INSIDER THREAT AWARNESS EXAM QUESTIONS AND ANSWERS

INSIDER THREAT AWARNESS EXAM QUESTIONS AND ANSWERS An insider is defined as any person with authorized access to any united states government resource to include personnel, facilities information, equipment, networks, or systems - ANSWER-True Which of the following are insider threats : Fort Hood shootings Greg Chung - Economic Espionage Wiki Leaks - ANSWER-All of the above Which of the following should be considered as reportable indicators of possible insider threats? - ANSWER-Unexplained or undue affluence Displaying questionable loyalty to U.S government Disgruntled employee During the spot and assessment phase of the recruitment, the foreign intelligence service will often explore potential exploitable weakness which may be used as a lever against the recruit if needed later - ANSWER-true Exploitable weaknesses by a foreign intelligence service when a considering a source for recruitment may include - ANSWER-Adultery Financial Problems Gambling Drugs or Alcohol Unauthorized downloads or copying of files, especially for employees who have given notice of employment termination, is an indicator of a possible insider threat - ANSWER-True Insider threat policy is only applicable to classified information. Sensitive, propriety, or need to know information is not currently protected by the insider threat program policy. - ANSWER-FALSE Contact with a n individual who is known to be, or is suspended of being, associated with foreign intelligence, security, or terrorism, should always be considered a reportable indicator of a possible recruitment - ANSWER-True Insiders work alone. They never recruit because it increases the chancer of them being caught. - ANSWER-False Attempting to gain access to an unclassified automated information system without authorization may be considered an information collection indicator. - ANSWER-True Which of the following could be considered a possible indicator of an insider threat ? - ANSWER-All of the above An insider threat is anyone with authorized access to the information or things an organization values most, and who uses that access, either wittingly or unwittingly, to inflict harm to the organization or national security. When an insider becomes a threat, it can have far-reaching consequences on both an organization and national security. - ANSWER-True Why is the success of the Insider Threat Program important to everyone at DHS - ANSWER-All of the Above One of your co-workers is exhibiting suspicious behavior. Which of the following should you report to the DHS Insider Threat Program? - ANSWER-All of the above What are the most likely indicators of espionage? - ANSWER-Both A and C Divided loyalties Working outside of normal hours You are a DHS project manager and you believe that one of your employees is exhibiting the following behaviors. Which behaviors should you report to the DHS Insider Threat Program? - ANSWER-Both a and b Downloading and saving a large amount of data that is not typical for their job