RAP Assessment Drills

Found Media

100

Who is allowed to touch a found media device if one is found?

_{A. Security personnel}

_{B. ERAD Technician}

_{C. Security Supervisor}

_{D. Both B and C}

Both B and C

200

Would an Incident Report be needed for a Found Media Device?

_{A. Yes, it would.}

_{B. No, it would not.}

_{C. Depends on where the device is found.}

_{D. It is up to the on-duty supervisor.}

A. Yes, it would.

300

Which of the following is NOT considered a type of Found Media device?

_{A. A USB device.}

_{B. A work-issued computer/phone.}

_{C. A hard drive.}

_{D. Any device plugged into a computer (Ex. an external webcam)}

D. Any device plugged into a computer (Ex. an external webcam) 

400

If the Found Media is a work-issued device with an asset tag, it should be treated as a Lost and Found case instead

_{A. True}

_{B. False}

A. True

500

If the device is found in a Data Hall, what is the most accurate way to describe the location it was found in?

_{A. The building number and the Data Hall letter (Ex. RVA 2, DH B)}

_{B. Look for the row # on the stained glass doors on the end of the racks in a Data Hall (Ex. Row 6F)}

_{C. Give SOC the nearest Camera #.}

_{D. Leave the scene and escort a supervisor to the scene personally.}

B. Look for the row # on the stained glass doors on the end of the racks in a Data Hall (Ex. Row 6F)

Suspicious Activity

100

Examples of Suspicious activity include all of the follow except ____.

_{A. Suspicious phone call to SOC.}

_{B. Reported illegal activity on site.}

_{C. A package with strange noises coming from it}

_{D. A backpack left beside a desk in admin.}

D. A backpack left beside a desk in admin.

200

If a suspicious item/person is found, who should you notify? [select any that apply]

_{A. ASOC operators.}

_{B. FacOps/CBRE}

_{C. On-duty Supervisor}

_{D. Coworker in the same building as you}

A. ASOC operators.

C. On-duty Supervisor

300

What important info will SOC need to handle suspicious activity? [Select All That Apply]

_{A. What is the situation?}

_{B. Where was the activity/item located?}

_{C. When was the suspicious activity seen?}

_{D. Is the suspicious activity/item considered illegal in your state?}

A. What is the situation?

B. Where was the activity/item located?

C. When was the suspicious activity seen?

400

Which level of severity would require a Safety Center alert?

_{A. Low}

_{B. Medium}

_{C. High}

C. High

500

Mail with excessive postage would not be considered suspicious.

A. True

B. False

B. False

Lost/Unescorted Visitor

100

The primary location to escort a lost visitor where they will meet up with their host is the _____.

Front House Lobby

200

If you see an individual that appears to be an unescorted visitor, what is the first thing you should look/ask for?

A. The reason the individual is there.

B. Ask to see a badge.

C. The individual's company.

D. The individual's favorite sports team.

B. Ask to see a badge.

300

Who should you contact first if you believe you have located a lost/unescorted visitor?

A. FacOps

B. SOM Brian Walsh

C. GSAM Dave Johnson

D. SOC

D. SOC

400

What is the difference between a low and medium severity Lost Visitor incident?

A. What company they work for

B. What section of the building they were found in

C. What time of day they were located

D. If they had any tools or equipment with them

B. What section of the building they were found in

500

What type of badge will a site visitor be given? 

A. A temporary badge

B. A paper badge

C. A nametag

D. They should have a standard-issue FB badge

B. A paper badge (It should be located on a yellow landyard)

Media and Press

100

What color landyard would a member of the press receive?

A. Yellow

B. Black

C. Green

D. Red

D. Red

200

What email should you let the press know to contact if they have questions for Facebook?

A. [e-mail]

B. [e-mail]

C. [e-mail]

D. [e-mail]

D. [e-mail]

300

Should Security answer any questions from members of the press?

NO

400

If the press calls the Gate, is that still considered a Media/Press incident?

YES

500

What is NOT a piece of information SOC would need if press shows up on site?

A. What organization they are with (NBC, FOX, CNN, etc)

B. How many individuals are there?

C. Why they are there (Do they have an appointment, Is it regarding a company announcement, etc)

D. When they plan on releasing their article

D. When they plan on releasing their article

Door Alarm Response

100

How many tiers of doors are there?

A. 1

B. 2

C. 3

D. 4

C. 3

200

How much time does an officer have to arrive at a Tier 1 door alarm?

A. 5 Minutes

B. 10 Minutes

C. 15 Minutes

D. 20 Minutes

C. 15 Minutes

300

What type of door is considered a Tier 2?

A. High Value areas

B. Any interior door that is not considered high value (ie. SOC)

C. Common areas (such as the cafe)

D. Emergency Exits

B. Any interior door that is not considered high value (ie. SOC)

400

What is the importance of radioing in your arrival time and location when dispatched to an alarm? 

A. To ensure a prompt alarm investigation and door inspection

B. To allow the SOC to track key metrics and evaluate response times

C. To notify the SOC of your arrival before starting the alarm investigation

D. To request additional support or guidance from the SOC

E. All of the Above

E. All of the Above

500

What type of spaces are NOT considered critical in a data center, where unauthorized access could impact the availability or operations of facility? 

A. IDF

B. MDF

C. Electrical Rooms

D. BDF

E. SOC

E. SOC