CDASA Threat Assessment and Risk Management 2

Question 1

In the context of threat assessment, what does 'intent' refer to when evaluating an adversary?

Accepted Answer

The adversary's desire or plan to conduct a harmful action

Answer

The adversary's technical capabilities to execute an attack

Answer

The adversary's geographic proximity to the target

Answer

The adversary's historical record of past attacks

Question 2

Which risk management framework is most commonly referenced in U.S. defense intelligence for assessing information system risks?

Accepted Answer

NIST Risk Management Framework (RMF)

Answer

ISO 31000

Answer

COSO ERM

Answer

FAIR (Factor Analysis of Information Risk)

Question 3

A threat actor consistently targets logistics nodes before major operations. This pattern best illustrates which analytical concept?

Accepted Answer

Doctrinal pattern analysis

Answer

Indicator analysis

Answer

Threat signature recognition

Answer

Predictive modeling

Question 4

What is the primary purpose of a 'red team' in the context of risk management?

Accepted Answer

To simulate adversary tactics and identify vulnerabilities from an attacker's perspective

Answer

To respond to active cyber intrusions

Answer

To audit compliance with security policies

Answer

To train blue team defenders in defensive techniques

Question 5

Which of the following best describes a 'residual risk' after countermeasures are applied?

Accepted Answer

The risk that remains after controls are implemented

Answer

The total risk before any mitigation

Answer

The risk transferred to a third-party insurer

Answer

The risk accepted as part of normal operations without any controls

Question 6

In threat assessment, 'opportunity' as a factor means the adversary has:

Accepted Answer

Access or a viable attack vector to reach the target

Answer

Financial resources to fund the attack

Answer

Political motivation to conduct operations

Answer

Media coverage that enables psychological operations

Question 7

Which analytic product is specifically designed to warn decision-makers of imminent threats before they materialize?

Accepted Answer

Warning Intelligence

Answer

Strategic Intelligence Assessment

Answer

Current Intelligence Report

Answer

Estimative Intelligence