Technology and Communications Flashcards
7 cards from real CFPT practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Technology and Communications flashcards as text
What is the CONSULAR CONSOLIDATED DATABASE (CCD) primarily used for in U.S. consular operations?
Answer: Storing visa application data and adjudication records
The CCD is the central repository for visa application information, applicant records, and adjudication decisions used across all U.S. consular posts.
Which federal law governs how the U.S. government protects personally identifiable information (PII) in systems like those used by consular officers?
Answer: Privacy Act of 1974
The Privacy Act of 1974 regulates how federal agencies collect, maintain, use, and disseminate personally identifiable information about individuals.
What is 'two-factor authentication' (2FA) and why is it important for consular systems?
Answer: A security method requiring two forms of verification to access accounts
2FA requires users to provide two different types of credentials (e.g., password plus a code) to verify identity, significantly reducing unauthorized access risk.
A consular officer in a post with unstable internet connectivity needs to transmit a routine unclassified report. What is the most appropriate method?
Answer: Use the official unclassified State Department email system when connectivity is restored
Routine unclassified reports should be transmitted through official State Department systems regardless of temporary connectivity interruptions.
What is the purpose of a System of Records Notice (SORN) as required by the Privacy Act?
Answer: To publicly disclose government systems that maintain personal information on individuals
A SORN published in the Federal Register publicly discloses the existence of government record systems containing personal information and how that information is used.
Which of the following is an example of a 'zero-day' vulnerability?
Answer: A security flaw unknown to the software vendor that attackers exploit before a fix exists
A zero-day vulnerability is a software flaw that is unknown to the vendor, giving them zero days to fix it before it can be exploited.
What does 'need-to-know' mean as a principle governing access to classified information in diplomatic settings?
Answer: Access is limited to individuals who require the information to perform official duties
The need-to-know principle means that holding a security clearance alone does not grant access — individuals must also have a legitimate work-related reason to access specific information.