SFPC Counterintelligence and Foreign Intelligence Threats — Questions and Answers
Question 1: What does the term 'Foreign Intelligence Entity (FIE)' refer to?
- Any foreign tourist visiting the U.S.
- Any known or suspected foreign organization, person, or group that conducts intelligence activities against the U.S. (Correct answer)
- Only foreign military units
- Only foreign diplomats
Correct answer: Any known or suspected foreign organization, person, or group that conducts intelligence activities against the U.S.
An FIE includes any known or suspected foreign organization, person, or group (public, private, or governmental) that conducts intelligence activities to acquire U.S. information, block or impair U.S. intelligence collection, influence U.S. policy, or disrupt U.S. systems.
Question 2: A casual acquaintance repeatedly steers conversations toward your project's technical details and schedules while seeming friendly. This is an example of what?
- Mentoring
- Elicitation (Correct answer)
- Open-source research
- Routine networking only
Correct answer: Elicitation
Elicitation is a technique for getting information through seemingly normal conversation without the target realizing it. Persistent, probing questions on sensitive topics should be reported to security.
Question 3: What do the letters in the MICE acronym commonly stand for as motivations for espionage?
- Money, Ideology, Coercion, Ego (Correct answer)
- Malice, Intrigue, Corruption, Envy
- Morale, Income, Career, Education
- Money, Insurance, Credit, Employment
Correct answer: Money, Ideology, Coercion, Ego
MICE (Money, Ideology, Coercion/Compromise, Ego) is a traditional framework for why people betray trust. Recognizing these motivators helps in spotting vulnerabilities and potential recruitment.
Question 4: Cleared personnel who travel overseas should generally do which of the following?
- Keep travel plans secret from the security office
- Report the travel in advance and attend a defensive foreign travel briefing as required (Correct answer)
- Carry classified material to remain productive
- Use only hotel business centers for sensitive email
Correct answer: Report the travel in advance and attend a defensive foreign travel briefing as required
Cleared personnel are required to report foreign travel and typically receive a defensive security briefing. They should never carry classified material without proper authorization and should expect that communications may be monitored.
Question 5: Which of the following should be reported as a suspicious contact?
- A coworker's birthday invitation
- An unsolicited request from a foreign national for information about your work, or a persistent inquiry from someone with unclear motives (Correct answer)
- A routine email from your supervisor
- A vendor's standard catalog
Correct answer: An unsolicited request from a foreign national for information about your work, or a persistent inquiry from someone with unclear motives
Unsolicited requests for sensitive or program information, particularly from foreign nationals or via unusual channels, are classic indicators of FIE collection and must be reported under NISP and agency rules.
Question 6: Which is a common cyber-enabled method foreign intelligence services use to target cleared personnel?
- Spear phishing emails tailored to the target (Correct answer)
- Mailing a printed brochure
- Publishing a newspaper advertisement
- Hosting a public lecture
Correct answer: Spear phishing emails tailored to the target
Spear phishing uses personalized messages and malicious links or attachments to steal credentials or implant malware. It is a frequent technique against cleared employees and contractors.
