COBRA Threat Assessment and Recognition

Question 1

What is the primary purpose of threat assessment in a security console operation?

Accepted Answer

To identify, evaluate, and manage potential threats before they materialize

Answer

To document all incidents that occur during a shift

Answer

To coordinate with law enforcement on all security matters

Answer

To maintain accurate visitor logs at all entry points

Question 2

Which behavior is most commonly associated with pre-attack surveillance by a potential threat actor?

Accepted Answer

Taking photographs or sketching security camera locations and entry points

Answer

Asking security personnel for directions to restrooms

Answer

Leaving a vehicle in a designated parking area for extended periods

Answer

Wearing clothing inappropriate for the current season

Question 3

What does the informal security term 'JDLR' stand for?

Accepted Answer

Just Doesn't Look Right

Answer

Just Document, Log, and Report

Answer

Joint Defense and Law Response

Answer

Jurisdiction, Detection, Location, Response

Question 4

When a console operator observes an individual repeatedly walking past a facility entrance and peering inside, this behavior is best classified as:

Accepted Answer

Potential pre-incident surveillance

Answer

Normal civilian curiosity

Answer

Authorized facility inspection activity

Answer

Standard delivery verification behavior

Question 5

What is 'baseline behavior' in the context of security threat recognition?

Accepted Answer

The normal patterns of activity and behavior expected in a given environment

Answer

The minimum training requirements for security personnel

Answer

The standard operating procedures for emergency response

Answer

The documented history of past incidents at a facility

Question 6

Which of the following behaviors is most indicative of a potential insider threat?

Accepted Answer

An employee who accesses restricted areas outside their normal work hours without authorization

Answer

An employee who arrives consistently on time and follows all procedures

Answer

An employee who requests additional training on security systems

Answer

An employee who reports suspicious activity to their supervisor

Question 7

When a console operator identifies a credible potential threat, what is the most appropriate immediate action?

Accepted Answer

Document observations and immediately notify supervisory personnel per established protocols

Answer

Confront the individual directly to gather more information

Answer

Continue monitoring without action until the threat is fully confirmed

Answer

Contact law enforcement before notifying facility management