What is defined as a weakness that can be exploited by an adversary?

Wähle eine der folgenden:

  • Vulnerability

  • Risk

  • Countermeasure

  • Threat

Erklärung

Frage 89 von 172

1

Risk is a function of the

Wähle eine der folgenden:

  • threat only.

  • threat, vulnerability, and impact.

  • vulnerability and impact.

  • threat and vulnerability.

Erklärung

Frage 90 von 172

1

An advantage of integrating OPSEC principles in your day-to-day operations is that it

Wähle eine der folgenden:

  • allows for any changes in OPSEC factors over time.

  • reduces indicators and avoids giving an adversary activity tip-offs.

  • provides for early detection of OPSEC problems.

  • makes OPSEC principles second nature to your employees.

Erklärung

Frage 91 von 172

1

OPSEC differs from other programs because it requires you to look at yourself through the eyes of the adversary.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 92 von 172

1

Anyone who opposes or acts against your interest is called a(n)

Wähle eine der folgenden:

  • liability.

  • threat.

  • adversary.

  • risk.

Erklärung

Frage 93 von 172

1

In analyzing the threat, we are concerned with adversaries that

Wähle eine der folgenden:

  • possess the ability to acquire and exploit our critical information.

  • intend to do us harm.

  • demonstrate the intent and capability to be a threat to our mission.

  • possess the ability to exploit our critical information.

Erklärung

Frage 94 von 172

1

Stan has recently witnessed some unusual behavior from a co-worker. He’s not sure if he should report it, but he knows it is better not to report an incident or behavior than to make a potentially false report.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 95 von 172

1

Jorge is a security official for a DoD organization. Where can he find reporting procedures that pertain to his organization?

Wähle eine der folgenden:

  • DoD Directive 5240.06, CI Awareness and Reporting (CIAR)

  • DoD 5220.22-M, the National Industrial Security Program Operating Manual (NISPOM)

  • DSS Counterintelligence Office

Erklärung

Frage 96 von 172

1

Security officials should seek out and consider threat information only from official, government sources.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 97 von 172

1

Which of the following is an objective of the DSS CI Directorate?

Wähle eine der folgenden:

  • Provide for the early detection and referral of potential espionage cases

  • Conduct counterintelligence investigations for the U.S.

  • Maintain list of militarily critical technology

Erklärung

Frage 98 von 172

1

Specific reporting procedures vary widely across agencies and contractor facilities. While imminent threats should be reported directly to the FBI, employees should use their agency’s or facility’s reporting procedures to report other threats through their chain of command.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 99 von 172

1

Incorporating counterintelligence and threat awareness into a security program can potentially prevent theft, espionage, and loss of life.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 100 von 172

1

Jack is his organization’s Facility Security Officer. He is working with other company officials to identify the organization’s assets. When they identify assets, they should include only classified information.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 101 von 172

1

Sam is a Facility Security Officer for a cleared defense contractor. Which of the following should Sam refer to for counterintelligence and threat awareness requirements for contractors?

Wähle eine der folgenden:

  • DoD 5200.2-R, Personnel Security Program

  • DoD 5220.22-M, the National Industrial Security Program Operating Manual (NISPOM)

  • DoDM 5200.01, Volume 1, Enclosure 3, DoD Information Security Program

Erklärung

Frage 102 von 172

1

A cleared U.S. company received a request to sell export-controlled technology to an Eastern European security organization. This is an example of _____________________.

Wähle eine der folgenden:

  • a cyber threat

  • an unsolicited request

  • solicitation and marketing of services

  • targeting insiders

Erklärung

Frage 103 von 172

1

Select ALL the correct responses. Adam is an expert in his organization’s dual use technology. He is invited to speak at a foreign conference. He knows seminars, conventions, and exhibits can be used by adversaries to target knowledgeable resources like him. What are some of the indicators Adam should look out for?

Wähle eine oder mehr der folgenden:

  • Foreign attendees’ business cards do not match stated affiliations

  • Excessive or suspicious photography and filming of technology and products

  • Conversations involving classified, sensitive, or export-controlled technologies or products

Erklärung

Frage 104 von 172

1

Anna is her organization’s Facility Security Officer. When considering assets, she knows that the greatest target of our adversaries is ___________.

Wähle eine der folgenden:

  • human assets

  • technology assets

  • equipment assets

Erklärung

Frage 105 von 172

1

Which step of the analytical risk management process includes considering the impact to military and strategic advantage?

Wähle eine der folgenden:

  • Identify vulnerabilities

  • Assess risk

  • Develop and apply countermeasures

  • Identify assets

Erklärung

Frage 106 von 172

1

Which of the following is a secure online environment offered by the OPM Center for Federal Investigative Services?

Wähle eine der folgenden:

  • American Society for Industrial Security International (ASIS)

  • NCMS, the Society of Industrial Security Professionals

  • Industrial Security Awareness Council (ISAC)

  • Extranet for Security Professionals

Erklärung

Frage 107 von 172

1

The Secretary of Defense is the Executive Agent of the National Industrial Security Program and is responsible for overall implementation of the program.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 108 von 172

1

The Cognizant Security Office (CSO) for the DoD is Director of National Intelligence (DNI).

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 109 von 172

1

Which government entity is responsible for providing National Industrial Security Program (NISP) policy direction?

Wähle eine der folgenden:

  • Cognizant Security Agencies (CSAs)

  • Secretary of Defense (SecDef)

  • National Security Council (NSC)

  • Information Security Oversight Office (ISOO)

Erklärung

Frage 110 von 172

1

What document does DSS publish and post on its website to change or clarify existing policy requirements in the NISPOM?

Wähle eine der folgenden:

  • CDSE Newsletter

  • DSS Access Magazine

  • Technology Collection Trends in the U.S. Defense Industry

  • Industrial Security Letter (ISL)

Erklärung

Frage 111 von 172

1

Only select Cognizant Security Agencies (CSAs) have hotlines for reporting industrial security issues.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 112 von 172

1

XYZ Industries is a cleared facility that is moving its headquarters to a less expensive office space. This need to be reported to the company’s IS Rep?

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 113 von 172

1

Which of the following includes all the steps necessary for processing a facility clearance and a list of the documents and information that the Facility Security Officer (FSO) must gather to prepare for the Facility Clearance Branch (FCB) telephonic survey?

Wähle eine der folgenden:

  • Facility Clearance Checklist

  • Industrial Security Facilities Database (ISFD)

  • DD Form 254 Handbook

  • National Industrial Security Program Operating Manual (NISPOM)

Erklärung

Frage 114 von 172

1

In the NISPOM, what location does “1-302” represent?

Wähle eine der folgenden:

  • Chapter 1, Section 3, Paragraph 2

  • Chapter 1, Section 30, Paragraph 2

  • Chapter 1, Page 302

  • Section 1, Paragraph 30, Page 2

Erklärung

Frage 115 von 172

1

The domestic delivery services approved for overnight domestic delivery of Secret and Confidential information are listed in the ______________________.

Wähle eine der folgenden:

  • DD Form 254, DoD Contract Security Classification Specification

  • Transportation, Delivery, and Relocation Solutions (TDRS), Schedule 48

  • National Industrial Security Program Operating Manual (NISPOM)

Erklärung

Frage 116 von 172

1

When is an SF 312, Classified Information Nondisclosure Agreement, executed?

Wähle eine der folgenden:

  • Within the first six months after eligibility is granted

  • As soon as the completed SF 86 is reviewed by the FSO.

  • Before an employee is granted access to classified information

  • After an employee has access to classified information

Erklärung

Frage 117 von 172

1

Which of the following would not be reported to the Personnel Security Management Office for Industry (PSMO-I)?

Wähle eine der folgenden:

  • Employees desiring not to perform on classified work

  • Adverse information

  • Changes in cleared employee status

  • Change conditions affecting the facility clearance

Erklärung

Frage 118 von 172

1

What DSS organization provides security education and training to DoD and other U.S. government personnel and contractors?

Wähle eine der folgenden:

  • Facility Clearance Branch (FCB)

  • Foreign Ownership, Control, or Influence (FOCI) Operations Division

  • Personnel Security Management Office for Industry (PSMO-I)

  • Center for Development of Security Excellence (CDSE)

Erklärung

Frage 119 von 172

1

What legally binding document must be executed between the Department of Defense and a contractor to obtain a facility clearance?

Wähle eine der folgenden:

  • SF 328, Certificate Pertaining to Foreign Interests

  • DD Form 441, DoD Security Agreement

  • SF 86, Questionnaire for National Security Positions

  • SF 312, Non-Disclosure Form

Erklärung

Frage 120 von 172

1

One purpose of the National Industrial Security Program (NISP) is to preserve our nation’s economic and technological interests.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 121 von 172

1

Which resource guides Facility Security Officers (FSOs) through the self-inspection process and provides techniques to improve the quality of self-inspections?

Wähle eine der folgenden:

  • Self-Inspection Handbook for NISP Contractors

  • National Industrial Security Program Operating Manual (NISPOM)

  • Suggested Contract File Folder Headings job aid

Erklärung

Frage 122 von 172

1

Company ABC was recently issued a facility clearance and has been awarded its first classified contract. Which form should the company receive with the contract that provides specific guidance about what information is classified and at what classification level?

Wähle eine der folgenden:

  • SF 328, Certificate Pertaining to Foreign Interests

  • SF 312, Classified Information Nondisclosure Agreement

  • SF 86, Questionnaire for National Security Positions

  • DD Form 254, Department of Defense Contract Security Classification Specification

Erklärung

Frage 123 von 172

1

As defined in the NISPOM, ______ is the administrative determination that an individual is eligible for access to classified information.

Wähle eine der folgenden:

  • access level

  • need-to-know

  • a Personnel Security Clearance (PCL)

  • eligibility level

Erklärung

Frage 124 von 172

1

What security control measure outlines the specific export-controlled information that has been authorized for release during a foreign visit and delineates how a company will control access?

Wähle eine der folgenden:

  • Export Authorization

  • Technology Control Plan (TCP)

  • Security Assurance

  • Disclosure Agreement

Erklärung

Frage 125 von 172

1

If the visitor organization and host organization both use the DoD System of Record, visit notifications are sent electronically, which speeds the approval process.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 126 von 172

1

When the host organization approves a visit request, this approval constitutes _____.

Wähle eine der folgenden:

  • authority to establish security controls

  • authority to obtain a Facility Verification Request

  • authority to request additional special access authorizations

  • authority for disclosure

Erklärung

Frage 127 von 172

1

If there is not a contractual relationship between the visitor’s organization and the host organization, where must the host organization obtain authorization for disclosure of classified information?

Wähle eine der folgenden:

  • DSS Industrial Security Representative

  • Industrial Security Facilities Database (ISFD)

  • Government Contracting Activity (GCA)

Erklärung

Frage 128 von 172

1

What security control measures must the host organization implement for a classified meeting?

Wähle eine der folgenden:

  • Physical security controls for the control of, access to, and dissemination of the classified information to be presented

  • Security control measures must provide for security briefings and signed certificates.

  • None. Security control measures are the responsibility of the Cognizant Security Agency.

  • None. Security control measures are the responsibility of the Government Contracting Activity.

Erklärung

Frage 129 von 172

1

An individual’s access level is directly related to the employer organization’s Facility Clearance level and the level of access needed for the individual to do his or her job.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 130 von 172

1

When is it appropriate for the visitor’s organization to submit a visit authorization letter (VAL)?

Wähle eine der folgenden:

  • When the visit is a contract-related classified visit

  • When the request needs to be submitted and approved quickly

  • When one or both organizations do not utilize the web-based DoD System of Record

  • When either the visitor’s or host organization does not utilize the Industrial Security Facilities Database

Erklärung

Frage 131 von 172

1

Where are actions, such as Personnel Security Clearance terminations, upgrades, downgrades, and reinstatements, on contractor employees entered?

Wähle eine der folgenden:

  • Industrial Security Facilities Database (ISFD)

  • International Visits Program (IVP)

  • DoD System of Record

Erklärung

Frage 132 von 172

1

Which of the following is a good security practice in areas where classified information may be subject to unauthorized disclosure?

Wähle eine der folgenden:

  • Inform the DSS IS Representative that all visitors to the area must wear a badge

  • Inform the project manager of the heightened risk and ensure the visitor has an escort

  • Provide visitors with a badge and an escort who has been informed of the access limitations or restrictions on the visitor's movements.

Erklärung

Frage 133 von 172

1

Select ALL of the correct responses. Which of the following are security briefing topics for visitors?

Wähle eine oder mehr der folgenden:

  • How to verify need-to-know in the DoD System of Record before a classified discussion

  • Physical security procedures and access areas

  • Use of Portable Electronic Devices

  • Policy and procedures for transmitting and/or transporting classified material

Erklärung

Frage 134 von 172

1

_____ describes the level of information to which a person is authorized access based on a background investigation.

Wähle eine der folgenden:

  • Need-to-know

  • Access level

  • Eligibility

  • Personnel Security Clearance

Erklärung

Frage 135 von 172

1

Who must submit the RFV when a foreign national needs to visit a U.S. contractor facility to discuss classified information?

Wähle eine der folgenden:

  • Sponsoring foreign government

  • Both the foreign contracting company and the sponsoring foreign government

  • U.S. contractor

  • Foreign contracting company

Erklärung

Frage 136 von 172

1

What system may be used to verify a company’s Facility Clearance status?

Wähle eine der folgenden:

  • Joint Personnel Adjudication System (JPAS)

  • Industrial Security Facilities Database (ISFD)

  • DoD System of Records

Erklärung

Frage 137 von 172

1

Who sponsors classified meetings in the NISP?

Wähle eine der folgenden:

  • Universities and industry associations

  • DSS Headquarters, Industrial Security Integration and Application (IP) Programs

  • Cognizant Security Agency (CSA)

  • U.S. contractor

  • Government Contracting Activity (GCA)

Erklärung

Frage 138 von 172

1

What is a final security control in the NISP when the purpose of a visit has been accomplished?

Wähle eine der folgenden:

  • Recovery of all classified information

  • To ensure any classified material that may be of use in a follow-on contract is transported securely to the visitor’s organization

  • To ensure that all classified material has been properly stored and inventoried

Erklärung

Frage 139 von 172

1

Government employees temporarily stationed at a contractor facility ______ control of their work products to the contractor.

Wähle eine der folgenden:

  • must reach an agreement for

  • must relinquish

  • do not have to relinquish

Erklärung

Frage 140 von 172

1

Who sends the NATO Request for Visit (RFV) approval to the NATO site?

Wähle eine der folgenden:

  • Visitor’s Facility Security Officer (FSO)

  • DSS Headquarters Industrial Security Integration and Application (IP) Programs

  • Cognizant Security Agency (CSA)

  • Government Contracting Activity (GCA)

Erklärung

Frage 141 von 172

1

When does a host need to coordinate with the visitor’s organization regarding the Classified Information Nondisclosure Agreement (SF-312)?

Wähle eine der folgenden:

  • When the visit is a first-time visit and the DoD System of Records does not indicate that the visitor has signed an SF-312

  • The visitor must always sign it at every visit to any classified facility

  • When the visitor presents a visit authorization letter (VAL)

  • When it is the visitor’s first visit to the cleared facility

Erklärung

Frage 142 von 172

1

International visit requirements apply when information to be disclosed is classified or unclassified but related to classified contracts or otherwise subject to export controls under the International Traffic in Arms Regulations (ITAR) or Export Administration Regulations (EAR).

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 143 von 172

1

NATO briefings require a signed certificate.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 144 von 172

1

Which of the following is used in the PCL process to determine a candidate’s eligibility?

Wähle eine der folgenden:

  • Adjudicative Guidelines

  • E.O. 12968

  • E.O. 13467

  • NIPSOM

Erklärung

Frage 145 von 172

1

Who makes the interim eligibility determination?

Wähle eine der folgenden:

  • OPM/ISP

  • DSS Field Office

  • DOHA

  • PSMO-I

Erklärung

Frage 146 von 172

1

To whom does the FSO submit the applicant’s completed SF-86 and both signed release forms?

Wähle eine der folgenden:

  • OPM

  • DOHA

  • PSMO-I

Erklärung

Frage 147 von 172

1

How is the FSO notified that a cleared employee may be due for a periodic reinvestigation?

Wähle eine der folgenden:

  • The facility’s IS Rep notifies the FSO

  • The FSO is not notified but must look for eligible employees in the DoD system of record

  • PSMO-I notifies the FSO

Erklärung

Frage 148 von 172

1

The only requirement for employees to access classified information is to have a favorable eligibility determination.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 149 von 172

1

A contractor facility has been awarded classified contracts that require access to information classified at the Confidential and Secret levels. What is the level of FCL required by the contractor?

Wähle eine der folgenden:

  • Confidential

  • Secret

  • Top Secret

Erklärung

Frage 150 von 172

1

What is the purpose of an annual clearance justification review?

Wähle eine der folgenden:

  • To ensure there are enough cleared employees to meet the needs of a contractor company’s classified contract workload

  • To provide the CEO with justification for hiring more cleared employees

  • To assess whether a cleared employee still requires access to classified information

Erklärung

Frage 151 von 172

1

One of the conditions required for a pre-existing eligibility determination issued by one federal agency to be accepted by another federal agency is for the determination to be based on an investigation of sufficient scope that is current to within _________.

Wähle eine der folgenden:

  • 5 years

  • 7 years

  • 10 years

Erklärung

Frage 152 von 172

1

The thirteen adjudicative guidelines involve assessing a candidate using criteria that addresses a specific concern that can impact the candidate’s ability to protect national security.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 153 von 172

1

If a candidate has a record in the DoD system of record (JPAS/DISS) and a pre-existing eligibility determination, the FSO assesses whether that determination may be accepted in lieu of initiating a new investigation to determine eligibility.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 154 von 172

1

The __________________ develops and implements a facility’s security program.

Wähle eine der folgenden:

  • Cognizant Security Officer (CSO)

  • Facility Security Officer (FSO)

  • Personnel Security Officer (PSO)

Erklärung

Frage 155 von 172

1

A company cleared at the Secret level hires a new employee. The new employee has a current Top Secret eligibility, which was granted by her previous employer. What is the highest level of classified access she may have for work performed for her new employer?

Wähle eine der folgenden:

  • Secret

  • Top Secret

  • Confidential

Erklärung

Frage 156 von 172

1

Which investigation type is required for an initial Secret clearance?

Wähle eine der folgenden:

  • Tier 3R

  • Tier 5R

  • Tier 5

  • Tier 3

Erklärung

Frage 157 von 172

1

The FSO submits the applicant’s completed SF-86 using which of the following?

Wähle eine der folgenden:

  • JCAVS/DISS

  • JPASS/DISS Portal

  • eQIP

Erklärung

Frage 158 von 172

1

How is the applicant’s FSO notified if the applicant receive an unfavorable eligibility determination?

Wähle eine der folgenden:

  • DoD System of Record

  • DOHA communication

  • eQIP notification

Erklärung

Frage 159 von 172

1

Which of the following provides policy about PCLs and defines access criteria?

Wähle eine der folgenden:

  • E.O. 13467

  • E.O. 12968

  • USD(I) Memo 25 Dec 2005

  • NISPOM

Erklärung

Frage 160 von 172

1

Which investigation is used for a periodic reinvestigation of an individual possessing a Secret or Confidential clearance eligibility?

Wähle eine der folgenden:

  • Tier 5R

  • Tier 5

  • Tier 3

  • Tier 3R

Erklärung

Frage 161 von 172

1

Facility employees may be processed for personnel security clearances concurrently with the processing of, or after the award of, a facility’s FCL.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 162 von 172

1

During which stage of the personnel security clearance process are the thirteen guidelines used?

Wähle eine der folgenden:

  • Adjudication stage

  • Interim review stage

  • Personnel security clearance investigation stage

  • Initiate personnel security clearance process stage

Erklärung

Frage 163 von 172

1

Who has primary responsibility for the adjudication of personnel security background investigations?

Wähle eine der folgenden:

  • PSMO-I

  • DOHA

  • DoD CAF

Erklärung

Frage 164 von 172

1

An interim eligibility determination grants the applicant permanent access to classified information by bypassing the remainder of the PCL process.

Wähle eins der folgenden:

  • WAHR
  • FALSCH

Erklärung

Frage 165 von 172

1

Which investigation type is required for an initial Top Secret Clearance?

Wähle eine der folgenden:

  • Tier 3

  • Tier 5R

  • Tier 3R

  • Tier 5

Erklärung

Frage 166 von 172

1

Which of the following items must the FSO report to the PSMO-I?

Wähle eine der folgenden:

  • A cleared employee has received an industry award

  • A cleared employee’s citizenship has changed

  • An uncleared employee’s citizenship has changed

Erklärung

Frage 167 von 172

1

To whom may eligibility decisions be appealed if the DoD CAF denies eligibility?

Wähle eine der folgenden:

  • PSMO-I

  • DSS Field Office

  • DOHA

Erklärung

Frage 168 von 172

1

Which of the following government entities typically determines personnel security clearance eligibility?

Wähle eine der folgenden:

  • DoD CAF

  • DSS Field Office

  • DOHA

Erklärung

Frage 169 von 172

1

Which type of security training typically informs cleared employees of changes or updates to security regulations?

Wähle eine der folgenden:

  • Initial Security Training

  • Special Security Briefing

  • Refresher Security Training

Erklärung

Frage 170 von 172

1

Which activities are recommended as part of continuous evaluation program at a cleared facility?
a. periodic reinvestigations
b. annual clearance justification reviews
c. reporting required information

Wähle eine der folgenden:

  • b and c only

  • a only

  • a and b only

  • a, b, and c

Erklärung

Frage 171 von 172

1

Which of the following government entities adjudicates unfavorable eligibility determinations that are appealed?

Wähle eine der folgenden:

  • PSMO-I

  • DSS Field Office

  • DOHA

Erklärung

Frage 172 von 172

1

When is an applicant required to submit fingerprints in addition to his/her security application?

Wähle eine der folgenden:

  • During a periodic reinvestigation of a cleared individual

  • During the applicants initial PCL investigation

  • Only when the applicant is seeking Top Secret clearance eligibility

  • The applicant is never required to submit a fingerprint card, but it is a best practice.

Erklärung