FBI Intelligence Analyst Assessment Test — Questions and Answers

Question 1: In counterterrorism analysis, what is a 'foreign terrorist organization' (FTO)?

An FBI classification for overseas extremist networks
A UN Security Council designation for sanctioned terror groups
A non-U.S. organization designated by the Secretary of State as terrorist under the Immigration and Nationality Act (Correct answer)
Any international group that uses violence for political ends

Correct answer: A non-U.S. organization designated by the Secretary of State as terrorist under the Immigration and Nationality Act

FTO designation by the State Department triggers legal restrictions on material support and gives law enforcement additional tools.

Question 2: Which FBI program serves as the primary mechanism for sharing terrorism-related information between federal, state, local, and tribal law enforcement?

Terrorist Screening Center (TSC)
National Security Branch (NSB)
Joint Terrorism Task Force (JTTF) (Correct answer)
Domestic Investigations and Operations Guide (DIOG)

Correct answer: Joint Terrorism Task Force (JTTF)

JTTFs are FBI-led teams that bring together federal and local agencies to investigate and disrupt terrorist threats.

Question 3: What is an 'Information Sharing Environment' (ISE) as mandated by the Intelligence Reform and Terrorism Prevention Act of 2004?

A DHS-led initiative to share immigration intelligence with local law enforcement
A classified network connecting all IC agency databases
A set of standards for protecting classified information during sharing
A framework to facilitate responsible sharing of terrorism information among federal, state, local, tribal, and private sector partners (Correct answer)

Correct answer: A framework to facilitate responsible sharing of terrorism information among federal, state, local, tribal, and private sector partners

The ISE was mandated by law to improve the information sharing that was identified as a critical failure before the 9/11 attacks.

Question 4: What is 'economic espionage' under U.S. law (18 U.S.C. § 1831)?

Unauthorized access to a competitor's financial records
The theft of trade secrets for the benefit of a foreign government or agent (Correct answer)
Corporate surveillance of publicly traded companies
The collection of open-source economic data for a foreign client

Correct answer: The theft of trade secrets for the benefit of a foreign government or agent

Economic espionage involves stealing trade secrets to benefit a foreign government, instrumentality, or agent, carrying severe federal penalties.

Question 5: What is the primary legal framework that gives the FBI jurisdiction to investigate organized crime?

Racketeer Influenced and Corrupt Organizations (RICO) Act (18 U.S.C. § 1961) (Correct answer)
The National Security Act of 1947
The Hobbs Act (18 U.S.C. § 1951)
The Continuing Criminal Enterprise statute (21 U.S.C. § 848)

Correct answer: Racketeer Influenced and Corrupt Organizations (RICO) Act (18 U.S.C. § 1961)

RICO allows prosecution of individuals who participate in a pattern of racketeering activity through an enterprise, a powerful tool against organized crime.

Question 6: What does the term 'need-to-know' mean in the context of classified intelligence dissemination?

A principle allowing IC employees to request any classified information relevant to their work
A DHS policy requiring all terrorism intelligence be shared with state and local partners
A legal standard for obtaining court approval for intelligence sharing
A requirement that individuals access classified information only if it is necessary for them to perform their official duties (Correct answer)

Correct answer: A requirement that individuals access classified information only if it is necessary for them to perform their official duties

Need-to-know ensures classified information is accessed only by those whose duties actually require it, limiting exposure and reducing insider threat risk.

Question 7: What is the significance of the Church Committee and its impact on modern FBI intelligence activities?

It was a 1975 Senate investigation that uncovered FBI abuses (COINTELPRO) and led to oversight reforms, FISA, and the Attorney General Guidelines (Correct answer)
It was a 1970s congressional committee that authorized FBI domestic surveillance programs
It created the legal framework for the FBI to conduct intelligence operations
It established the current structure of the U.S. Intelligence Community

Correct answer: It was a 1975 Senate investigation that uncovered FBI abuses (COINTELPRO) and led to oversight reforms, FISA, and the Attorney General Guidelines

The Church Committee's findings of FBI abuses led directly to FISA, executive orders restricting intelligence activities, and enhanced congressional oversight.

Question 8: What is the minimum educational requirement to apply for the FBI Intelligence Analyst position?

A master's degree
A bachelor's degree (Correct answer)
A law enforcement certification
A high school diploma

Correct answer: A bachelor's degree

FBI Intelligence Analyst applicants must hold at least a bachelor's degree from an accredited institution.

Question 9: An analyst is given conflicting reports from a reliable source and a new untested source. Which approach is most appropriate?

Average the two conclusions
Automatically accept the new source
Weigh each report by source reliability and corroboration before judging (Correct answer)
Discard both reports

Correct answer: Weigh each report by source reliability and corroboration before judging

Analysts should evaluate reliability and corroboration rather than treating all sources equally.

Question 10: What is the role of the Office of the Director of National Intelligence (ODNI) in the Intelligence Community?

To lead, oversee, and integrate intelligence activities across all 18 IC agencies (Correct answer)
To conduct foreign intelligence collection operations
To manage the intelligence budget and allocate resources to IC agencies
To oversee Congressional oversight of the intelligence community

Correct answer: To lead, oversee, and integrate intelligence activities across all 18 IC agencies

ODNI was created by the Intelligence Reform and Terrorism Prevention Act of 2004 to provide unified leadership and coordination across the fragmented IC.

Question 11: What is 'anomaly-based detection' in FBI insider threat programs?

Monitoring classified computer systems for malware signatures
Identifying potential insider threats by detecting unusual behavior patterns that deviate from an individual's baseline (Correct answer)
Using biometric scanning to detect unauthorized access
Reviewing all classified communications for unauthorized content

Correct answer: Identifying potential insider threats by detecting unusual behavior patterns that deviate from an individual's baseline

Anomaly-based detection uses behavioral baselines to flag unusual activity—such as accessing files outside one's normal work scope—as potential insider threat indicators.

Question 12: What is a 'confidential human source' (CHS) in FBI criminal investigations?

A publicly identified cooperating witness in federal court
An undercover FBI agent posing as a criminal
An individual who provides information to the FBI with the expectation that their identity will be protected (Correct answer)
A foreign national providing information to a U.S. law enforcement liaison

Correct answer: An individual who provides information to the FBI with the expectation that their identity will be protected

A CHS is a person who covertly provides information to the FBI and whose identity must be protected due to safety risks or investigative sensitivity.

Question 13: What is the CIA's role in relation to the FBI in national security investigations?

CIA oversees FBI foreign intelligence activities
CIA provides legal authority for FBI intelligence collection
CIA collects foreign intelligence abroad while FBI investigates national security threats inside the United States, with coordination required when threats cross borders (Correct answer)
CIA and FBI share equal jurisdiction for all national security matters

Correct answer: CIA collects foreign intelligence abroad while FBI investigates national security threats inside the United States, with coordination required when threats cross borders

The CIA-FBI relationship requires careful coordination as foreign threats often migrate to U.S. soil, requiring seamless intelligence handoffs.

Question 14: An analyst must brief a senior official who has only five minutes. Which structure is most effective?

Withhold the conclusion until questions are asked
Begin with raw data and build to the conclusion
Lead with the bottom-line judgment, then supporting points (Correct answer)
List every source consulted before any findings

Correct answer: Lead with the bottom-line judgment, then supporting points

Bottom-line-up-front (BLUF) delivers the key judgment first for time-constrained consumers.

Question 15: What does 'information sharing' mean in the post-9/11 intelligence reform context?

Sharing all intelligence without restriction to all government agencies
The systematic dissemination of intelligence across federal, state, local, and tribal agencies on a need-to-know basis (Correct answer)
Exchanging intelligence with foreign partner services
Declassifying intelligence for public release

Correct answer: The systematic dissemination of intelligence across federal, state, local, and tribal agencies on a need-to-know basis

Post-9/11 reforms sought to break down the 'wall' between intelligence and law enforcement communities that contributed to the failure to detect the 9/11 plot.

Question 16: Which pre-attack indicator is commonly associated with an individual on a radicalization pathway toward terrorism?

Traveling internationally for tourism
Acquisition of weapons or materials with no clear lawful purpose (Correct answer)
Changing employment
Attending religious services frequently

Correct answer: Acquisition of weapons or materials with no clear lawful purpose

Unusual acquisition of weapons, explosives components, or tactical equipment can be a behavioral indicator of attack planning.

Question 17: What does 'mirror-imaging' mean as an analytical pitfall?

Copying analytical conclusions from previous assessments
Duplicating intelligence reports without attribution
Assuming adversaries think and act the same way as the analyst does (Correct answer)
Reflecting classified data to unauthorized recipients

Correct answer: Assuming adversaries think and act the same way as the analyst does

Mirror-imaging is the flawed assumption that adversaries share the same values, motivations, and decision-making logic as the analyst.

Question 18: Which foreign nation does the FBI identify as its top counterintelligence threat?

China (Correct answer)
North Korea
Russia
Iran

Correct answer: China

The FBI has publicly identified China's intelligence services as the most significant long-term counterintelligence threat to U.S. government and industry.

Question 19: Which of the following is a core function of an FBI Intelligence Analyst?

Transforming raw data into actionable intelligence (Correct answer)
Making physical arrests
Conducting armed raids
Prosecuting criminal cases

Correct answer: Transforming raw data into actionable intelligence

Intelligence Analysts evaluate and synthesize raw information into actionable intelligence products to support investigations.

Question 20: Which action best protects the integrity of an analytic product when new contradicting evidence emerges after publication?

Ignore it to preserve the original conclusion
Delete the original product silently
Wait until the consumer notices
Issue an update reassessing the judgment in light of the new evidence (Correct answer)

Correct answer: Issue an update reassessing the judgment in light of the new evidence

Sound analytic tradecraft requires revisiting and updating judgments when significant new evidence appears.

Question 21: What is a 'predicate' in the context of opening an FBI investigation?

A factual basis indicating a crime may have been committed or a threat to national security may exist (Correct answer)
A court order authorizing surveillance of a suspect
The initial arrest that leads to an investigation
A classified requirement issued by FBI Headquarters

Correct answer: A factual basis indicating a crime may have been committed or a threat to national security may exist

FBI investigations must be predicated on articulable facts suggesting criminal activity or national security threats, preventing investigations based on protected activity.

Question 22: In the context of terrorism financing, what is 'hawala'?

An informal value transfer system that moves money without physical currency crossing borders (Correct answer)
A formal banking system used in the Middle East
A classified FBI counterterrorism database
A type of money laundering involving real estate

Correct answer: An informal value transfer system that moves money without physical currency crossing borders

Hawala is a trust-based informal transfer system that facilitates value movement with minimal documentation, complicating financial investigations.

Question 23: In a logic problem: If no analysts in the room have field training, and Morgan is in the room, what follows?

Morgan trains others
Morgan may have field training
Morgan does not have field training (Correct answer)
Morgan has field training

Correct answer: Morgan does not have field training

If no one in the room has field training and Morgan is in the room, Morgan lacks it.

Question 24: An analyst identifies a pattern but cannot determine cause. Which statement is most analytically sound?

The pattern is noted, but causation requires further evidence (Correct answer)
The pattern should be ignored
Correlation proves causation here
Cause can be assumed from a single coincidence

Correct answer: The pattern is noted, but causation requires further evidence

Observing correlation does not establish causation without additional supporting evidence.

Question 25: What does 'financial intelligence (FININT)' mean in FBI investigations?

Background financial investigations of FBI applicants
Intelligence derived from analyzing financial transactions, records, and flows to support investigations (Correct answer)
Intelligence collected by the Financial Crimes Enforcement Network (FinCEN)
Classified information about foreign financial systems

Correct answer: Intelligence derived from analyzing financial transactions, records, and flows to support investigations

FININT involves analyzing bank records, wire transfers, and other financial data to trace criminal proceeds, identify networks, and build prosecutorial cases.

Question 26: What is an 'intelligence officer' versus an 'agent' in intelligence terminology?

An intelligence officer conducts surveillance while an agent makes arrests
An intelligence officer works overseas while an agent works domestically
An intelligence officer is a career professional employee of an intelligence service; an agent is a recruited asset who reports to the officer (Correct answer)
An agent is a higher rank than an intelligence officer

Correct answer: An intelligence officer is a career professional employee of an intelligence service; an agent is a recruited asset who reports to the officer

Intelligence officers are trained professionals who recruit and run agents (human sources) who provide information in return for compensation or ideological motivation.

Question 27: What is a 'watering hole attack' in the context of cyber threat intelligence?

A denial-of-service attack that floods a network until it fails
An attack that intercepts communications between two parties
Sending malicious emails to all employees of a targeted organization
Compromising a website frequently visited by the target to infect visitors with malware (Correct answer)

Correct answer: Compromising a website frequently visited by the target to infect visitors with malware

In a watering hole attack, adversaries compromise a legitimate website their targets commonly visit, using it as a vector to deliver malware.

Question 28: What category of terrorism does the FBI classify attacks motivated by extreme anti-government beliefs or far-right ideology?

International Terrorism (IT)
Criminal Enterprise Terrorism
Homegrown Violent Extremism (HVE)
Domestic Violent Extremism (DVE) (Correct answer)

Correct answer: Domestic Violent Extremism (DVE)

Domestic Violent Extremism refers to violence motivated by ideologies originating within the U.S., including anti-government and racially motivated extremism.

Question 29: Which is the best example of distinguishing fact from assumption in an assessment?

Presenting all statements as equally certain
Labeling unverified premises as assumptions while citing confirmed facts separately (Correct answer)
Treating assumptions as facts to simplify the brief
Omitting assumptions so the brief looks stronger

Correct answer: Labeling unverified premises as assumptions while citing confirmed facts separately

Clearly separating confirmed facts from working assumptions lets readers judge the strength of the conclusions.

Question 30: In counterintelligence analysis, what is a 'cutout'?

A physical surveillance team member
An intermediary used to insulate a handler or intelligence service from direct contact with an asset (Correct answer)
A classified document redacted for public release
A terminated intelligence source

Correct answer: An intermediary used to insulate a handler or intelligence service from direct contact with an asset

A cutout is a person or mechanism that maintains separation between intelligence officers and their assets to protect both from exposure.

Question 31: What is the typical educational background required for an intelligence analyst?

A high school diploma is required
A two-year diploma
A bachelor's degree in a completely unrelated field
A bachelor's degree in a related field is required (Correct answer)

Correct answer: A bachelor's degree in a related field is required

A bachelor's degree in a related field is the typical minimum educational requirement for an intelligence analyst position. Relevant fields often include international relations, political science, history, economics, criminal justice, or specific foreign languages. This academic background equips candidates with the necessary analytical and research skills for intelligence work.

Question 32: What is the Foreign Intelligence Surveillance Act (FISA) warrant used for in FBI investigations?

To approve the use of confidential human sources
To authorize electronic surveillance and physical searches targeting foreign powers and their agents in the U.S. (Correct answer)
To classify FBI intelligence reports
To authorize wiretaps in federal criminal investigations

Correct answer: To authorize electronic surveillance and physical searches targeting foreign powers and their agents in the U.S.

FISA provides a legal framework for national security surveillance of foreign powers and agents that is separate from the criminal warrant process.

Question 33: What does 'material support to terrorism' mean under U.S. federal law (18 U.S.C. § 2339B)?

Making statements supporting terrorism on social media
Attending a rally organized by a terrorist sympathizer
Possessing extremist literature
Providing money, training, weapons, or services to a designated foreign terrorist organization (Correct answer)

Correct answer: Providing money, training, weapons, or services to a designated foreign terrorist organization

18 U.S.C. § 2339B criminalizes knowingly providing any material support or resources to an FTO, regardless of intent.

Question 34: An analyst must brief leadership but has incomplete data with a deadline in one hour. What is the best approach?

Present the assessment with clearly stated confidence levels and gaps (Correct answer)
Withhold the briefing because conclusions are uncertain
Present only the data that supports one conclusion
Delay the briefing until all data is gathered

Correct answer: Present the assessment with clearly stated confidence levels and gaps

Communicating findings with explicit confidence levels and identified gaps lets decision-makers act responsibly under uncertainty.

Question 35: What is 'influence operation' as a foreign intelligence threat to the U.S.?

International diplomatic pressure campaigns
A classified FBI operation targeting foreign propaganda networks
Covert efforts by foreign governments to shape U.S. public opinion, policy, or political processes (Correct answer)
Foreign investment in U.S. media companies

Correct answer: Covert efforts by foreign governments to shape U.S. public opinion, policy, or political processes

Foreign influence operations use disinformation, social media manipulation, and front groups to covertly advance foreign government interests within the U.S.

Question 36: What is 'collection bias' in the context of intelligence analysis writing?

A legal restriction on collecting intelligence against U.S. persons
The practice of prioritizing HUMINT collection over SIGINT collection
The tendency for available information to over-represent certain sources, potentially skewing analysis (Correct answer)
An agency's documented preference for specific collection disciplines

Correct answer: The tendency for available information to over-represent certain sources, potentially skewing analysis

Collection bias occurs when the information available to an analyst is unrepresentative of the full picture, which can skew the resulting assessment in a misleading direction.

Question 37: How should FBI intelligence analysts handle information that cannot be independently corroborated?

Automatically classify it at the highest available level pending corroboration
Transmit it only through verbal briefings to avoid creating a written record
Include it with appropriate sourcing, reliability indicators, and explicit caveats (Correct answer)
Discard it as unreliable and exclude it from all intelligence products

Correct answer: Include it with appropriate sourcing, reliability indicators, and explicit caveats

Uncorroborated information may still carry intelligence value if properly qualified with sourcing, reliability indicators, and caveats that allow decision-makers to weigh it appropriately.

Question 38: What is 'geographic profiling' as an analytical tool in FBI criminal investigations?

Analyzing foreign intelligence activity by geographic area of operation
Mapping crime trends by demographic region
Profiling criminal organizations by their geographic reach
Using crime location data to identify the most probable area where an offender lives or works (Correct answer)

Correct answer: Using crime location data to identify the most probable area where an offender lives or works

Geographic profiling uses the locations of linked crimes to mathematically predict the offender's likely base of operations.

Question 39: During the hiring process, the FBI Intelligence Analyst structured interview primarily evaluates what?

Physical endurance
Foreign language fluency only
Behavioral competencies and judgment (Correct answer)
Memorized trivia

Correct answer: Behavioral competencies and judgment

The structured interview assesses competencies like judgment, organizing/planning, and communication through behavioral questions.

Question 40: What does a 'scope note' in an FBI intelligence product typically define?

A summary of the analyst's professional qualifications
The legal authorities authorizing the intelligence collection
The geographic, temporal, and topical boundaries of the assessment (Correct answer)
The clearances required to access the document

Correct answer: The geographic, temporal, and topical boundaries of the assessment

A scope note defines what the intelligence product covers — including subject matter, time period, and geographic focus — and what it does not cover.

Question 41: What is the final path you could take to become an FBI Intelligence Analyst?

Strategic track (Correct answer)
Production and analysis
Data Gathering and Reporting
Administration and management

Correct answer: Strategic track

The 'Strategic track' represents a common and advanced career path for FBI Intelligence Analysts. This path focuses on long-term analysis, assessing broad threats, and developing strategic intelligence products that inform policy and resource allocation at high levels. It moves beyond tactical analysis to contribute to overarching national security strategies.

Question 42: In financial crime analysis, what is 'structuring' (also called 'smurfing')?

Breaking large cash transactions into smaller amounts to avoid mandatory bank reporting thresholds (Correct answer)
Investing criminal proceeds in easily liquidated assets
Using multiple bank accounts to hide criminal proceeds
Moving funds through a series of shell companies

Correct answer: Breaking large cash transactions into smaller amounts to avoid mandatory bank reporting thresholds

Structuring is the illegal act of deliberately breaking up deposits to stay under the $10,000 Bank Secrecy Act reporting threshold.

Question 43: How long does it take to complete the FBI's Phase 1 Computer-Based Test?

60 minutes
100 minutes
110 minutes (Correct answer)
80 minutes

Correct answer: 110 minutes

The FBI's Phase 1 Computer-Based Test for Intelligence Analysts is designed to assess various cognitive abilities and typically has a duration of 110 minutes. This time frame allows candidates to complete sections covering logical reasoning, analytical reasoning, and situational judgment. Effective time management is crucial for successfully navigating this assessment.

Question 44: What is a 'pattern of life' analysis in FBI criminal intelligence?

A psychological profile of a serial offender
A statistical model predicting recidivism rates
Mapping an individual's routine activities, behaviors, and associations over time to identify vulnerabilities or predict future actions (Correct answer)
An analysis of crime trends within a geographic area

Correct answer: Mapping an individual's routine activities, behaviors, and associations over time to identify vulnerabilities or predict future actions

Pattern of life analysis tracks an individual's daily routines, communications, and movements to build a comprehensive picture for investigative or targeting purposes.

Question 45: What does the term 'insider threat' mean in the context of FBI counterintelligence?

A threat actor operating within U.S. borders
A current or former employee who misuses authorized access to harm the organization or nation (Correct answer)
A classified program monitoring government networks
A foreign spy who has infiltrated the U.S. government

Correct answer: A current or former employee who misuses authorized access to harm the organization or nation

Insider threats use their trusted access and knowledge to steal information, commit sabotage, or assist foreign intelligence services.

Question 46: An analyst notices a pattern but the sample size is very small. What caution applies?

A small sample may produce a coincidental pattern, not a real trend (Correct answer)
Patterns from small samples should be reported as certain
Small samples always reveal the truth fastest
Sample size never affects pattern reliability

Correct answer: A small sample may produce a coincidental pattern, not a real trend

Patterns drawn from small samples can be coincidental and should be treated cautiously until more data confirms them.

Question 47: Which of the following is NOT a type of degree sought after by the FBI in its analysts?

Social Sciences
Business
Mathematics (Correct answer)
Hard Sciences

Correct answer: Mathematics

The FBI typically seeks candidates with degrees in fields that cultivate strong analytical, research, and communication skills, such as business, hard sciences (e.g., computer science, engineering), and social sciences (e.g., political science, international relations). While mathematics is valuable, it is often not listed as a *primary* degree sought after for intelligence analyst roles in the same way as these other fields, which directly align with the geopolitical and investigative nature of the work.

Question 48: What is the Terrorist Screening Center (TSC) and which agency leads it?

The FBI-administered center that manages the U.S. government's unified terrorist watchlist (TSDB) and provides screening support to partner agencies (Correct answer)
A CIA-led center that tracks foreign terrorist networks
A joint NSA-FBI center for monitoring terrorist communications
A DHS center that screens all international travelers

Correct answer: The FBI-administered center that manages the U.S. government's unified terrorist watchlist (TSDB) and provides screening support to partner agencies

The FBI-led TSC maintains the Terrorist Screening Database and provides watchlist-based screening support to aviation, border, and law enforcement agencies.

Question 49: What is the primary mission of FBI Field Intelligence Groups (FIGs)?

To collect, analyze, and disseminate intelligence in support of FBI field office investigative priorities (Correct answer)
To conduct undercover operations in extremist organizations
To review and declassify historical FBI intelligence files
To manage relationships with foreign intelligence services

Correct answer: To collect, analyze, and disseminate intelligence in support of FBI field office investigative priorities

FIGs serve as the intelligence hub of each FBI field office, integrating analysis with investigative operations.

Question 50: Which characteristic is most essential for success as an Intelligence Analyst?

Expert hand-to-hand combat
Fast running speed
Strong critical-thinking and analytical skills (Correct answer)
Ability to lift heavy weights

Correct answer: Strong critical-thinking and analytical skills

Critical thinking and analytical reasoning are the foundation of producing reliable intelligence.

Question 51: What is 'attack planning' as a behavioral indicator in FBI threat assessments?

Observable actions such as conducting surveillance, acquiring weapons, or rehearsing an attack (Correct answer)
An individual expressing grievances online
Traveling to a foreign country for undisclosed reasons
Contacting a known extremist

Correct answer: Observable actions such as conducting surveillance, acquiring weapons, or rehearsing an attack

Attack planning behaviors are concrete operational steps that indicate an individual has moved beyond ideological sympathy toward active preparation.

Question 52: Which of the following is not a critical thinking skill?

Forecasting (Correct answer)
Adapting and anticipating
Data gathering and analysis
Obtaining relevant conclusions

Correct answer: Forecasting

Critical thinking skills primarily involve the objective analysis and evaluation of information to form a judgment. This includes adapting to new information, anticipating potential issues, gathering and analyzing data, and obtaining relevant conclusions. Forecasting, while an important analytical task, is an *application* or *outcome* of critical thinking rather than a fundamental critical thinking skill itself, which focuses more on the process of reasoning and evaluation.

Question 53: Which federal statute provides the FBI with primary jurisdiction to investigate international terrorism?

18 U.S.C. § 1030 (Computer Fraud and Abuse Act)
18 U.S.C. § 1956 (Money Laundering)
50 U.S.C. § 1801 (Foreign Intelligence Surveillance Act)
18 U.S.C. § 2332b (Acts of Terrorism Transcending National Boundaries) (Correct answer)

Correct answer: 18 U.S.C. § 2332b (Acts of Terrorism Transcending National Boundaries)

18 U.S.C. § 2332b covers violent acts of terrorism that transcend national boundaries and affect U.S. interests.

Question 54: What is the purpose of 'dissemination controls' on an intelligence report?

To establish a mandatory review and update timeline
To document which analysts prepared and reviewed the report
To ensure simultaneous distribution to all relevant agencies
To restrict access to those with appropriate clearances and a legitimate need to know (Correct answer)

Correct answer: To restrict access to those with appropriate clearances and a legitimate need to know

Dissemination controls protect sources and methods by limiting report access to individuals with proper clearances and a verified need to know.

Question 55: What is 'ransomware' as a cyber threat the FBI investigates?

Malicious software that encrypts victim data and demands payment for decryption keys (Correct answer)
A phishing attack targeting senior government officials
A denial-of-service attack against critical infrastructure
Software that secretly harvests credentials from victim networks

Correct answer: Malicious software that encrypts victim data and demands payment for decryption keys

Ransomware is a category of malware that holds victim data hostage until a ransom is paid, often targeting hospitals, schools, and critical infrastructure.

Question 56: Which technique involves identifying events that, if they occur, would cause an analyst to significantly revise an assessment?

Trend Analysis
Predictive Profiling
Indicators and Warnings (I&W) (Correct answer)
Pattern of Life Analysis

Correct answer: Indicators and Warnings (I&W)

Indicators and Warnings identify observable signals that would confirm or challenge current analytical judgments.

Question 57: What does 'operational security (OPSEC)' mean when applied to terrorist groups?

FBI procedures for protecting classified investigations
Physical security protocols for FBI field offices
Counterintelligence measures against foreign services
Measures taken by terrorists to conceal their identities, communications, and plans from law enforcement (Correct answer)

Correct answer: Measures taken by terrorists to conceal their identities, communications, and plans from law enforcement

Terrorist groups use OPSEC practices such as encrypted communications and compartmentation to hinder law enforcement detection.

Question 58: Which statement about intelligence consumers is most accurate?

They only read footnotes
They need products tailored to inform their decisions (Correct answer)
They want every raw detail included
They prefer no conclusions at all

Correct answer: They need products tailored to inform their decisions

Intelligence products should be tailored to support the consumer's specific decision needs.

Question 59: What is a 'national security letter' (NSL) and how is it used in FBI counterintelligence?

A formal warning issued to a foreign intelligence officer
A security clearance revocation notice
An administrative subpoena allowing FBI to obtain records without a court order in national security investigations (Correct answer)
A classified communication between FBI and the Director of National Intelligence

Correct answer: An administrative subpoena allowing FBI to obtain records without a court order in national security investigations

NSLs allow the FBI to compel disclosure of certain records from third parties in national security investigations without judicial approval.

Question 60: In intelligence analysis, what does 'HUMINT' refer to?

Human Interface for Network Tracking
High-Utility Machine Intelligence Networks
Humanitarian Intelligence for disaster response
Human Intelligence gathered from human sources (Correct answer)

Correct answer: Human Intelligence gathered from human sources

HUMINT is intelligence collected from human sources such as informants, defectors, or direct observation.

Question 61: Which FBI Headquarters division leads the investigation of domestic and international terrorism?

Counterintelligence Division (CD)
National Security Branch (NSB) (Correct answer)
Operational Technology Division (OTD)
Criminal Investigative Division (CID)

Correct answer: National Security Branch (NSB)

The National Security Branch oversees the FBI's counterterrorism, counterintelligence, and weapons of mass destruction programs.

Question 62: Why should passive voice generally be avoided in intelligence writing?

Passive voice automatically increases document length beyond style guidelines
Passive voice is grammatically prohibited in classified government documents
Passive voice obscures agency and makes it unclear who performed an action (Correct answer)
Passive voice is reserved exclusively for unclassified executive summaries

Correct answer: Passive voice obscures agency and makes it unclear who performed an action

Active voice clearly identifies who is performing an action, which is essential in intelligence reporting where attribution and accountability are critical.

Question 63: What is 'espionage' as defined under U.S. federal law?

Unauthorized access to classified computer systems
The act of photographing military installations without authorization
Any intelligence gathering by a foreign government against U.S. interests
The unauthorized collection and transmission of national defense information to a foreign entity (Correct answer)

Correct answer: The unauthorized collection and transmission of national defense information to a foreign entity

Espionage under 18 U.S.C. § 794 involves transmitting national defense information to foreign governments or agents with intent to harm the U.S.

Question 64: What is the primary purpose of analysis of competing hypotheses (ACH)?

To eliminate the need for collection
To rank sources by reliability only
To prove the analyst's preferred theory
To systematically evaluate multiple explanations against the evidence (Correct answer)

Correct answer: To systematically evaluate multiple explanations against the evidence

ACH compares several hypotheses against all evidence to reduce bias and find the most consistent explanation.

Question 65: What is a 'confidential informant' (CI) different from a 'cooperating witness' (CW) in FBI investigations?

A CI's identity remains protected and they are not publicly identified; a CW testifies in court and their identity becomes known (Correct answer)
A CI is paid while a CW volunteers their assistance
A CI provides information on future crimes while a CW reports past crimes
A CI works for the FBI full-time while a CW provides one-time assistance

Correct answer: A CI's identity remains protected and they are not publicly identified; a CW testifies in court and their identity becomes known

CIs operate covertly with identity protection while CWs agree to testify in court, accepting that their identities will be disclosed during prosecution.

Question 66: What role does the National Counterterrorism Center (NCTC) play in relation to FBI counterterrorism?

It provides legal authorization for FBI surveillance operations
It conducts offensive counterterrorism operations overseas
It manages the FBI's JTTF program
It serves as the primary organization for integrating and analyzing all terrorism intelligence from across the U.S. government (Correct answer)

Correct answer: It serves as the primary organization for integrating and analyzing all terrorism intelligence from across the U.S. government

NCTC integrates terrorism intelligence from all IC agencies and supports strategic analysis to inform national counterterrorism policy.

Question 67: What foreign intelligence threat does the FBI's 'China Initiative' (now the China Strategy) address?

Cyber attacks by Chinese criminal organizations
Chinese government-sponsored espionage, intellectual property theft, and economic coercion targeting U.S. research and industry (Correct answer)
Chinese diplomatic interference in U.S. elections
Chinese disinformation campaigns on social media

Correct answer: Chinese government-sponsored espionage, intellectual property theft, and economic coercion targeting U.S. research and industry

The FBI's China strategy addresses systematic Chinese government theft of U.S. technology, research, and trade secrets across academia, government, and industry.

Question 68: Why is timeliness considered a core attribute of useful intelligence?

Timeliness replaces the need for accuracy
Accurate information delivered too late cannot inform a decision (Correct answer)
Old intelligence is always useless
Faster reports are always more accurate

Correct answer: Accurate information delivered too late cannot inform a decision

Intelligence must reach decision-makers while it can still influence action, or its value is lost.

Question 69: What is the role of the Department of Homeland Security (DHS) in relation to FBI intelligence?

DHS focuses on border security, infrastructure protection, and immigration enforcement while FBI leads national security investigations and criminal intelligence (Correct answer)
DHS and FBI have identical national security missions under joint leadership
DHS provides funding for FBI national security programs
DHS oversees all domestic intelligence activities while FBI handles law enforcement

Correct answer: DHS focuses on border security, infrastructure protection, and immigration enforcement while FBI leads national security investigations and criminal intelligence

DHS and FBI have complementary but distinct roles, with frequent coordination on terrorism, cybersecurity, and border-related threats.

Question 70: What is a 'dead drop' in intelligence operations?

A formal debrief of a terminated intelligence source
A clandestine method of exchanging items or information between an intelligence officer and an agent without meeting directly (Correct answer)
A classified FBI counterintelligence surveillance technique
A secure facility for storing classified intelligence materials

Correct answer: A clandestine method of exchanging items or information between an intelligence officer and an agent without meeting directly

A dead drop is a prearranged location where an intelligence officer and asset exchange materials without being seen together, reducing exposure risk.

Question 71: An analyst must present a complex finding to senior FBI leadership with limited time. What approach is most effective?

Lead with the key judgment, then supporting evidence (Correct answer)
Provide only statistics without context
Read every raw document aloud
Avoid stating any conclusion

Correct answer: Lead with the key judgment, then supporting evidence

Bottom-line-up-front (BLUF) communication delivers the key judgment first so decision-makers grasp it quickly.

Question 72: What is the significance of the Terrorist Screening Database (TSDB) managed by the FBI?

It is a database of individuals convicted of terrorism offenses
It tracks all FBI counterterrorism investigations
It is the U.S. government's consolidated watchlist of known or suspected terrorists (Correct answer)
It contains classified intelligence on foreign terrorist networks

Correct answer: It is the U.S. government's consolidated watchlist of known or suspected terrorists

The TSDB consolidates terrorist identity information to help law enforcement, border security, and aviation agencies identify individuals who may pose a threat.

Question 73: What is the FBI's primary cyber threat intelligence mission?

Conducting offensive cyber operations against adversaries
Investigating cyber intrusions, attribution of attacks, and disrupting nation-state and criminal cyber actors (Correct answer)
Managing cybersecurity for all U.S. government networks
Providing cyber threat intelligence exclusively to the private sector

Correct answer: Investigating cyber intrusions, attribution of attacks, and disrupting nation-state and criminal cyber actors

The FBI leads federal domestic cyber threat investigation, combining intelligence analysis with law enforcement authority to investigate and disrupt cyber actors.

Question 74: What is a 'fusion center' in the context of U.S. intelligence sharing?

Joint CIA-FBI facilities for coordinating foreign intelligence operations
Classified data centers where intelligence from multiple collection sources is merged
FBI-operated analytical hubs that process raw intelligence into finished products
State and locally operated centers that coordinate intelligence sharing between federal, state, local, tribal, and private sector partners (Correct answer)

Correct answer: State and locally operated centers that coordinate intelligence sharing between federal, state, local, tribal, and private sector partners

Fusion centers were established after 9/11 to improve information sharing, with the FBI providing federal support and intelligence to these state-led centers.

Question 75: What is 'compartmentation' as applied in U.S. intelligence security?

Physically securing classified documents in separate storage areas
Restricting access to sensitive information to only those with a need-to-know (Correct answer)
Dividing intelligence analysis teams into isolated units
Creating separate databases for different classification levels

Correct answer: Restricting access to sensitive information to only those with a need-to-know

Compartmentation limits exposure of classified information by restricting access on a strict need-to-know basis, minimizing damage from insider threats or breaches.

Question 76: In the context of counterterrorism, what is a 'nexus to terrorism'?

A formal designation applied to suspected terrorists
A classified FBI surveillance operation
A legal standard for securing a FISA warrant
A connection between criminal activity or an individual and terrorist organizations or ideology (Correct answer)

Correct answer: A connection between criminal activity or an individual and terrorist organizations or ideology

Establishing a nexus to terrorism allows the FBI to open a terrorism investigation and apply relevant counterterrorism tools and authorities.

Question 77: What is 'money laundering' in the context of FBI financial intelligence?

The process of disguising the origins of illegally obtained money to make it appear legitimate (Correct answer)
Counterfeiting currency to enter it into the financial system
Unauthorized transfer of funds from bank accounts
Tax evasion through offshore accounts

Correct answer: The process of disguising the origins of illegally obtained money to make it appear legitimate

Money laundering conceals the criminal origin of proceeds by cycling them through legitimate transactions, making them appear to come from lawful sources.

Question 78: Who serves as the head of the U.S. Intelligence Community?

Director of the CIA
Director of National Intelligence (DNI) (Correct answer)
Chairman of the Joint Chiefs of Staff
National Security Advisor

Correct answer: Director of National Intelligence (DNI)

The DNI was established by the Intelligence Reform and Terrorism Prevention Act of 2004 as the principal advisor to the President on intelligence matters.

Question 79: Which statement reflects appropriate use of confidence levels in an assessment?

Match the confidence level to the quality and corroboration of evidence (Correct answer)
Assign confidence randomly to reduce bias
Avoid stating confidence to keep options open
Use 'high confidence' for every judgment to sound authoritative

Correct answer: Match the confidence level to the quality and corroboration of evidence

Confidence levels should reflect the strength, reliability, and corroboration of the underlying evidence.

Question 80: What does the term 'cognitive bias' most directly threaten in analysis?

Objective interpretation of evidence (Correct answer)
The speed of data collection
The number of available sources
The classification level of a report

Correct answer: Objective interpretation of evidence

Cognitive biases distort how analysts interpret evidence, undermining objectivity.

FBI Intelligence Analyst Assessment Test

The FBI Intelligence Analyst Phase I Assessment is a competitive selection test administered by the Federal Bureau of Investigation. The test spans approximately 3 hours and covers logic-based reasoning, figural reasoning, situational judgment, and professional preferences/interests. Candidates are assessed on analytical ability, critical thinking, counterterrorism awareness, and intelligence tradecraft. Only approximately 30% of candidates pass Phase I. There is no published numeric passing score — results are ranked competitively.

Questions

180 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds