SANS FOR578 EXAMINATION TEST 2026
UPDATED QUESTIONS WITH VERIFIED
ANSWERS AND FULL RATIONALES
⩥ Intelligence Sources. Answer: HUMINT
GEOINT
MASINT
SIGINT
OSINT
⩥ Counterintelligence. Answer: Identification, assesment, neutralization
and exploitation of intell activities of adversary
⩥ Kent´s analytical doctrine. Answer: 1) Focus on policmaker concern
2) Avoidance of a personal policy Agenda
3) Intellectual rigor
4) Conscious effort to avoid analytical biases
5) Willingness to consider other Judgements
6) Systematic use of outside expertise
7) Collective responsibility for judgement
8) Effective communication of policy-support information and
judgements
,9) Candid admission of mistakes
⩥ Analysis. Answer: A detailed examination of the elements or structure
of something.
⩥ Data driven analysis. Answer: Drawing inferences based on
examination of the intrinsic structure of data.
Requires good datasets and straightforward problems.
Is logically driven and easily replicated.
⩥ Conceptually driven analysis. Answer: Numerous unknowns and
undefined variables and relationsships.
Often immidiate interpretation of complex concepts.
Accuracy driven by mental models and feedback over time.
⩥ Working memory. Answer: System that processes inputs and
determines whether or not they are important, encoding them for long-
term or short-term memory storage
⩥ Pattern recognition. Answer: Cognitive process that matches
information from external sources to information that is stored in long-
term memory.
, ⩥ Template matching. Answer: Every object and experience is processed
by brain and stored as a template in long-term memory. When presented
with situation, long-term memory is searched for matching template
from the past.
⩥ Prototype matching. Answer: When presented with situation, long-
term memory is searched for AVERAGE or similiar templates reffered
as a "prototype". More flexible then template matching and better for
working with incomplete information.
⩥ Top Down. Answer: Using previous knowledge (could be contextual)
to fill in gaps when we do not have complete information.
⩥ System I thinking. Answer: Intiutive thinking, fast, effective, often
accurate but prone to errors. Draws on available knowledge and
experience and existing mental modes.
⩥ System II thinking. Answer: "Analyttical thinking". slow, methodical
and conscious. Involves analytic processes like scientific method or
structured analytical techniques.
⩥ Mental Models. Answer: System I thinking.
Experience base asumptions and expectations of the way the world
operates
UPDATED QUESTIONS WITH VERIFIED
ANSWERS AND FULL RATIONALES
⩥ Intelligence Sources. Answer: HUMINT
GEOINT
MASINT
SIGINT
OSINT
⩥ Counterintelligence. Answer: Identification, assesment, neutralization
and exploitation of intell activities of adversary
⩥ Kent´s analytical doctrine. Answer: 1) Focus on policmaker concern
2) Avoidance of a personal policy Agenda
3) Intellectual rigor
4) Conscious effort to avoid analytical biases
5) Willingness to consider other Judgements
6) Systematic use of outside expertise
7) Collective responsibility for judgement
8) Effective communication of policy-support information and
judgements
,9) Candid admission of mistakes
⩥ Analysis. Answer: A detailed examination of the elements or structure
of something.
⩥ Data driven analysis. Answer: Drawing inferences based on
examination of the intrinsic structure of data.
Requires good datasets and straightforward problems.
Is logically driven and easily replicated.
⩥ Conceptually driven analysis. Answer: Numerous unknowns and
undefined variables and relationsships.
Often immidiate interpretation of complex concepts.
Accuracy driven by mental models and feedback over time.
⩥ Working memory. Answer: System that processes inputs and
determines whether or not they are important, encoding them for long-
term or short-term memory storage
⩥ Pattern recognition. Answer: Cognitive process that matches
information from external sources to information that is stored in long-
term memory.
, ⩥ Template matching. Answer: Every object and experience is processed
by brain and stored as a template in long-term memory. When presented
with situation, long-term memory is searched for matching template
from the past.
⩥ Prototype matching. Answer: When presented with situation, long-
term memory is searched for AVERAGE or similiar templates reffered
as a "prototype". More flexible then template matching and better for
working with incomplete information.
⩥ Top Down. Answer: Using previous knowledge (could be contextual)
to fill in gaps when we do not have complete information.
⩥ System I thinking. Answer: Intiutive thinking, fast, effective, often
accurate but prone to errors. Draws on available knowledge and
experience and existing mental modes.
⩥ System II thinking. Answer: "Analyttical thinking". slow, methodical
and conscious. Involves analytic processes like scientific method or
structured analytical techniques.
⩥ Mental Models. Answer: System I thinking.
Experience base asumptions and expectations of the way the world
operates
