Counterintelligence Awareness & Threat Recognition Flashcards

What is the primary objective of counterintelligence (CI) operations?

Answer: Detecting, identifying, and neutralizing foreign intelligence threats

Counterintelligence operations are fundamentally designed to detect, identify, and neutralize threats posed by foreign intelligence services, terrorist groups, and insider threats.

The MICE acronym in counterintelligence describes the primary motivations that lead individuals to betray their organization. What does MICE stand for?

Answer: Money, Ideology, Coercion, Ego

MICE stands for Money, Ideology, Coercion, and Ego — the four most common motivators identified in espionage and insider threat cases.

Which counterintelligence technique involves feeding slightly different versions of sensitive information to multiple suspected leaks in order to identify the source of a compromise?

Answer: Canary trap

A canary trap deliberately introduces unique variations of information to different individuals so that when the information surfaces externally, the specific version reveals which person leaked it.

What is 'elicitation' in the context of counterintelligence and hostile intelligence collection?

Answer: Skillfully drawing out sensitive information through seemingly innocent conversation

Elicitation is the subtle extraction of information through natural-seeming conversation without alerting the source that they are being targeted for intelligence collection.

Which of the following behavioral indicators is most commonly associated with an insider threat who may be engaged in espionage?

Answer: Unexplained affluence inconsistent with their known salary

Unexplained affluence — such as expensive new purchases, vacations, or lifestyle changes inconsistent with known income — is a classic financial red flag indicating potential espionage compensation.

In counterintelligence operations, what is a 'double agent'?

Answer: An individual who is known to a foreign intelligence service but is actually controlled by the host nation's CI service

A double agent appears to serve a foreign intelligence service but is actually under the control of the host nation's counterintelligence service, allowing CI officers to feed disinformation and monitor adversary methods.

Which of the following best describes the 'need-to-know' principle and its importance in counterintelligence?

Answer: Cleared individuals should only access classified information required to perform their specific duties

The need-to-know principle limits classified information access to only those whose specific duties require it, minimizing the potential damage from any single compromise or insider threat.