Vulnerability Assessment & Testing Flashcards
7 cards from real FSO practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Vulnerability Assessment & Testing flashcards as text
When testing physical controls, which scenario best tests visitor control?
Answer: Verifying uncleared visitors are escorted, badged and logged during an unannounced check
Spot checks reveal whether visitor procedures are followed in practice.
Which GSA-approved container class is used to store classified material and is tested against forced and covert entry?
Answer: Class 5 or Class 6 security container
Class 5 and 6 GSA-approved containers are authorized for classified storage.
Which factor is most important in prioritizing identified vulnerabilities?
Answer: Risk—likelihood and impact on classified information
Prioritization is risk-based, weighing likelihood and impact.
What is the role of the Insider Threat Program Senior Official (ITPSO)?
Answer: Establish and oversee the insider threat program, including training and reporting
The ITPSO runs the insider threat program and ensures training and reporting.
Which record should the FSO retain to demonstrate self-inspection was performed?
Answer: Written self-inspection report and corrective action documentation
Written documentation shows completion and supports DCSA review.
An FSO finds that employees are propping open a controlled door. What is the vulnerability?
Answer: Bypassed access control creating potential unauthorized access
Propped doors bypass access controls, creating unauthorized access risk.
Why are unannounced spot checks valuable in vulnerability testing?
Answer: They show real day-to-day compliance rather than prepared behavior
Unannounced checks reveal true compliance levels.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. We have not yet matched this exam's facts to an official source, so confirm fees, dates and rules with the exam body. Not reviewed by a subject-matter expert. Editorial policy