CDASA Threat Assessment and Risk Management 3

Question 1

When conducting a threat assessment for a military installation, which element is NOT typically part of the threat definition?

Accepted Answer

Installation's budget cycle

Answer

Threat assessment focuses on adversary characteristics (capabilities, intentions, past activities), not on friendly-force administrative factors like budget cycles.

Question 2

The 'likelihood' component of risk is most accurately defined as:

Accepted Answer

The probability that a threat will exploit a vulnerability

Answer

Likelihood (or probability) measures how probable it is that a given threat will successfully exploit an existing vulnerability within a specific timeframe.

Question 3

Which method involves systematically identifying what could go wrong and the consequences of each failure in a system or plan?

Accepted Answer

Failure Mode and Effects Analysis (FMEA)

Answer

FMEA is a structured approach to identifying all possible failure modes in a system, their causes, and their effects on system operation.

Question 4

A nation-state actor is assessed as having advanced cyber capabilities but no current intent to attack U.S. infrastructure. This is best characterized as:

Accepted Answer

A latent threat

Answer

A latent threat exists when an adversary has the capability to cause harm but currently lacks the intent or opportunity to act on that capability.

Question 5

In risk management, 'risk transfer' is best exemplified by:

Accepted Answer

Purchasing cyber insurance to shift financial liability

Answer

Risk transfer shifts the financial or operational burden of a risk to another party, most commonly through insurance or contractual agreements.

(CDASA) Certified Defense All-Source Analysis Practice Test

(CDASA) Certified Defense All-Source Analysis Practice Test

CDASA Threat Assessment and Risk Management 3