CDASA Threat Assessment and Risk Management 2

Question 1

In the context of threat assessment, what does 'intent' refer to when evaluating an adversary?

Accepted Answer

The adversary's desire or plan to conduct a harmful action

Answer

Intent refers to an adversary's desire, will, or plan to conduct a harmful action against a target, distinct from their capability to do so.

Question 2

Which risk management framework is most commonly referenced in U.S. defense intelligence for assessing information system risks?

Accepted Answer

NIST Risk Management Framework (RMF)

Answer

The NIST Risk Management Framework (RMF) is the standard used across U.S. federal and defense organizations for managing information system security risks.

Question 3

A threat actor consistently targets logistics nodes before major operations. This pattern best illustrates which analytical concept?

Accepted Answer

Doctrinal pattern analysis

Answer

Doctrinal pattern analysis examines an adversary's established methods and tactics to predict future behavior based on observed patterns.

Question 4

What is the primary purpose of a 'red team' in the context of risk management?

Accepted Answer

To simulate adversary tactics and identify vulnerabilities from an attacker's perspective

Answer

A red team adopts the adversary's perspective to proactively identify weaknesses before real threat actors can exploit them.

Question 5

Which of the following best describes a 'residual risk' after countermeasures are applied?

Accepted Answer

The risk that remains after controls are implemented

Answer

Residual risk is the remaining level of risk after security controls and countermeasures have been applied to reduce initial risk.

(CDASA) Certified Defense All-Source Analysis Practice Test

(CDASA) Certified Defense All-Source Analysis Practice Test

CDASA Threat Assessment and Risk Management 2