Vulnerability Assessment & Testing Flashcards
7 cards from real FSO practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Vulnerability Assessment & Testing flashcards as text
What does 'security in depth' mean for protecting classified information?
Answer: Layered, complementary controls so no single failure exposes information
Security in depth layers multiple controls so a single failure does not cause compromise.
Which testing activity involves authorized attempts to defeat controls to find weaknesses?
Answer: Penetration or red-team testing
Penetration testing safely simulates adversary attacks to reveal control weaknesses.
An intrusion detection system alarm activates at a closed area. What is the FSO's responsibility regarding alarm response?
Answer: Ensure response by trained personnel within the required time and document it
Alarm responses must be timely per standards and documented.
Which is the best indicator that a self-inspection was effective?
Answer: Findings are identified, corrected, and recurrence is prevented
Effectiveness shows in identified and corrected issues, not an absence of findings.
What should an FSO do when a vulnerability cannot be corrected immediately?
Answer: Implement compensatory controls and track a remediation plan
Compensatory controls reduce risk until remediation is complete.
What is a Security Vulnerability Assessment (SVA) from DCSA?
Answer: A post-review assessment helping the facility address identified weaknesses
The SVA provides the facility with assessment of its security posture and any vulnerabilities after the review.
Which employee group should be sampled in a vulnerability assessment of security awareness?
Answer: A cross-section of cleared and uncleared employees and visitors' escorts
A cross-section gives a realistic view of awareness across the facility.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. We have not yet matched this exam's facts to an official source, so confirm fees, dates and rules with the exam body. Not reviewed by a subject-matter expert. Editorial policy