DoD Certified Counter‑Insider Threat Professional – Fundamentals (CCITP‑F) Practice Exam

These questions are part of the practice quiz. Start practicing

• What do the Adjudicative Guidelines help to determine?
• What does the technique of Devil’s Advocacy involve?
• Which of the following is a mitigation response available to law enforcement?
• What year was the Americans with Disabilities Act (ADA) enacted?
• What does derivative classification involve?
• What is a key benefit of focusing on the root problem during analysis?
• Why is the protection of PII considered everyone's responsibility?
• What type of information is contained in disciplinary records?
• Which of the following is a relevant law enforcement record to insider threat programs?
• What is an indicator of anomalous behavior in security?
• What is the primary function of a causal flow diagram?
• Which bias might lead individuals to view events as more predictable after they have occurred?
• What issue may occur if individuals focus solely on their explanations without evaluating their accuracy?
• What is a requirement for doD Information Systems under DoDI 8500.01?
• What does the term "High Impact/Low Probability Analysis" refer to?
• What type of information do secondary sources primarily provide?
• What happens to classified documents after their declassification date?
• What unique insight does the security discipline provide in counter insider threat assessments?
• What is a common recommendation from behavioral science to mitigate insider threats?
• What does the NISPOM require regarding automated audit trails?
• Why might it be important to use a probability tree in evaluation processes?
• What forms part of the analytic standards for analytic products?
• What kind of information must be reported to information systems like DISS?
• What does Personally Identifiable Information (PII) refer to?
• How does the Defense Biometric Identification System (DBIDS) operate?
• In case of classified information being disclosed, which agency must the DoD report to?
• Which assumption can lead individuals to underestimate uncertainty in future events?
• What is the primary focus of the analytic standards regarding bias?
• What do Prevention, Assistant, and Response (PAR) capabilities aim to do?
• Who does the NPRC provide documented service to?
• How does HIPAA balance the use of health information?
• Who shares the responsibility in the Continuous Evaluation process?
• What does the term 'stressors' refer to in the context of behavioral science?
• Which document establishes requirements for the protection of classified information by contractors?
• The purpose of the HUB analyst in an Insider Threat program is to:
• What type of information do commercial databases typically provide?
• What is a key role of law enforcement in the context of insider threat programs?
• What does the Defense Central Index of Investigations (DCII) catalog?
• What action might be taken if security violations are identified?
• Which of the following is NOT an exemption under the Freedom of Information Act?
• What is one of the minimum technical capabilities required for UAM?
• What does NDAA FY18 specifically aim to integrate?
• What does divergent thinking allow for during the brainstorming process?
• According to regulations, when must industry report potential espionage activities?
• Which practice enhances physical security capabilities?
• What initiative is outlined in the National Defense Authorization Act (NDAA) FY17 Section 951?
• What aspect can influence employee attitudes, perceptions, and behaviors within an organization?
• Which guideline addresses conflicts arising from outside activities?
• Which of the following is NOT a minimum standard set by E.O. 13587?
• What is one potential indication of insider threat behavior?
• Which concept is critical for mitigating insider threats while respecting individuals' rights?
• Which bias refers to the human tendency to only seek information that confirms existing beliefs?
• How do emotional factors influence inquiry according to the text?
• Which of the following describes the 'Pros-Cons-Fixes' technique?
• Which system serves as the DoD's primary data repository for personnel and certain medical information?
• What is the purpose of response monitoring?
• What is the mission of the National Personnel Records Center (NPRC)?
• What is a key component of imaginative thinking in strategic analysis?
• Which of the following is NOT a responsibility of an Insider Threat program?
• What overarching authority does the Whistleblower Act of 1989 provide regarding complaints?
• What type of behaviors may be seen as a serious insider threat according to reporting standards?
• Which standard emphasizes the importance of training insider threat program personnel?
• What is a disadvantage of relying on biases in reasoning?
• What is the function of a utility tree/matrix in decision-making?
• Which type of behaviors must be reported to the appropriate CI office?
• Under the Intelligence Community Whistleblower Act of 1998, how quickly must the Inspector General of the CIA act upon a complaint?
• Which of the following is a key assumption in diagnostic techniques?
• Which employment record contains information about previous employers?
• Which of the following does NOT relate to personal predispositions?
• What document establishes policies for the Department of Defense Personnel Security Program?
• What initiates the Security Clearance Adjudicative Process?
• Which of the following is an example of a security violation?
• How can mental shortcuts compromise decision-making?
• What is one method used for security mitigation responses?
• Which of the following is NOT a role of behavioral science in counter insider threat assessments?
• What role does operational coordination play in counterintelligence efforts against insider threats?
• According to Occam's Razor, what is the recommended approach to problem-solving?
• According to the Privacy Act of 1974, what governs the collection of personally identifiable information?
• According to DoDD 5205.16, what is required of DoD components?
• Which of the following is a requirement established by E.O. 12333?
• What should analysts do to address critical information gaps?
• The DITMAC focuses on which of the following objectives?
• What challenge is associated with using mental shortcuts in reasoning?
• Which of the following are potential negative impacts of aggressive mitigation responses?
• Which aspect is critical for understanding concerning behaviors in relation to insider threats?
• What is the primary purpose of a scenario/decision tree?
• What does the PAR capabilities' network aim to do regarding DoD personnel?
• What key benefit does Continuous Monitoring provide in risk management?
• How should major analytic judgments convey uncertainties?
• What does the Defense Manpower Data Center (DMDC) primarily contain?
• What role does HR play in counter insider threat assessments?
• What kind of responses does behavioral science provide regarding mitigation capabilities?
• What role does organizational psychology play in the context of insider threat assessments?
• Which drawback is linked to relying on past experiences when using mental shortcuts?
• Under HIPAA, what is considered "protected health information"?
• Which directive defines user activity monitoring (UAM) capabilities?
• What type of reports does FINCEN specifically deal with?
• Which of the following is a focus of effective programs against foreign intelligence entities?
• What does the DoD 5200.08-R implement regarding security?
• What does a probability tree help determine?
• What does the legal department ensure regarding an insider threat program's actions?
• Which is NOT a feature of effective cybersecurity mitigation responses to insider threats?
• Why is it crucial to secure privileged user accounts?
• Which of the following best describes the purpose of Multi-disciplinary Insider Threat Working Groups?
• What is the role of demonstrating customer relevance in analytic assessments?
• What is the goal of Fourth Amendment protections?
• What does the intellectual standard of ‘clarity’ refer to?
• Which response options might an organization consider for handling insider threats?
• Which of the following is required by the E.O. 13587 to monitor employee use of classified networks?
• Which of the following is NOT a part of security auditing?
• What is the main purpose of the 'devil's advocacy' approach?
• What is the main function of the DITMAC System-of-Systems (DSOS)?
• Which of the following is not considered an anomalous behavior within the Cyber pillar?
• What should analysts do when there are existing judgments on a topic?
• What action does DoDD 5400.07 promote within the DoD Freedom of Information Act Program?
• Insider Threat programs primarily involve which of the following?
• Which action should be part of incident audit trails according to DoDI 8500.01?
• Which system provides online updates to DEERS and supports ID card issuance?
• What is considered a primary source of evidence in the context of individual verification?
• What is one of the goals of integrating PAR capabilities at the installation level?
• What is essential for the mission success of an Insider Threat program?
• Which aspect is NOT part of the intellectual standards framework?
• Which action is part of CI mitigation responses?
• What is the goal of hypothesis testing in a decision-making process?
• What does TTPs stand for in the context of counter-insider threats?
• What is the primary purpose of the insider threat programs established by federal agencies as per E.O. 13587?
• Which of the following is not considered HR information relevant to insider threat programs?
• What type of actions can HR take to mitigate insider threats?
• What effect do emotions have on reasoning skills, according to the text?
• What is the primary reporting channel for DoD and Federal Agencies to report potential insider threats?
• What is the obligation when classified information may be disclosed to a foreign agent?
• When should one consult with a behavioral science professional within the context of insider threat?
• Which term refers to the unlawful disclosure of classified information to foreign entities?
• What is the main purpose of the Intelligence Community Whistleblower Act of 1998?
• What does the DoDD 5240.06 establish regarding counterintelligence?
• What do humans tend to do instinctively, affecting their reasoning and decision-making?
• Which activity must cleared companies report to the FBI and DCSA?
• What type of information is stored in the TECS Database?
• How does CI contribute to proactive awareness of insider threats?
• What is the primary role of the U.S. Equal Employment Opportunity Commission?
• Which of the following is NOT an element of analytic tradecraft?
• Which action is NOT included in the requirements for audit logs according to NISPOM?
• What type of activities must be reported to the FBI and DCSA under industry reporting requirements?
• Which system replaced JPAS for personnel security adjudications?
• What is the primary purpose of long-term analysis of UAM data?
• What type of behaviors fall under the anomalous behaviors within the behavioral science pillar?
• What can the Special Counsel do in terms of protecting whistleblowers?
• What is the purpose of a System of Records Notice (SORN)?
• What does a compliance with reporting requirements indicate within the security framework?
• What aspect is critical in developing countermeasures against insider threats?
• What does the System of Records Notice (SORN) require agencies to publish?
• What does the Equal Employment Opportunity (EEO) laws prohibit?
• What is the purpose of the Continuous Evaluation (CE) process?
• How do chronologies and timelines assist analysts?
• What is a major benefit of employing devil's advocacy in discussions?
• What challenge can arise from subconscious explanations in reasoning?
• Which of the following is NOT included in the Adjudicative Guidelines?
• What defines a privileged user in an organization?
• What does the DoD 6025.18-R primarily implement?
• What branch of science primarily deals with human action and seeks to generalize about human behavior in society?
• What is the role of an Insider Threat program?
• What is crucial for maintaining investigations or prosecutions in insider threat incidents?
• What must be protected according to NISPOM when it comes to audit trails?
• Why is it important for analytic assessments to be timely?
• What is the intended outcome of the Fundamental Classification Guidance Review program?
• How does weighted ranking assist in decision making?
• What is a common challenge humans face when applying reasoning skills related to pattern recognition?
• Which of the following is not a task that a privileged user can perform?
• What is a primary objective of the counterintelligence discipline regarding insider threats?
• According to DoDI 1325.06, what actions can Commanders take against misconduct in protests?
• What does the First Amendment protect that complicates insider threat response?
• What indicator might not be considered a Potential Risk Indication (PRI)?
• Which executive order is authorized for marking and protecting controlled unclassified information?
• What must items containing classified information be classified as?
• Which of the following is essential in managing insider threats?
• What type of outcomes does the risk management framework aim to ensure for information resources?
• What does FINCEN handle?
• What is the purpose of the Common Access Card (CAC) within the DoD?
• Which of the following is a characteristic of 'Logic' in intellectual standards?
• What is a potential consequence of not protecting privileged accounts?
• What does the 'Breadth' standard in intellectual analysis refer to?
• What document outlines the activities of DOD intelligence components that affect US persons?
• What does the FOIA allow the public to do?
• Which of the following is NOT considered a diagnostic technique?
• Which of the following can lead to the escalation of concerning behavior according to the text?
• What is the primary aim of the FOIA exemptions?
• What does the Insider Threat Security Classification Guide provide?
• According to the Privacy Act, which right is granted to individuals regarding agency records?
• Which of the following highlights the military whistleblower protections according to DoDD 7050.06?
• What might be a financial consideration when evaluating Potential Risk Indications?
• What does the Privacy Act of 1974 regulate?
• What does DoD 5400.11-R establish within the Department of Defense?
• What type of conduct is NOT typically included in DITMAC reporting thresholds?
• What is the focus of the Defense Information System for Security (DISS)?
• Which organization is tasked with the enterprise-level management of insider threat information?
• What approach does counterintelligence use to prioritize security countermeasures?
• Which of the following is a consequence of failing to protect privacy and civil liberties?
• What is an insider threat?
• What type of index is the National Crime Information Center (NCIC)?
• Which of the following could indicate potential insider threat activity?
• When are DoD entities required to report to the FBI?
• In what way does the matrix aid in problem-solving?
• What does DoDI 5205.83 prescribe?
• Which class is NOT considered a protected class under Equal Employment Opportunity laws?
• Which of the following best describes the role of the Defense Data Integrity Board?
• What types of incidents are to be reported under Insider Threat Reporting Standards?
• Which section of the U.S. Code addresses coordination of CI activities?
• Which algorithm-related technology is essential for secure information delivery?
• What is the purpose of the National Intelligence Priorities Framework (NIPF)?