SFPC Personal Security 2 — Questions and Answers
Question 1: What is the primary goal of personal security measures for a security professional?
- To prevent all contact with the public
- To identify and reduce personal vulnerabilities while enabling professional effectiveness (Correct answer)
- To avoid traveling abroad
- To limit social media use entirely
Correct answer: To identify and reduce personal vulnerabilities while enabling professional effectiveness
Personal security aims to reduce vulnerabilities and risks to the individual while still allowing them to perform their professional duties effectively.
Personal security for security professionals involves identifying and mitigating personal vulnerabilities that adversaries could exploit. This includes being aware of personal information exposure, practicing good operational security (OPSEC) habits, and implementing protective measures without becoming paralyzed by risk aversion.
Question 2: What is 'social engineering' in the context of personal security?
- Building professional networks
- Manipulating individuals into revealing confidential information or performing actions (Correct answer)
- Managing social media accounts
- Organizing community events
Correct answer: Manipulating individuals into revealing confidential information or performing actions
Social engineering involves psychologically manipulating individuals to divulge confidential information or perform actions that may compromise security.
Social engineering is a manipulation technique that exploits human psychology rather than technical vulnerabilities. Attackers use tactics such as pretexting, phishing, baiting, and impersonation to trick individuals into revealing sensitive information or taking actions that compromise security.
Question 3: Which of the following is a good practice for protecting personal information online?
- Using the same password for all accounts
- Regularly reviewing and adjusting privacy settings on social media (Correct answer)
- Sharing your location on all social platforms
- Accepting all friend requests
Correct answer: Regularly reviewing and adjusting privacy settings on social media
Regularly reviewing and adjusting privacy settings limits the amount of personal information accessible to potential adversaries or identity thieves.
Protecting personal information online requires ongoing vigilance. Regularly reviewing and updating privacy settings on social media platforms limits the exposure of personal information that could be used in social engineering attacks or to compromise personal security. Other good practices include using unique passwords, enabling multi-factor authentication, and being cautious about what information is shared publicly.
Question 4: What is 'pretext calling' in the context of personal security threats?
- Calling someone before an important meeting
- Using a false scenario to manipulate a target into revealing information (Correct answer)
- Making phone calls from a landline
- Scheduling calls in advance
Correct answer: Using a false scenario to manipulate a target into revealing information
Pretext calling involves creating a fabricated scenario to manipulate a target into revealing confidential information or performing an action.
Pretext calling is a social engineering technique where an attacker impersonates someone (such as a bank representative, IT support, or government official) and uses a false scenario to manipulate the target into revealing sensitive information. Security awareness training should include recognizing and responding appropriately to pretext calls.
Question 5: What should a security professional do if they believe they are being surveilled?
- Immediately confront the suspected surveiller
- Follow established protocols, avoid revealing awareness, and report to security personnel (Correct answer)
- Ignore the surveillance and continue normal activities
- Post about it on social media
Correct answer: Follow established protocols, avoid revealing awareness, and report to security personnel
Established protocols typically include not revealing awareness of surveillance while covertly noting details and reporting to security personnel to assess the threat.
If a security professional suspects surveillance, the recommended approach is to follow established protocols: avoid making it obvious you are aware of the surveillance, make mental or written notes about individuals or vehicles involved, vary your route and behavior, and report the activity to appropriate security or law enforcement personnel for assessment and action.
Question 6: What is 'identity theft' and why is it a personal security concern?
- Assuming a false identity for undercover operations
- The fraudulent acquisition and use of another person's private identifying information (Correct answer)
- Changing one's legal name
- Using a nickname professionally
Correct answer: The fraudulent acquisition and use of another person's private identifying information
Identity theft involves using another person's personal information without their consent, typically for financial gain, and can severely impact the victim's reputation and security clearance.
Identity theft is the fraudulent acquisition and use of another person's private identifying information, usually for financial gain. For security professionals, identity theft is particularly concerning because it can affect credit, lead to fraudulent accounts in their name, and potentially impact their security clearance eligibility. Protecting personal information is a key component of personal security.
SFPC Personal Security 2
What is the primary goal of personal security measures for a security professional?