Integrated Defense Test 1 Practice

These questions are part of the practice quiz. Start practicing

• Which protection level includes non-nuclear alert forces, expensive, one-of-a-kind systems, selected critical command, control, and communications facilities, vital computer facilities, and equipment, and intelligence gathering systems critical to US operational capability?
• What is the key difference between red-teaming and purple-teaming?
• _________ are plans dealing with events that could potentially occur at an installation.
• What is incident containment and which two strategies can achieve it in a cyber-physical system?
• List two metrics to evaluate the effectiveness of an integrated defense exercise and explain why they matter.
• Which component of security is focused on preventing unauthorized access to equipment and safeguarding personnel?
• The integrated defense plan includes asset criticality, threat, vulnerability, and risk analysis data. This reflects which planning approach?
• The IDC meeting frequency is at least how often?
• The range of potential adversaries includes the ________ traditional threat levels.
• The base boundary BB is not necessarily the _______; it should be established based upon METT - TC.
• Which practices are essential for secure communications in contested environments?
• Which statement correctly distinguishes active defense measures from passive defense measures, and which examples illustrate each?
• That part of security concerned with physical measures designed to safeguard personnel; prevent unauthorized access to equipment.
• Which metric measures how often benign events are incorrectly flagged as threats?
• What is a key element of balancing openness and security in information sharing?
• What is the purpose of a Security Operations Center (SOC) in integrated defense, and what are its three core functions?
• How often should the Integrated Defense Plan (IDP) be reviewed?
• The IDC includes group commanders, commanders, a major tenant organizations, and key unit commanders. Which body is described?
• What is the name of the cell that coordinates cross-agency intelligence and intelligence preparation of the operational environment?
• What is a key benefit of SIP besides faster situational awareness?
• How should an exercise be designed to test cross-domain coordination between military, civilian authorities, and private sector in integrated defense?
• In which scenario is air-gapping most appropriate?
• What FPCON level is declared as a localized condition?
• What is a general global threat?
• When loss, theft, destruction, misuse, or compromise would result in unacceptable mission degradation.
• Which statement best describes graceful degradation in a resilient system?
• Which protection level includes weapon systems on alert status?
• When loss, theft, destruction, misuse, or compromise would result in significant mission degradation.
• Who provides surveillance over IDS sectors or zones?
• The Integrated Defense Work Group (IDWG) is chaired by the ________?
• In STRIDE, which category addresses the risk of a user denying a performed action later?
• Which level of threat has capability of projecting combat power by air, land, or sea?
• Which of the following correctly matches the unit to its typical membership?
• What is the third step in the IPB process?
• Who accomplishes tasks for the IDC?
• The ________ is the area outside the base perimeter from which the base may be vulnerable to standoff threats.
• ________ are response elements consisting of two properly trained, armed, and equipped ID force members.
• Which indicator helps identify potential disruption due to location-based factors such as natural disasters or political instability?
• Level ______ threats have capability of projecting combat power by air, land, or sea.
• Who maintains command and control C2 over integrated defense operations?
• What is defense-in-depth and how is it implemented across physical, cyber, and information domains?
• Define the cyber kill chain and identify the typical phases used to disrupt adversary cyber operations.
• Which is a concrete example of a governance, risk, and compliance (GRC) control related to access?
• Describe the difference between physical access control and perimeter security and provide two example controls for each.
• What is a strategic kill chain in integrated defense, and what is the effect of disrupting its early steps?
• Which is a common secure remote access method used in defense networks?
• What does IDWG stand for?
• ________ operations are a core capability of Air Force Security Forces. These operations include ______ and ______ defense measures.
• Describe the concept of defense sequencing and give an example.
• Name one challenge to effective information sharing in defense.
• Which indicator best highlights supplier risk due to reliance on a small number of suppliers?
• Who establishes the integrated defense committee?
• Which of the following is a main component of the IDRMP?
• Which statement best describes the domains covered by defense of the information infrastructure?
• Describes the area of concern around an airbase to support the establishment and adjustment of the base boundary.
• Which term refers to the area around an airbase used to support adjusting the base boundary?
• A Fire Team consists of how many ID force members?
• ________ applies when an incident occurs or Intel received.
• In a cyber-physical system, what is the primary purpose of a kill-switch during an incident?
• Which protection level includes POTUS aircraft?
• Who retains representation to the DOD peace officer standards in training (POST) commission?
• In Intelligence Preparation of the Battlefield/Environment (IPB), what are the four steps?
• Which is the last of the nine integrated defense desired effects?
• In defense contexts, what is the purpose of IP protection and how should openness be managed in information sharing?
• Which option is NOT a step in the seven-step IDRMP process?
• Backups and disaster recovery testing are typical controls in which defense category?
• What does the principle of least privilege require in system administration?
• What is the purpose of standard data formats in interoperability across multinational partners?
• What is a single point of failure in a defense supply chain?
• Which two common weaknesses undermine IP protection and supply chain security?
• Which MDMP step includes developing potential Courses of Action?
• Defensive measures used to reduce the vulnerability of individuals and property to terrorist acts, including limited response and containment by local military and civilian forces.
• What is the Information Fusion Cell in the integrated defense framework?
• Consists of four ID force members on one team or any combination of internal and external SRT.
• What determines the levels of security dedicated to resources based on program manpower?
• Which protection level is assigned to Air Force mission support assets that do not meet the definitions of PL-1, PL-2, or PL-3?
• ________ are senior integrated defense force members assigned to a specific area of operation (AO).
• What does RA stand for in base security terminology?
• Which level threats include small scale, irregular forces conducting unconventional warfare?
• Which protection level includes designated critical space and resources?
• AF/A4S stands for which Air Force office?
• What statement correctly contrasts risk assessment with risk management in defense planning? Example:
• Who serves as the installation anti-terrorism officer (ATO)?
• Which governance mechanism best enforces least privilege by assigning permissions to roles rather than individuals?
• Which statement accurately describes a hot site in disaster recovery?
• Which of the following is NOT one of the nine integrated defense desired effects in the BB and BSZ?
• Action cell were subject matter experts from the intelligence, Air Force office of special investigations, anti-terrorism and security forces, collaborate and conduct intelligence preparation of the operational environment?
• Who decides whether additional ECPs are needed at restricted areas?
• FPCON _______ must be capable of being maintained for weeks without causing undue hardship.
• The second fundamental change described for integrated defense policy moves the focus from compliance-based to what?
• Who provides security surveillance over the boundary of restricted areas or individual resources?
• Which FPCON level applies in the immediate area where a terrorist attack has occurred?
• Who is the Air Force chief of staff's primary advisor for integrated defense?
• Which statement correctly describes the function of fusion centers in defense information sharing?
• What is an ICS/SCADA risk and name two defensive strategies to mitigate it in a defense system?
• What is the purpose of just-in-time privileges in access control?
• Which question best describes the purpose of Contingency Plans in installation security?
• The ______ is defined as a line that delineates the surface area of a base.
• Who will serve as approval authority for force protection, and integrated defense guidance/policy and waiver authority for non-tiered requirements?
• Which protection level includes weapon systems on alert status, selected command, control, and communications facilities, and systems equipment, and intelligence gathering systems not critical?
• Two ethical/legal constraints in surveillance are privacy rights and oversight. Which statements describe these constraints?
• What are two common methodologies for tabletop exercises and what is a key metric for success?
• Which is the first of the nine integrated defense desired effects?
• The AF/A4S office symbol corresponds to which role?
• In risk assessment, how is likelihood defined and estimated?
• Which term identifies the area outside the base perimeter from which the base may be vulnerable to standoff threats?
• The IDC is chaired by the Installation Commander or designee. Which role fulfills this chair?
• Which statement correctly describes hot, warm, and cold sites and their use cases?
• Who selects and designates restricted and controlled areas?
• Which statement correctly contrasts symmetric and asymmetric encryption?
• What are the essential components of an incident response lifecycle in integrated defense, and why is each phase important?
• Which statements are true descriptions of need-to-know and least privilege?
• Who is responsible for all operations performed by an installation, for which integrated defense operations are a part?
• An SRT is composed of how many members?
• Do not establish more than ______ ECPs for each restricted area.
• In the incident response lifecycle, which phase follows Containment?
• Which term best captures the overarching approach of coordinating defense across multiple agencies?
• In an integrated defense context, which statement best describes deterrence?
• What are three key components of crisis communication planning in integrated defense?
• What does COA stand for in the IDRMP context?
• Who selects and designates restricted and controlled areas?
• Which statement about continuous monitoring is true?
• Which metrics are commonly used to measure the effectiveness of continuous monitoring in information security?
• The IDC is chaired by the ________ or designee.
• Which components are included in a threat environment assessment in integrated defense?
• The term for the defense concept that integrates offensive and defensive capabilities to protect Air Force operations is called what?
• In the seven-step IDRMP process, which step follows the Risk Tolerance Decision?
• Who serves as the installation commander's primary advisor for integrated defense?
• What codifies installation defense efforts among responsible internal and external agencies?
• What is an increased general threat?
• Which term describes the boundary line delineating the surface area of a base?
• Implementation of FPCON _____ for more than a short period of time creates hardship.
• Which level threats include enemy agents and terrorists?
• Which statement best describes purple-teaming?
• Which protection level includes Nuclear weapons and components, C4, systems critical to active nuclear missions, designated critical space and resources, and POTUS aircraft?
• What does IDWG stand for?
• The integration of multi-disciplinary, active and passive, offensive and defensive capabilities, employed to mitigate potential risks and defeat adversary threats to Air Force operations is called what?
• Which data component is used to prioritize resource protection based on risk in the integrated defense plan?
• IDWG stands for which of the following groups?
• What is a single integrated picture (SIP) concept in C2, and what are its benefits in integrated defense?
• In the context of integrated defense, what does AO stand for?
• Explain what constitutes a critical asset in protection planning and name two criteria for its designation.
• Who provides current information to the defense force commander DFC on threats affecting installation, integrated defense operations?
• Which protection level corresponds to loss, theft, destruction, misuse, or compromise that would degrade mission capability?
• Which pair of controls belongs to the Detection category?
• Which protection level includes intelligence gathering systems critical to US operational capability?
• Which list correctly enumerates the six steps of the Military Decision Making Process (MDMP) as used in integrated defense planning?
• The IDC convenes ________ as a minimum.
• As a minimum the integrated defense plan will include a completed ______
• Integrated defense represents two fundamental changes to policy and procedures. What is the second change?
• The goal of which concept is to mitigate potential risks and defeat adversary threats to Air Force operations within the base boundary and base security zone BSZ?
• In threat modeling, which framework identifies threats such as Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege?
• Which statement best describes hardening and air-gapping and when each is appropriate?
• Resilience in critical infrastructure relies on architectural patterns. Name two patterns that support resilience.
• Compare red-team and blue-team activities within integrated defense exercises and give an example of a metric to evaluate them.
• What are the typical steps in conducting a risk assessment for cyber-physical systems?
• Which statement best differentiates threat intelligence from operational intelligence in integrated defense?
• How do threat environment assessment outputs influence defense planning?
• Which statement best describes supply chain risk management in defense?
• OPSEC is used to protect sensitive information; which of the following describes its purpose and gives examples of indicators it guards?
• The plan that codifies installation defense across responsible agencies is abbreviated as what?
• What is the FPCON level used to denote an increased or more predictable threat?
• What provides installation commanders, the IDWG, DFC, and defense planners the ability to produce effects-based IDP using a standardized model to identify risks and develop risk management strategies?
• Which level in the FPCON framework is specifically labeled as Bravo?
• What distance in feet should the boundary barrier for restricted areas be located from the base perimeter?
• Which term describes deterring threat activity through active community policing, such as eagle eyes?
• Which option represents a best practice that directly supports supply chain security rather than IP protection?
• Which term determines the levels of security dedicated to resources based on program manpower?
• Explain the role of governance, risk, and compliance (GRC) in integrated defense and provide an example of a control.
• Integrated defense represents two fundamental changes to policy and procedures. What is the first change?
• What is the typical evaluation method after drills?
• Who conducts and coordinates the Integrated Defense Risk Management Process (IDRMP)?
• How do interoperability and joint operations influence the design of defense architectures in multinational contexts?
• Which combination accurately describes two common tabletop exercise methodologies and a key success metric?
• Who establishes the integrated defense committee?
• Which of the following is NOT a main category of cyber defense controls?
• How often does the integrated defense working group IDWG convene?
• Why are least privilege and need-to-know policies insufficient without monitoring and auditing?
• Which function analyzes all source information concerning threats to DOD missions, people or resources and capabilities?