Certified Defense All-Source Analysis (CDASA-I) — Questions and Answers

Question 1: Which condition most commonly causes intelligence 'stovepipes' that degrade operational support?

Excessive intelligence sharing between allied nations
Overreliance on human intelligence at the expense of technical collection
Too many analysts assigned to a single intelligence requirement
Organizational or technical barriers that prevent intelligence from flowing to those who need it (Correct answer)

Correct answer: Organizational or technical barriers that prevent intelligence from flowing to those who need it

Stovepipes occur when organizational boundaries or classification barriers prevent timely intelligence sharing, degrading the commander's situational awareness.

Question 2: What is meant by 'analytic layering' in all-source intelligence?

Assigning different analysts to each intelligence discipline separately
Stacking multiple source reports without reconciling them
Building analysis progressively from tactical to operational to strategic levels using integrated data (Correct answer)
Organizing intelligence by classification level before analysis

Correct answer: Building analysis progressively from tactical to operational to strategic levels using integrated data

Analytic layering involves structuring analysis across levels — tactical, operational, and strategic — to provide decision-makers with a comprehensive and contextually accurate intelligence picture.

Question 3: What is a 'strategic partnership' in the context of regional geopolitical analysis?

A formal or informal alignment between states based on shared interests, often influencing regional balance of power (Correct answer)
A UN-sponsored economic development compact
A military alliance with binding mutual defense obligations
A classified intelligence-sharing agreement between allies

Correct answer: A formal or informal alignment between states based on shared interests, often influencing regional balance of power

Strategic partnerships are flexible relationships where states align on specific interests without necessarily committing to mutual defense, shaping regional dynamics and intelligence requirements.

Question 4: Which collection discipline is most valuable for providing persistent wide-area surveillance of large geographic areas?

GEOINT (Correct answer)
SIGINT
OSINT
HUMINT

Correct answer: GEOINT

GEOINT, particularly imagery intelligence from overhead platforms, provides persistent wide-area surveillance and is uniquely suited to monitoring large geographic areas over time.

Question 5: What is 'feed material' in the context of controlled CI operations?

Information provided to friendly forces to improve their situational awareness during operations
Unprocessed raw intelligence that has not yet been analyzed or evaluated for accuracy
Open-source information used to supplement classified reporting in finished intelligence products
False or misleading information deliberately provided to the adversary through a controlled agent or channel (Correct answer)

Correct answer: False or misleading information deliberately provided to the adversary through a controlled agent or channel

Feed material is carefully crafted false or misleading information that friendly CI provides to the adversary through a controlled agent, intended to deceive the adversary about friendly capabilities or intentions.

Question 6: Which document formally establishes the commander's priority intelligence requirements (PIR) and guides collection efforts?

Intelligence Preparation of the Battlefield
Collection Plan
Commander's Critical Information Requirements (Correct answer)
Intelligence Surveillance and Reconnaissance Annex

Correct answer: Commander's Critical Information Requirements

Commander's Critical Information Requirements (CCIR), including PIR, formally establish what intelligence the commander needs to make key decisions.

Question 7: In espionage tradecraft, what is a 'dead drop'?

A type of signals intercept operation targeting adversary communications
A technique for placing electronic surveillance on a foreign intelligence officer
A covert location used to exchange information without direct contact between the parties involved (Correct answer)
A method of encrypting classified messages for secure transmission

Correct answer: A covert location used to exchange information without direct contact between the parties involved

A dead drop is a prearranged, covert location where an intelligence officer and an agent can exchange materials or information without ever meeting in person, reducing the risk of detection.

Question 8: In risk management, 'risk transfer' is best exemplified by:

Installing additional firewalls to reduce cyber exposure
Eliminating the vulnerable system entirely
Purchasing cyber insurance to shift financial liability (Correct answer)
Accepting the risk and continuing operations unchanged

Correct answer: Purchasing cyber insurance to shift financial liability

Risk transfer shifts the financial or operational burden of a risk to another party, most commonly through insurance or contractual agreements.

Question 9: What analytical standard requires that intelligence assessments clearly distinguish between facts, assumptions, and judgments?

Need-to-know compartmentalization
Dissemination control protocols
Analytical tradecraft standards (Correct answer)
Source protection requirements

Correct answer: Analytical tradecraft standards

Analytical tradecraft standards require that assessments explicitly distinguish facts (known information), assumptions (accepted as true for planning), and judgments (analytical conclusions).

Question 10: What does 'access and collection exploitation' analysis in CI seek to determine?

What information and access the adversary has been able to obtain about friendly operations, capabilities, and personnel (Correct answer)
The technical methods foreign services use to break encryption on classified communications networks
How to exploit physical access to adversary facilities to place technical collection devices
Which foreign intelligence officers should be targeted for recruitment by friendly intelligence services

Correct answer: What information and access the adversary has been able to obtain about friendly operations, capabilities, and personnel

Access and collection exploitation analysis determines what the adversary has been able to collect about friendly operations, helping CI officers and analysts understand the extent of any compromise and assess the adversary's knowledge.

Question 11: In defense intelligence, what is the purpose of 'order of battle' analysis at the regional level?

To plan the sequence of allied military operations
To rank intelligence priorities for a regional commander
To identify and assess the composition, disposition, and strength of adversary military forces in a region (Correct answer)
To schedule intelligence collection sorties in a theater

Correct answer: To identify and assess the composition, disposition, and strength of adversary military forces in a region

Order of battle (OOB) analysis catalogs an adversary's units, equipment, leadership, and deployment patterns to assess regional military capability and intent.

Question 12: What does 'insider threat' refer to in the context of defense intelligence security?

Classified information shared between allied intelligence agencies without proper authorization
Foreign agents who have physically infiltrated U.S. military installations under false identities
Cyber attacks that originate from servers physically located within the United States
Malicious or negligent actions by authorized personnel that harm organizational security (Correct answer)

Correct answer: Malicious or negligent actions by authorized personnel that harm organizational security

An insider threat involves a current or former employee, contractor, or other authorized individual who uses their access to harm the organization's security, whether through malicious intent or negligence.

Question 13: What is the significance of documentation in Intelligence Analysis Methods?

Documentation is unnecessary busy work
Only required during audits
It provides a record for accountability, quality assurance, and legal compliance (Correct answer)
Only management needs to document

Correct answer: It provides a record for accountability, quality assurance, and legal compliance

Proper documentation supports accountability, enables quality review, and satisfies legal requirements.

Question 14: What is the role of a 'linchpin assumption' in all-source analysis?

A methodology used to rank intelligence by reliability
A verified fact that anchors a finished intelligence product
A source whose access is uniquely valuable
A key assumption whose failure would fundamentally alter the analytical conclusion (Correct answer)

Correct answer: A key assumption whose failure would fundamentally alter the analytical conclusion

A linchpin assumption is so central to an analytical judgment that if it proves false, the entire conclusion must be reconsidered.

Question 15: What does 'sense-making' refer to in all-source defense intelligence?

The method of redacting sensitive details from intelligence products
The cognitive process of interpreting ambiguous data into a coherent operational picture (Correct answer)
The automated sorting of raw intelligence by priority
The process of training new analysts on collection tools

Correct answer: The cognitive process of interpreting ambiguous data into a coherent operational picture

Sense-making is the analyst's effort to impose structure and meaning on incomplete or ambiguous information to support decision-making.

Question 16: When an analyst assesses enemy capabilities but lacks sufficient information, what is the recommended analytic approach?

Report only confirmed facts and omit analytical judgments
Apply the worst-case enemy course of action as a default
Delay the assessment until more information is available
Clearly state assumptions and confidence levels while providing the best available assessment (Correct answer)

Correct answer: Clearly state assumptions and confidence levels while providing the best available assessment

Analysts must provide assessments with explicit assumptions and confidence levels so decision-makers understand the uncertainty and can act appropriately.

Question 17: In the context of CDASA, what is 'production' in the intelligence cycle?

The physical manufacture of collection sensors
The conversion of processed information into finished intelligence assessments (Correct answer)
The tasking of collection assets to gather raw data
The classification review of intelligence reports before release

Correct answer: The conversion of processed information into finished intelligence assessments

Production is the phase where analysts integrate, evaluate, and interpret processed information to create finished intelligence assessments for decision-makers.

Question 18: What is the significance of documentation in Source Evaluation?

Only required during audits
Documentation is unnecessary busy work
It provides a record for accountability, quality assurance, and legal compliance (Correct answer)
Only management needs to document

Correct answer: It provides a record for accountability, quality assurance, and legal compliance

Proper documentation supports accountability, enables quality review, and satisfies legal requirements.

Question 19: Which threat category encompasses non-state actors motivated primarily by ideological or political goals rather than financial gain?

Cybercriminals
Hacktivists (Correct answer)
Corporate espionage actors
Insider threats

Correct answer: Hacktivists

Hacktivists are non-state threat actors whose primary motivation is advancing a political, social, or ideological agenda rather than monetary profit.

Question 20: During operations, an analyst discovers that a previously assessed enemy capability was significantly overestimated. What is the correct action?

Immediately update the assessment and notify supported commanders of the change (Correct answer)
Only update the assessment if it affects current targeting
Wait until the next scheduled production cycle to correct the estimate
Maintain the original assessment to avoid undermining commander confidence

Correct answer: Immediately update the assessment and notify supported commanders of the change

Analytic integrity requires immediate correction of assessments when new information changes conclusions, regardless of whether it is inconvenient.

Question 21: Which principle states that intelligence products must reach the right decision-maker at the right time to be useful?

Completeness
Timeliness (Correct answer)
Relevance
Accuracy

Correct answer: Timeliness

Timeliness is a key intelligence principle stating that even accurate intelligence loses value if it does not reach the decision-maker in time to act.

Question 22: Which analytic product format is used to integrate all-source assessments at the national level in the US?

National Intelligence Estimate (NIE) (Correct answer)
Spot Report
Biographic Intelligence Summary
Intelligence Information Report (IIR)

Correct answer: National Intelligence Estimate (NIE)

A National Intelligence Estimate (NIE) is the most authoritative all-source assessment produced by the US Intelligence Community, representing a coordinated judgment on key national security issues.

Question 23: A newly appointed Secretary of Defense requests a 'baseline intelligence assessment' of a key adversary. This product type most closely corresponds to which standard IC product?

Sentinel Intelligence Report (SENTREP)
National Intelligence Estimate (NIE)
Defense Intelligence Assessment (DIA) (Correct answer)
President's Daily Brief (PDB)

Correct answer: Defense Intelligence Assessment (DIA)

A Defense Intelligence Assessment (DIA) is a comprehensive, coordinated all-source product designed to provide senior DoD officials with authoritative baseline assessments of specific threats, countries, or issues.

Question 24: When creating an intelligence report, what is the primary purpose of including a summary section?

To offer a brief overview of key findings and recommendations for decision-makers (Correct answer)
To list all sources used in the analysis in detail
To provide an in-depth technical analysis of collected data
To present raw data without interpretation

Correct answer: To offer a brief overview of key findings and recommendations for decision-makers

The summary section in an intelligence report is crucial for decision-makers who need to quickly grasp the most important information. It provides a concise overview of the key findings and actionable recommendations, enabling rapid understanding and informed decision-making without needing to read the entire detailed report.

Question 25: What is the purpose of a 'Red Cell' in operational intelligence support?

A team that coordinates with red cross organizations during humanitarian operations
A group that adopts the adversary's perspective to challenge friendly planning assumptions (Correct answer)
A team that manages the physical security of the intelligence center
An element responsible for reviewing classified documents for downgrading

Correct answer: A group that adopts the adversary's perspective to challenge friendly planning assumptions

A Red Cell thinks and acts like the adversary to identify vulnerabilities in friendly plans and challenge mirror-imaging in intelligence assessments.

Question 26: In all-source fusion, what is a 'data gap'?

A security vulnerability in a classified network
A discrepancy between two analyst assessments
Missing intelligence needed to answer a critical information requirement (Correct answer)
An outdated database that has not been updated

Correct answer: Missing intelligence needed to answer a critical information requirement

A data gap is an identified absence of information on a specific intelligence requirement, which analysts must flag and attempt to fill through additional collection.

Question 27: Which intelligence collection discipline does counterintelligence most directly seek to protect against when neutralizing foreign human source networks?

HUMINT (Human Intelligence) (Correct answer)
SIGINT (Signals Intelligence)
MASINT (Measurement and Signature Intelligence)
GEOINT (Geospatial Intelligence)

Correct answer: HUMINT (Human Intelligence)

CI is most directly focused on countering HUMINT operations, where foreign intelligence services use human agents and officers to collect intelligence from or about U.S. personnel and facilities.

Question 28: What is the primary purpose of Signals Intelligence (SIGINT)?

Interviewing human sources to gather insider information
Analyzing imagery from satellites and reconnaissance aircraft
Collecting information from intercepted communications and electronic signals (Correct answer)
Gathering information from social media platforms

Correct answer: Collecting information from intercepted communications and electronic signals

Signals Intelligence (SIGINT) is a vital intelligence discipline focused on gathering information from intercepted communications and electronic signals. This includes collecting and analyzing data from radio transmissions, phone calls, and other electronic emissions to gain insights into adversary activities.

Question 29: The 'likelihood' component of risk is most accurately defined as:

The cost of implementing countermeasures
The probability that a threat will exploit a vulnerability (Correct answer)
The severity of damage if a threat succeeds
The number of adversaries capable of conducting an attack

Correct answer: The probability that a threat will exploit a vulnerability

Likelihood (or probability) measures how probable it is that a given threat will successfully exploit an existing vulnerability within a specific timeframe.

Question 30: What does a 'threat matrix' typically display in defense intelligence?

A budget breakdown for counterintelligence programs
A timeline of past intelligence collection operations
A grid correlating threat actors with their capabilities and likely targets (Correct answer)
A list of classified source identifiers

Correct answer: A grid correlating threat actors with their capabilities and likely targets

A threat matrix organizes threat actors, their capabilities, intentions, and probable targets in a structured grid to support comparative risk analysis.

Certified Defense All-Source Analysis (CDASA-I)

The CDASA-I certifies DoD military and civilian all-source intelligence analysts, validating knowledge of intelligence organization, collection disciplines, all-source fusion methodologies, structured analytic techniques, and policy frameworks for the defense intelligence workforce.

Questions

35 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds