PSC Personnel Security & Insider Threats 2

Question 1

Which federal framework is commonly referenced when developing insider threat programs for US organizations?

Accepted Answer

Executive Order 13587 and the National Insider Threat Policy

Answer

Executive Order 13587 and the National Insider Threat Policy established the foundation for insider threat programs across US government and affiliated organizations.

Question 2

A security manager notices an employee is downloading large volumes of data just before their resignation date. This behavior is best described as:

Accepted Answer

A potential data exfiltration insider threat indicator

Answer

Bulk data downloads prior to departure are a recognized behavioral indicator of potential data exfiltration by a departing insider.

Question 3

What is the purpose of a security clearance adjudication process?

Accepted Answer

To determine whether an individual is eligible for access to classified or sensitive information based on loyalty, reliability, and trustworthiness

Answer

Adjudication evaluates background investigation results to determine if an individual meets the standards of loyalty, reliability, and trustworthiness required for sensitive access.

Question 4

Which of the following is an example of a technical control used to monitor insider threat activity?

Accepted Answer

User and entity behavior analytics (UEBA) tools

Answer

UEBA tools analyze patterns in user behavior and flag anomalies that may indicate insider threat activity.

Question 5

What should an organization do when an employee is placed on administrative leave pending an investigation?

Accepted Answer

Immediately revoke or suspend all physical and logical access credentials

Answer

Revoking access upon administrative leave prevents the subject of an investigation from destroying evidence or causing further harm.

PSC - Physical Security Certification Practice Test

PSC - Physical Security Certification Practice Test

PSC Personnel Security & Insider Threats 2