Practice Test GeeksSFPC - Security Fundamentals Professional Certification Practice Test
← All SFPC Flashcard Decks

Insider Threat Awareness Flashcards

6 cards from real SFPC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 Insider Threat Awareness flashcards as text

  1. What is an 'insider threat' in the security context?

    Answer: A security risk posed by individuals within an organization who have authorized access but misuse it

    An insider threat is a security risk posed by persons who have authorized access to organizational resources and who use that access—wittingly or unwittingly—in a way that harms the organization.

  2. What behavioral indicator may suggest an employee is becoming a potential insider threat?

    Answer: Expressing unexplained financial concerns or discussing financial difficulties

    Unexplained or unusual financial concerns can be a behavioral indicator of potential insider threat, particularly if the individual has access to valuable information or assets.

  3. What is the 'Continuous Evaluation' (CE) program in the context of insider threats?

    Answer: A program that performs ongoing automated record checks on cleared personnel to identify potentially disqualifying information

    Continuous Evaluation uses automated record checks to continuously monitor cleared personnel for potentially disqualifying information, rather than relying only on periodic reinvestigations.

  4. What is the role of a 'User Activity Monitoring' (UAM) system in insider threat programs?

    Answer: Monitoring employee computer and network activity to detect potentially malicious or unauthorized actions

    UAM systems monitor the activities of users with access to sensitive systems to detect anomalous or unauthorized behavior that may indicate an insider threat.

  5. What does the 'MICE' acronym represent in the context of insider threat motivations?

    Answer: Money, Ideology, Coercion/Compromise, Ego

    MICE represents the four primary motivations for insider threats: Money (financial gain), Ideology (beliefs or grievances), Coercion/Compromise (being blackmailed or coerced), and Ego (pride or revenge).

  6. What action should employees take when they observe suspicious behavior by a colleague?

    Answer: Report the behavior through established reporting mechanisms to the insider threat program or security officer

    Employees should report suspicious behavior through established channels, such as the insider threat reporting hotline or directly to the security officer, rather than confronting the colleague.