INSIDER THREAT AWARENESS EXAM

INSIDER THREAT AWARENESS EXAM

FLASHCARDS

EXAM PREPARATION GUIDE | 26 ITEMS

Q:Rafael works for a cleared defense contract. He was targeted by a foreign

collection attempt. To whom should rafael report a protentional threat Insider threat program senior official (ITPSO) or Facility Security Officer (FSO)

Q:Rose is a federal agency employee. She was targeted by a foreign collection

attempt. To whom should Ros report a potential threat.Insider threat program, security office, or supervisor

Q:Consider the following scenarios . Which may indicate an insider threat

vulnerabilityShawn...Hema...Jose....Sophia...Shawn works in facilities management....Hema is a DOD engineer......Q:Theo is a DOD employee. He shared with his co-worker that he recently ended his engagement. He purchased an expensive car and is moving across the county. To whom should his coworker report this behavior?Insider Threat Program Q:Victoria believes her facility is being targeted by a potential adversary. What could she have experiences or observed to believe this?her facility's cybersecurity tools indicate suspicious network activity

Q:William is a sanitation worker at a DOD facility and does not have a national

security eligibility determination. He took several photos of his work to share with his daughter's class as part of a school project. Documents marked SECRET were in the background of one of his photos. Does this incident pose an insider threat? Why or why not Yes the incident does meet the definition because William has authorized access, and his intention is irrelevant

Q:Ross is a federal employee. He was targeted at a conference and asked to

contribute classified and proprietary information to a research project Insider threat program, security officer, supervisor Q:Consider all the following Scenarios. Which are behavioral indicators that must be reported.Mattew...Sally........Fatima.......Bill........Fatima asked her coworkers about overtime.......Bill disregards security procedures and protocols..........

Q:Consider the following scenarios. Which behaviors must be reported?A

co-worker is seen taking a box marked CONFIDENTIAL to his car.A co-worker is suddently acting erratically and keeps saying people are following him.A co-worker is seen reading "Guns & Ammo" magazine during his lunch break.Your co-worker calls your boss a "waste of space" and complains that the boss could not do the job of any employee.A co-worker is seen taking a box marked CONFIDENTIAL to his car.A co-worker is suddenly acting erratically and keeps saying people are following him.

Q:Your agency was the target of sabotage. Who is responsible for reporting the

potential threat?Security PersonnelEmployeesLeadership PersonnelHuman resources Q:Johan is a janitor at a DOD facility. He does not have national security eligibility determination. When he is working near the building entrances, he often opens the door for anyone entering. Does this pose an insider threat as defined by the national insider threat task force. why or why not yes, the incident does meet the definition because Johan is using his authorized access and may cause damage by violating security procedures

Q:Consider the following scenarios. Which behaviors must be

reported?LanaLeoMingSOl Leo was rushed to make a deadline and bypassed security rules to finish on time....

Q:Robb is a DOD employee. He knows he must report potential threats. Which of

the following must he report.Foreign ContactsEfforts to compromise individuals with national security eligibility

Q:Sun works for a private cleared defense contractor . Her facility recently

experienced suspicious network activity but they have not yet located the source.Could the facility be the victim of adversarial targeting. Why or why not Yes adversaries target both public and private organization

Q:Which of the following scenarios may be indicative of adversarial targeting.

a scientist at your facility receives an unsolicited request....during a conference...your company's sales department receives a purchase....

Q:Rachel is a federal employee. She was targeted via social media and asked to

provide classified and proprietary information about her work. To whom should she report the contact Insider threat program, security officer, supervisor

Q:A coworker shares that she and her husband are facing foreclosure, and she

doesn't know what to do. How can you help your coworker reach a better outcome?Suggest that she contact the Employee assistance Program (EAP) Q:Farah hears a co-worker, upset with his boss, say "if i had a gun, i would shoot her!" What should Farrah do and why?Report it. Threatening violence is a reportable behavioral concern.

Q:Which of the following is true about insider threats.Insider threats involve

information and technology and do not include threats of terrorism or violenceInsider threats only include purposeful disclosure of national security informationInsider threats can include employees, vendors, contracts, volunteers, and anyone with authorized access to US government resources.Only US government employees or contractors can be insider threats.Insider threats can include employees, vendors, contracts, volunteers, and anyone with authorized access to US government resources.

Q:Tony is stressed out about his contract ending and is worried about finding a new job. He is missing meetings and snapping at co-workers. What should tony's boss do to create a better outcome for tony and the organization refer him to the employee assistance program (EAP)

Q:Jack works for a cleared defense contractor. He recently purchased a large,

expensive home well outside the price range of his salary. It is significant upgrade from his previous home and it is unclear how he was able to make such a large purchase. What should his coworkers do?Report it. Financial concerns are a potential risk indicator.

Q:Consider the following scenarios. Which behaviors must be

reported?Nissrine...Joe...Rimas....Frank......Nissrine ...Frank....

Q:Consider the following. What must contractors report?Events that impact the

status of the facility.Events that impact the status of an individuals personnel security clearanceAnything that affects the proper safeguarding of classified/proprietary informationIndications that classified/proprietary information has been lost of compromised Events that impact the status of the facility.Events that impact the status of an individuals personnel security clearanceAnything that affects the proper safeguarding of classified/proprietary informationIndications that classified/proprietary information has been lost of compromised Q:Susan regularly violates her organization's security policies. She has trouble getting along with her coworkers. She has been written up personnel issues and security violations several times. Based on this information, might she be increased risk of becoming an insider threat? Why or why not ?yes, Susan's consistent violations of security polices and her difficulty in maintaining positive relationships with coworkers and predispositions frequently associated with potential risk indicators of insider threat