CDASA Counterintelligence 1 — Questions and Answers
Question 1: What is the primary goal of counterintelligence (CI) operations within the defense intelligence community?
- Collecting intelligence on foreign military capabilities
- Detecting and neutralizing foreign intelligence threats to U.S. national security (Correct answer)
- Developing offensive cyber capabilities against adversaries
- Coordinating allied intelligence sharing agreements
Correct answer: Detecting and neutralizing foreign intelligence threats to U.S. national security
CI's primary goal is to identify, detect, and neutralize the intelligence collection activities and other threats posed by foreign intelligence services against U.S. national security.
Question 2: Which of the following best describes 'elicitation' as a foreign intelligence threat tactic?
- The use of electronic surveillance to intercept classified communications
- Photographing classified documents without authorization
- Using seemingly normal conversation to extract sensitive information from a target (Correct answer)
- Hacking into classified computer systems to steal data
Correct answer: Using seemingly normal conversation to extract sensitive information from a target
Elicitation is a technique where a foreign intelligence officer uses seemingly casual conversation to draw out sensitive or classified information without alerting the target.
Question 3: The MICE acronym identifies key motivations that make individuals vulnerable to foreign intelligence recruitment. What does MICE stand for?
- Military, Intelligence, Counterintelligence, Espionage
- Money, Ideology, Coercion/Compromise, Ego (Correct answer)
- Motive, Intent, Capability, Execution
- Money, Information, Command, Espionage
Correct answer: Money, Ideology, Coercion/Compromise, Ego
MICE stands for Money, Ideology, Coercion/Compromise, and Ego — the four primary motivators CI professionals use to identify personnel who may be susceptible to foreign recruitment.
Question 4: In espionage tradecraft, what is a 'dead drop'?
- A covert location used to exchange information without direct contact between the parties involved (Correct answer)
- A method of encrypting classified messages for secure transmission
- A technique for placing electronic surveillance on a foreign intelligence officer
- A type of signals intercept operation targeting adversary communications
Correct answer: A covert location used to exchange information without direct contact between the parties involved
A dead drop is a prearranged, covert location where an intelligence officer and an agent can exchange materials or information without ever meeting in person, reducing the risk of detection.
Question 5: Which counterintelligence method involves deliberately providing slightly different versions of sensitive information to different suspects in order to identify the source of a leak?
- Surveillance detection route
- Honey trap operation
- Canary trap (Correct answer)
- Double-agent feedback loop
Correct answer: Canary trap
A canary trap involves feeding uniquely altered versions of sensitive information to different individuals so that when the information is leaked, analysts can identify the specific source.
Question 6: What does 'insider threat' refer to in the context of defense intelligence security?
- Foreign agents who have physically infiltrated U.S. military installations under false identities
- Malicious or negligent actions by authorized personnel that harm organizational security (Correct answer)
- Cyber attacks that originate from servers physically located within the United States
- Classified information shared between allied intelligence agencies without proper authorization
Correct answer: Malicious or negligent actions by authorized personnel that harm organizational security
An insider threat involves a current or former employee, contractor, or other authorized individual who uses their access to harm the organization's security, whether through malicious intent or negligence.
Question 7: Under DoD Instruction 5240.06, what is the primary reporting obligation for defense personnel regarding counterintelligence?
- Annual reporting of all foreign contacts to CI authorities
- Prompt reporting of known or suspected foreign intelligence and CI threats (Correct answer)
- Quarterly assessments of foreign intelligence collection activities against the command
- Monthly submission of security clearance update forms to the Defense Counterintelligence and Security Agency
Correct answer: Prompt reporting of known or suspected foreign intelligence and CI threats
DoD Instruction 5240.06 requires all DoD personnel to promptly report known or suspected foreign intelligence activities, threats, and contacts to their supporting CI organization.
CDASA Counterintelligence 1
What is the primary goal of counterintelligence (CI) operations within the defense intelligence community?