← All CFA Flashcard Decks

Counter-Surveillance Detection Routes Flashcards

7 cards from real CFA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Counter-Surveillance Detection Routes flashcards as text
  1. What is the primary risk of conducting an SDR in your own neighborhood or regular commute route?

    Answer: Surveillance teams can study your routine and pre-position without needing to follow

    Routine routes allow adversaries to conduct pattern-of-life analysis and pre-stage surveillance without ever following the agent, making standard SDR techniques ineffective.

  2. In a vehicle-based SDR, what is the counter-surveillance value of using a parking garage?

    Answer: Multiple levels and exits allow observation of following vehicles and potential shake-off

    Multi-level parking structures force following vehicles to commit to specific routes, creating natural observation points and escape route options for the agent.

  3. What does the acronym 'TEDD' stand for in surveillance detection methodology?

    Answer: Time, Environment, Distance, Demeanor

    TEDD (Time, Environment, Distance, Demeanor) is a framework used to evaluate whether observed individuals represent surveillance based on pattern analysis across these four dimensions.

  4. An agent on an SDR is 'burned' — the surveillance team has identified them as surveillance-aware. What is the recommended response?

    Answer: Abort sensitive activities and behave normally, since evasive action confirms hostile intent

    Once burned, aggressive evasion confirms to surveillance that the agent is aware and operating clandestinely; maintaining normal behavior limits intelligence collection against the agent.

  5. Which of the following best describes 'progressive surveillance detection' during a multi-day operation?

    Answer: Using increasingly complex routes each day until surveillance is confirmed or ruled out

    Progressive surveillance detection involves using increasingly elaborate SDR techniques over multiple days to detect surveillance that may be running loose or intermittent coverage patterns.

  6. What is a 'surveillance detection report' and when is it filed?

    Answer: A document completed by the agent after an SDR summarizing observations and any surveillance indicators

    A surveillance detection report is completed by the agent or SDU after the SDR and documents all observations, potential surveillance contacts, and the agent's assessment of the surveillance environment.

  7. Why is it important that SDR routes include segments with 'natural cover' reasons for the agent's presence?

    Answer: It ensures the agent's behavior appears consistent with legitimate activity rather than evasive maneuvering

    An SDR that lacks plausible reasons for route segments can appear operationally suspicious to surveillance teams, potentially triggering more intensive coverage.