SANS FOR578 EXAM 2025 LATEST
EXAM LATEST VERSION QUESTIONS
AND CORRECT DETAILED ANSWERS
WITH RATIONALES |AGRADE
intelligence - Answer - ✔✔ Collection, processing and analysis of information - Both
process and product
Intelligence Sources - Answer - ✔✔ HUMINT
GEOINT
MASINT
SIGINT
OSINT
Counterintelligence - Answer - ✔✔ Identification, assesment, neutralization and
exploitation of intell activities of adversary
Kent´s analytical doctrine - Answer - ✔✔ 1) Focus on policmaker concern
2) Avoidance of a personal policy Agenda
3) Intellectual rigor
4) Conscious effort to avoid analytical biases
5) Willingness to consider other Judgements
6) Systematic use of outside expertise
7) Collective responsibility for judgement
8) Effective communication of policy-support information and judgements
9) Candid admission of mistakes
Analysis - Answer - ✔✔ A detailed examination of the elements or structure of
something.
Data driven analysis - Answer - ✔✔ Drawing inferences based on examination of the
intrinsic structure of data.
Requires good datasets and straightforward problems.
Is logically driven and easily replicated.
Conceptually driven analysis - Answer - ✔✔ Numerous unknowns and undefined
variables and relationsships.
Often immidiate interpretation of complex concepts.
Accuracy driven by mental models and feedback over time.
, Working memory - Answer - ✔✔ System that processes inputs and determines whether
or not they are important, encoding them for long-term or short-term memory storage
Pattern recognition - Answer - ✔✔ Cognitive process that matches information from
external sources to information that is stored in long-term memory.
Template matching - Answer - ✔✔ Every object and experience is processed by brain
and stored as a template in long-term memory. When presented with situation, long-
term memory is searched for matching template from the past.
Prototype matching - Answer - ✔✔ When presented with situation, long-term memory is
searched for AVERAGE or similiar templates reffered as a "prototype". More flexible
then template matching and better for working with incomplete information.
Top Down - Answer - ✔✔ Using previous knowledge (could be contextual) to fill in gaps
when we do not have complete information.
System I thinking - Answer - ✔✔ Intiutive thinking, fast, effective, often accurate but
prone to errors. Draws on available knowledge and experience and existing mental
modes.
System II thinking - Answer - ✔✔ "Analyttical thinking". slow, methodical and conscious.
Involves analytic processes like scientific method or structured analytical techniques.
Mental Models - Answer - ✔✔ System I thinking.
Experience base asumptions and expectations of the way the world operates
Structured Analytical Techniques - Answer - ✔✔ Almost al include Decomposition
(breaking problem into components) and Visualization (capturing parts of problem in
organized/visual manner)
6 distinct families:
- Getting Organized
- Reframing Techniques
- Exploration Techniques
- Foresight Techniques
- Diagnostic Techniques
- Decision Support Techniques
Intelligence Cycle - Answer - ✔✔ Planning and Direction
- identification and prioritization of intell gaps and requirements, creation of plan
Collection
- execution of plan and data collection to fiil intell gaps
Processing and exploitation
- preparation needed for raw data collected (filtering, transformation into different
format)
EXAM LATEST VERSION QUESTIONS
AND CORRECT DETAILED ANSWERS
WITH RATIONALES |AGRADE
intelligence - Answer - ✔✔ Collection, processing and analysis of information - Both
process and product
Intelligence Sources - Answer - ✔✔ HUMINT
GEOINT
MASINT
SIGINT
OSINT
Counterintelligence - Answer - ✔✔ Identification, assesment, neutralization and
exploitation of intell activities of adversary
Kent´s analytical doctrine - Answer - ✔✔ 1) Focus on policmaker concern
2) Avoidance of a personal policy Agenda
3) Intellectual rigor
4) Conscious effort to avoid analytical biases
5) Willingness to consider other Judgements
6) Systematic use of outside expertise
7) Collective responsibility for judgement
8) Effective communication of policy-support information and judgements
9) Candid admission of mistakes
Analysis - Answer - ✔✔ A detailed examination of the elements or structure of
something.
Data driven analysis - Answer - ✔✔ Drawing inferences based on examination of the
intrinsic structure of data.
Requires good datasets and straightforward problems.
Is logically driven and easily replicated.
Conceptually driven analysis - Answer - ✔✔ Numerous unknowns and undefined
variables and relationsships.
Often immidiate interpretation of complex concepts.
Accuracy driven by mental models and feedback over time.
, Working memory - Answer - ✔✔ System that processes inputs and determines whether
or not they are important, encoding them for long-term or short-term memory storage
Pattern recognition - Answer - ✔✔ Cognitive process that matches information from
external sources to information that is stored in long-term memory.
Template matching - Answer - ✔✔ Every object and experience is processed by brain
and stored as a template in long-term memory. When presented with situation, long-
term memory is searched for matching template from the past.
Prototype matching - Answer - ✔✔ When presented with situation, long-term memory is
searched for AVERAGE or similiar templates reffered as a "prototype". More flexible
then template matching and better for working with incomplete information.
Top Down - Answer - ✔✔ Using previous knowledge (could be contextual) to fill in gaps
when we do not have complete information.
System I thinking - Answer - ✔✔ Intiutive thinking, fast, effective, often accurate but
prone to errors. Draws on available knowledge and experience and existing mental
modes.
System II thinking - Answer - ✔✔ "Analyttical thinking". slow, methodical and conscious.
Involves analytic processes like scientific method or structured analytical techniques.
Mental Models - Answer - ✔✔ System I thinking.
Experience base asumptions and expectations of the way the world operates
Structured Analytical Techniques - Answer - ✔✔ Almost al include Decomposition
(breaking problem into components) and Visualization (capturing parts of problem in
organized/visual manner)
6 distinct families:
- Getting Organized
- Reframing Techniques
- Exploration Techniques
- Foresight Techniques
- Diagnostic Techniques
- Decision Support Techniques
Intelligence Cycle - Answer - ✔✔ Planning and Direction
- identification and prioritization of intell gaps and requirements, creation of plan
Collection
- execution of plan and data collection to fiil intell gaps
Processing and exploitation
- preparation needed for raw data collected (filtering, transformation into different
format)
