CFA Counterintelligence Awareness & Threat Recognition

Question 1

What is the primary objective of counterintelligence (CI) operations?

Accepted Answer

Detecting, identifying, and neutralizing foreign intelligence threats

Answer

Recruiting foreign nationals as intelligence assets

Answer

Collecting open-source intelligence on adversaries

Answer

Conducting offensive cyber operations against enemy networks

Question 2

The MICE acronym in counterintelligence describes the primary motivations that lead individuals to betray their organization. What does MICE stand for?

Accepted Answer

Money, Ideology, Coercion, Ego

Answer

Management, Intelligence, Counterintelligence, Espionage

Answer

Mission, Intent, Capability, Exploitation

Answer

Monitoring, Infiltration, Compromise, Exposure

Question 3

Which counterintelligence technique involves feeding slightly different versions of sensitive information to multiple suspected leaks in order to identify the source of a compromise?

Accepted Answer

Canary trap

Answer

Dead drop confirmation

Answer

Cold pitch approach

Answer

Brush pass technique

Question 4

What is 'elicitation' in the context of counterintelligence and hostile intelligence collection?

Accepted Answer

Skillfully drawing out sensitive information through seemingly innocent conversation

Answer

Physically searching a target's belongings for classified material

Answer

Technically intercepting electronic communications

Answer

Formally requesting classified documents through official channels

Question 5

Which of the following behavioral indicators is most commonly associated with an insider threat who may be engaged in espionage?

Accepted Answer

Unexplained affluence inconsistent with their known salary

Answer

Requesting additional training in their primary job function

Answer

Consistently arriving early and staying late without explanation

Answer

Requesting reassignment to a higher-classification position

Question 6

In counterintelligence operations, what is a 'double agent'?

Accepted Answer

An individual who is known to a foreign intelligence service but is actually controlled by the host nation's CI service

Answer

An agent who operates simultaneously in two foreign countries

Answer

An undercover officer who uses two separate cover identities

Answer

A field agent who collects both HUMINT and SIGINT simultaneously

Question 7

Which of the following best describes the 'need-to-know' principle and its importance in counterintelligence?

Accepted Answer

Cleared individuals should only access classified information required to perform their specific duties

Answer

All personnel with a security clearance should have access to all classified information at their clearance level

Answer

Access to classified information should be granted based solely on an individual's rank or seniority

Answer

Classified information should be shared broadly to ensure mission coordination