SFPC Insider Threat Awareness 2

Question 1

What is an 'insider threat' in the security context?

Accepted Answer

A security risk posed by individuals within an organization who have authorized access but misuse it

Answer

An insider threat is a security risk posed by persons who have authorized access to organizational resources and who use that access—wittingly or unwittingly—in a way that harms the organization.

Question 2

What behavioral indicator may suggest an employee is becoming a potential insider threat?

Accepted Answer

Expressing unexplained financial concerns or discussing financial difficulties

Answer

Unexplained or unusual financial concerns can be a behavioral indicator of potential insider threat, particularly if the individual has access to valuable information or assets.

Question 3

What is the 'Continuous Evaluation' (CE) program in the context of insider threats?

Accepted Answer

A program that performs ongoing automated record checks on cleared personnel to identify potentially disqualifying information

Answer

Continuous Evaluation uses automated record checks to continuously monitor cleared personnel for potentially disqualifying information, rather than relying only on periodic reinvestigations.

Question 4

What is the role of a 'User Activity Monitoring' (UAM) system in insider threat programs?

Accepted Answer

Monitoring employee computer and network activity to detect potentially malicious or unauthorized actions

Answer

UAM systems monitor the activities of users with access to sensitive systems to detect anomalous or unauthorized behavior that may indicate an insider threat.

Question 5

What does the 'MICE' acronym represent in the context of insider threat motivations?

Accepted Answer

Money, Ideology, Coercion/Compromise, Ego

Answer

MICE represents the four primary motivations for insider threats: Money (financial gain), Ideology (beliefs or grievances), Coercion/Compromise (being blackmailed or coerced), and Ego (pride or revenge).

SFPC - Security Fundamentals Professional Certification Practice Test

SFPC - Security Fundamentals Professional Certification Practice Test

SFPC Insider Threat Awareness 2