DOD INSIDER THREAT AWARENESS EXAM COMPLETE
QUESTIONS AND 100% VERIFIED ANSWERS (PASS
GUARANTEE)
1. What is an insider threat? A person with authorized access to DoD
resources who uses that access to harm the security of the United States.
2. What are the three categories of insider threats? Leaks/espionage,
violence, and sabotage.
3. What is the Insider Threat Program? A program designed to deter, detect,
and mitigate insider threats to DoD personnel, facilities, and resources.
4. Who can be an insider threat? Any person with authorized access including
military members, civilians, contractors, and vendors.
5. What Executive Order established the National Insider Threat Policy?
Executive Order 13587, signed in 2011.
6. What does NISPOM stand for? National Industrial Security Program
Operating Manual.
7. What is a Sensitive Compartmented Information Facility (SCIF)? A
secure room designed to prevent electronic eavesdropping and protect classified
information.
8. What is the primary goal of insider threat awareness training? To
educate personnel on recognizing and reporting potential insider threat
indicators.
9. What is unauthorized disclosure? The intentional or unintentional release
of classified information to unauthorized persons.
10. What is a security clearance? A determination that an individual is eligible
for access to classified information.
11. What does OPSEC stand for? Operations Security.
,12. What is a need-to-know basis? Access to classified information is granted
only when necessary to perform official duties.
13. What is counterintelligence? Activities designed to detect, neutralize, or
exploit foreign intelligence services.
14. What is espionage? The act of obtaining, delivering, or communicating
classified information to aid a foreign nation.
15. What is sabotage? The intentional destruction or disruption of DoD
operations, equipment, or facilities.
16. What is a potential indicator? An observable behavior that may suggest
insider threat activity.
17. What should you do if you observe suspicious behavior? Report it to
your security manager or through appropriate channels.
18. What is the difference between an insider and an outsider threat?
Insiders have authorized access; outsiders do not.
19. What is social engineering? Manipulating people into divulging
confidential information or performing actions.
20. What is tailgating? Following an authorized person through a secure
entrance without proper authentication.
21. What is phishing? Fraudulent attempts to obtain sensitive information
through deceptive emails or messages.
22. What is spear phishing? Targeted phishing attacks directed at specific
individuals or organizations.
23. What is data exfiltration? Unauthorized transfer of data from a computer
or network.
24. What is a security violation? Failure to comply with security regulations
and procedures.
25. What is a security incident? An event that threatens the security of
information or resources.
26. What is the principle of least privilege? Users should have only the
minimum access rights needed to perform their duties.
27. What is attribution in insider threat cases? Identifying who committed
the threatening action.
, 28. What is a removable media device? Portable storage devices like USB
drives, external hard drives, or CDs.
29. What is classified information? Information requiring protection in the
interest of national security.
30. What are the three classification levels? Top Secret, Secret, and
Confidential.
31. What is Top Secret information? Information that could cause
exceptionally grave damage to national security if disclosed.
32. What is Secret information? Information that could cause serious damage
to national security if disclosed.
33. What is Confidential information? Information that could cause damage
to national security if disclosed.
34. What is Controlled Unclassified Information (CUI)? Unclassified
information requiring safeguarding or dissemination controls.
35. What is personally identifiable information (PII)? Information that can
identify a specific individual.
36. What is protected health information (PHI)? Health information that can
be linked to an individual.
37. What is a security clearance investigation? A background check to
determine eligibility for access to classified information.
38. What is continuous evaluation? Ongoing review of personnel with
security clearances for potential risks.
39. What is a non-disclosure agreement (NDA)? A legal contract prohibiting
disclosure of confidential information.
40. What is SF-312? Classified Information Nondisclosure Agreement form.
41. What is the Defense Counterintelligence and Security Agency (DCSA)?
The agency responsible for security clearance investigations and industrial
security.
42. What is an authorized disclosure? Release of information to individuals
with proper clearance and need-to-know.
43. What is a security briefing? Training on security responsibilities and
procedures.
QUESTIONS AND 100% VERIFIED ANSWERS (PASS
GUARANTEE)
1. What is an insider threat? A person with authorized access to DoD
resources who uses that access to harm the security of the United States.
2. What are the three categories of insider threats? Leaks/espionage,
violence, and sabotage.
3. What is the Insider Threat Program? A program designed to deter, detect,
and mitigate insider threats to DoD personnel, facilities, and resources.
4. Who can be an insider threat? Any person with authorized access including
military members, civilians, contractors, and vendors.
5. What Executive Order established the National Insider Threat Policy?
Executive Order 13587, signed in 2011.
6. What does NISPOM stand for? National Industrial Security Program
Operating Manual.
7. What is a Sensitive Compartmented Information Facility (SCIF)? A
secure room designed to prevent electronic eavesdropping and protect classified
information.
8. What is the primary goal of insider threat awareness training? To
educate personnel on recognizing and reporting potential insider threat
indicators.
9. What is unauthorized disclosure? The intentional or unintentional release
of classified information to unauthorized persons.
10. What is a security clearance? A determination that an individual is eligible
for access to classified information.
11. What does OPSEC stand for? Operations Security.
,12. What is a need-to-know basis? Access to classified information is granted
only when necessary to perform official duties.
13. What is counterintelligence? Activities designed to detect, neutralize, or
exploit foreign intelligence services.
14. What is espionage? The act of obtaining, delivering, or communicating
classified information to aid a foreign nation.
15. What is sabotage? The intentional destruction or disruption of DoD
operations, equipment, or facilities.
16. What is a potential indicator? An observable behavior that may suggest
insider threat activity.
17. What should you do if you observe suspicious behavior? Report it to
your security manager or through appropriate channels.
18. What is the difference between an insider and an outsider threat?
Insiders have authorized access; outsiders do not.
19. What is social engineering? Manipulating people into divulging
confidential information or performing actions.
20. What is tailgating? Following an authorized person through a secure
entrance without proper authentication.
21. What is phishing? Fraudulent attempts to obtain sensitive information
through deceptive emails or messages.
22. What is spear phishing? Targeted phishing attacks directed at specific
individuals or organizations.
23. What is data exfiltration? Unauthorized transfer of data from a computer
or network.
24. What is a security violation? Failure to comply with security regulations
and procedures.
25. What is a security incident? An event that threatens the security of
information or resources.
26. What is the principle of least privilege? Users should have only the
minimum access rights needed to perform their duties.
27. What is attribution in insider threat cases? Identifying who committed
the threatening action.
, 28. What is a removable media device? Portable storage devices like USB
drives, external hard drives, or CDs.
29. What is classified information? Information requiring protection in the
interest of national security.
30. What are the three classification levels? Top Secret, Secret, and
Confidential.
31. What is Top Secret information? Information that could cause
exceptionally grave damage to national security if disclosed.
32. What is Secret information? Information that could cause serious damage
to national security if disclosed.
33. What is Confidential information? Information that could cause damage
to national security if disclosed.
34. What is Controlled Unclassified Information (CUI)? Unclassified
information requiring safeguarding or dissemination controls.
35. What is personally identifiable information (PII)? Information that can
identify a specific individual.
36. What is protected health information (PHI)? Health information that can
be linked to an individual.
37. What is a security clearance investigation? A background check to
determine eligibility for access to classified information.
38. What is continuous evaluation? Ongoing review of personnel with
security clearances for potential risks.
39. What is a non-disclosure agreement (NDA)? A legal contract prohibiting
disclosure of confidential information.
40. What is SF-312? Classified Information Nondisclosure Agreement form.
41. What is the Defense Counterintelligence and Security Agency (DCSA)?
The agency responsible for security clearance investigations and industrial
security.
42. What is an authorized disclosure? Release of information to individuals
with proper clearance and need-to-know.
43. What is a security briefing? Training on security responsibilities and
procedures.
