Counterintelligence and Security Exam
Questions 2026/2027: 86 Multiple-Choice
Practice Questions with Detailed
Explanations for DoD Security, Espionage
Indicators, Insider Threats, and
Cybersecurity Exam Prep
Description:
Master counterintelligence security exams with this comprehensive 2026/2027 test bank
featuring 86 multiple-choice questions covering Potential Espionage Indicators, DoDD
5240.06 reporting requirements, Executive Order 12333 counterintelligence fundamentals,
insider threat detection, cybersecurity vulnerabilities, personnel security clearances,
foreign intelligence tradecraft, and legal frameworks. Each question includes a detailed
explanation and answer key. Essential study resource for security professionals, DoD
personnel, and students preparing for counterintelligence certification exams.
Download now and pass your security exams with confidence!
, Counterintelligence Exam Bank 2026: 86 Practice Questions &
Answers
SECTION A: POTENTIAL ESPIONAGE INDICATORS (PEIs)
Question 1
Which of the following best describes Potential Espionage Indicators (PEIs)?
A) Confirmed evidence of espionage activities requiring immediate arrest
B) Activities, behaviors, or circumstances that "may be indicative" of potential espionage
activities by an individual who may have volunteered or been recruited by a foreign entity
C) Security violations that automatically result in termination of employment
D) Documented proof of foreign intelligence operations against an organization
Answer: B
Explanation: Potential Espionage Indicators are defined as activities, behaviors, or
circumstances that "may be indicative" of potential espionage activities by an individual who
may have volunteered or been recruited by a foreign entity as a witting espionage agent. PEIs are
not confirmed evidence but rather warning signs that warrant further investigation.
Question 2
Which combination of indicators would be classified as Potential Espionage Indicators?
A) Unexplained affluence, unusual work hours, concealing foreign travel, and disgruntled
behavior
B) Excellent performance reviews, regular attendance, and open communication
C) Volunteering for extra assignments, mentorship of junior staff, and transparent financial
records
D) Participation in professional development, routine travel with proper authorization, and
positive peer feedback
Answer: A
,Explanation: Unexplained affluence, unusual work hours, concealing foreign travel, and
disgruntled behavior are all recognized PEIs. These indicators, particularly when observed in
combination, may suggest an individual is engaged in unauthorized activities or has been
compromised by a foreign entity.
Question 3
Which of the following is NOT typically considered a Potential Espionage Indicator?
A) Attempting to gain access to information without a valid need-to-know
B) Taking classified material home without authorization
C) Reporting a colleague's suspicious behavior to security personnel
D) Unreported contact with foreign nationals
Answer: C
Explanation: Reporting suspicious behavior to security personnel is a responsible action and
demonstrates good security practices. The other options (attempting unauthorized access,
removing classified material, and unreported foreign contacts) are all recognized PEIs that
require immediate attention and reporting.
Question 4
A cleared employee has recently purchased a luxury vehicle and property that appear
inconsistent with their known salary. They have also been observed working unusual hours and
have reportedly traveled overseas without proper authorization. What action should be taken?
A) Immediately arrest the employee based on these indicators
B) Confront the employee directly and demand an explanation
C) Report these observations to the appropriate security office for assessment
D) Ignore the indicators as they are likely coincidental
Answer: C
, Explanation: The combination of unexplained affluence, unusual work hours, and unreported
foreign travel constitutes multiple PEIs. These indicators should be reported to the security
office, which can conduct appropriate inquiries through established channels. Reporting allows
for proper assessment while avoiding premature conclusions or actions that might compromise
an investigation.
Question 5
Which of the following behavioral patterns represents the most concerning combination of
Potential Espionage Indicators?
A) Working overtime, arriving early, and completing assignments ahead of schedule
B) Unexplained affluence, concealing foreign travel, avoiding polygraph examinations, and
expressing disgruntlement
C) Taking regular vacation time, participating in company social events, and maintaining good
relationships with colleagues
D) Requesting additional training, seeking professional certifications, and applying for internal
promotions
Answer: B
Explanation: The combination of unexplained affluence, concealed foreign travel, polygraph
avoidance, and disgruntled behavior represents multiple overlapping PEIs that, when observed
together, significantly elevate concern about potential espionage activities. Each individual
indicator alone may be explainable, but the combination creates a pattern warranting immediate
security attention.
Questions 2026/2027: 86 Multiple-Choice
Practice Questions with Detailed
Explanations for DoD Security, Espionage
Indicators, Insider Threats, and
Cybersecurity Exam Prep
Description:
Master counterintelligence security exams with this comprehensive 2026/2027 test bank
featuring 86 multiple-choice questions covering Potential Espionage Indicators, DoDD
5240.06 reporting requirements, Executive Order 12333 counterintelligence fundamentals,
insider threat detection, cybersecurity vulnerabilities, personnel security clearances,
foreign intelligence tradecraft, and legal frameworks. Each question includes a detailed
explanation and answer key. Essential study resource for security professionals, DoD
personnel, and students preparing for counterintelligence certification exams.
Download now and pass your security exams with confidence!
, Counterintelligence Exam Bank 2026: 86 Practice Questions &
Answers
SECTION A: POTENTIAL ESPIONAGE INDICATORS (PEIs)
Question 1
Which of the following best describes Potential Espionage Indicators (PEIs)?
A) Confirmed evidence of espionage activities requiring immediate arrest
B) Activities, behaviors, or circumstances that "may be indicative" of potential espionage
activities by an individual who may have volunteered or been recruited by a foreign entity
C) Security violations that automatically result in termination of employment
D) Documented proof of foreign intelligence operations against an organization
Answer: B
Explanation: Potential Espionage Indicators are defined as activities, behaviors, or
circumstances that "may be indicative" of potential espionage activities by an individual who
may have volunteered or been recruited by a foreign entity as a witting espionage agent. PEIs are
not confirmed evidence but rather warning signs that warrant further investigation.
Question 2
Which combination of indicators would be classified as Potential Espionage Indicators?
A) Unexplained affluence, unusual work hours, concealing foreign travel, and disgruntled
behavior
B) Excellent performance reviews, regular attendance, and open communication
C) Volunteering for extra assignments, mentorship of junior staff, and transparent financial
records
D) Participation in professional development, routine travel with proper authorization, and
positive peer feedback
Answer: A
,Explanation: Unexplained affluence, unusual work hours, concealing foreign travel, and
disgruntled behavior are all recognized PEIs. These indicators, particularly when observed in
combination, may suggest an individual is engaged in unauthorized activities or has been
compromised by a foreign entity.
Question 3
Which of the following is NOT typically considered a Potential Espionage Indicator?
A) Attempting to gain access to information without a valid need-to-know
B) Taking classified material home without authorization
C) Reporting a colleague's suspicious behavior to security personnel
D) Unreported contact with foreign nationals
Answer: C
Explanation: Reporting suspicious behavior to security personnel is a responsible action and
demonstrates good security practices. The other options (attempting unauthorized access,
removing classified material, and unreported foreign contacts) are all recognized PEIs that
require immediate attention and reporting.
Question 4
A cleared employee has recently purchased a luxury vehicle and property that appear
inconsistent with their known salary. They have also been observed working unusual hours and
have reportedly traveled overseas without proper authorization. What action should be taken?
A) Immediately arrest the employee based on these indicators
B) Confront the employee directly and demand an explanation
C) Report these observations to the appropriate security office for assessment
D) Ignore the indicators as they are likely coincidental
Answer: C
, Explanation: The combination of unexplained affluence, unusual work hours, and unreported
foreign travel constitutes multiple PEIs. These indicators should be reported to the security
office, which can conduct appropriate inquiries through established channels. Reporting allows
for proper assessment while avoiding premature conclusions or actions that might compromise
an investigation.
Question 5
Which of the following behavioral patterns represents the most concerning combination of
Potential Espionage Indicators?
A) Working overtime, arriving early, and completing assignments ahead of schedule
B) Unexplained affluence, concealing foreign travel, avoiding polygraph examinations, and
expressing disgruntlement
C) Taking regular vacation time, participating in company social events, and maintaining good
relationships with colleagues
D) Requesting additional training, seeking professional certifications, and applying for internal
promotions
Answer: B
Explanation: The combination of unexplained affluence, concealed foreign travel, polygraph
avoidance, and disgruntled behavior represents multiple overlapping PEIs that, when observed
together, significantly elevate concern about potential espionage activities. Each individual
indicator alone may be explainable, but the combination creates a pattern warranting immediate
security attention.
