SANS MGT514 COMPREHENSIVE
STUDY GUIDE 2026 FULL QUESTIONS
AND SOLUTIONS GRADED A+
◍ Intelligence.
Answer: The collection, processing, and analysis of info about a competitive
entity and its agents, needed by an org or group for its sec. and well-being
◍ Counterintelligence.
Answer: identification, assessment, and neutralization of adversary intel
activitiesmust consider: gain-losspotential disinformation
◍ Classic Intel Sources.
Answer: HUMINTGEOINTMASINTOSINTSIGINTAll Source
◍ MASINT.
Answer: Measurement and signature intel (radar, nuclear det., etc)
◍ SIGINT.
Answer: Signal intercepts (cell phone, line tapping, etc.)
◍ Ability.
Answer: Possession of the means or skill to do something
◍ Sherman Kent's (founder of CIA) Analytic Doctrine.
Answer: Focus on policymaker concernsAvoidance of a personal policy
agendaintellectual rigorconscious effort to avoid analytic biaseswillingness
to consider other judgmentssystematic use of outside expertscollective
responsibility for judgmenteffective communication of policy-support info
and judgmentscandid admission of mistakes
◍ data-driven analysis.
Answer: good datasets and straightforward problemsaccuracy is based on
, the dataset's accuracylogically-driven and easily replicated
◍ Active listening.
Answer: Giving the sender full, undisturbed attention with the intention of
fully receiving his or her message
◍ conceptually-driven analysis.
Answer: numerous unknowns and undefined variables and
relationshipsimmediate interpretation of complex conceptsaccuracy is
driven by mental models ad feedback
◍ Aggressive communicaton.
Answer: Forceful communication style often carried out in a loud and
hostile manner
◍ Analysis.
Answer: Detailed examination of the elements or structure of
somethingbreaking something down into its constituent parts to understand
its operation
◍ Mental models.
Answer: experiences-based assumptions and expectations of the way the
world operatesshould be reviewed and updated as experience grows
◍ Assertive communicator.
Answer: Productive communication style used by those who express their
ideas while listening attentively to others
◍ Structured Analytic Techniques (SATs).
Answer: analyst approaches to better evaluate info while reducing while
reducing the impact of biasmore transparent, testable, and
defendableHeuer:Getting organizedExploration techniquesdiagnostic
techniquesre-framing techniquesforesight techniques
◍ Attraction-selection-attrition (A-S-A).
Answer: A theory holding that (1) individuals are attracted to organizations
whose members are similar to themselves in terms of personality, values,
, interests, and other attributes; (2) organizations are more likely to select
those who possess knowledge, skills, and abilities similar to the ones their
existing members possess; and (3) over time, those who do not fit in well are
more likely to leave
◍ Attrition.
Answer: The unpredictable and uncontrollable but normal reduction of work
force due to resignations, retirement, sickness, or death
◍ Autocratic style.
Answer: Leadership style that keeps close control over subordinates and
does not seek much input from others
◍ Intel Lifecycle.
Answer: Planning and DirectionCollectionProcessingAnalysis and
ProductionDisseminationFeedback
◍ Barrier to effective communication.
Answer: Factor that prevents the receiver from receiving and understanding
the message accurately
◍ Behavioral Event Interviews.
Answer: Guided interview questions where individuals describe their
thoughts and feelings during specific situations and a coach helps establish a
development plan,
◍ Channel.
Answer: Means of passing information from sender to recipient, such as via
face-to-face meeting or telephone call
◍ Data -> Intelligence.
Answer: Story about a campaign (operational environment)IP address
(data)IP address is C2 for malware (information)Malware is not on our
system (information)"adversary is not purposely targeting our systems and
that this is an incidental infection (intel)
◍ Code of ethics.
STUDY GUIDE 2026 FULL QUESTIONS
AND SOLUTIONS GRADED A+
◍ Intelligence.
Answer: The collection, processing, and analysis of info about a competitive
entity and its agents, needed by an org or group for its sec. and well-being
◍ Counterintelligence.
Answer: identification, assessment, and neutralization of adversary intel
activitiesmust consider: gain-losspotential disinformation
◍ Classic Intel Sources.
Answer: HUMINTGEOINTMASINTOSINTSIGINTAll Source
◍ MASINT.
Answer: Measurement and signature intel (radar, nuclear det., etc)
◍ SIGINT.
Answer: Signal intercepts (cell phone, line tapping, etc.)
◍ Ability.
Answer: Possession of the means or skill to do something
◍ Sherman Kent's (founder of CIA) Analytic Doctrine.
Answer: Focus on policymaker concernsAvoidance of a personal policy
agendaintellectual rigorconscious effort to avoid analytic biaseswillingness
to consider other judgmentssystematic use of outside expertscollective
responsibility for judgmenteffective communication of policy-support info
and judgmentscandid admission of mistakes
◍ data-driven analysis.
Answer: good datasets and straightforward problemsaccuracy is based on
, the dataset's accuracylogically-driven and easily replicated
◍ Active listening.
Answer: Giving the sender full, undisturbed attention with the intention of
fully receiving his or her message
◍ conceptually-driven analysis.
Answer: numerous unknowns and undefined variables and
relationshipsimmediate interpretation of complex conceptsaccuracy is
driven by mental models ad feedback
◍ Aggressive communicaton.
Answer: Forceful communication style often carried out in a loud and
hostile manner
◍ Analysis.
Answer: Detailed examination of the elements or structure of
somethingbreaking something down into its constituent parts to understand
its operation
◍ Mental models.
Answer: experiences-based assumptions and expectations of the way the
world operatesshould be reviewed and updated as experience grows
◍ Assertive communicator.
Answer: Productive communication style used by those who express their
ideas while listening attentively to others
◍ Structured Analytic Techniques (SATs).
Answer: analyst approaches to better evaluate info while reducing while
reducing the impact of biasmore transparent, testable, and
defendableHeuer:Getting organizedExploration techniquesdiagnostic
techniquesre-framing techniquesforesight techniques
◍ Attraction-selection-attrition (A-S-A).
Answer: A theory holding that (1) individuals are attracted to organizations
whose members are similar to themselves in terms of personality, values,
, interests, and other attributes; (2) organizations are more likely to select
those who possess knowledge, skills, and abilities similar to the ones their
existing members possess; and (3) over time, those who do not fit in well are
more likely to leave
◍ Attrition.
Answer: The unpredictable and uncontrollable but normal reduction of work
force due to resignations, retirement, sickness, or death
◍ Autocratic style.
Answer: Leadership style that keeps close control over subordinates and
does not seek much input from others
◍ Intel Lifecycle.
Answer: Planning and DirectionCollectionProcessingAnalysis and
ProductionDisseminationFeedback
◍ Barrier to effective communication.
Answer: Factor that prevents the receiver from receiving and understanding
the message accurately
◍ Behavioral Event Interviews.
Answer: Guided interview questions where individuals describe their
thoughts and feelings during specific situations and a coach helps establish a
development plan,
◍ Channel.
Answer: Means of passing information from sender to recipient, such as via
face-to-face meeting or telephone call
◍ Data -> Intelligence.
Answer: Story about a campaign (operational environment)IP address
(data)IP address is C2 for malware (information)Malware is not on our
system (information)"adversary is not purposely targeting our systems and
that this is an incidental infection (intel)
◍ Code of ethics.
