Collection methods frequently used by Foreign Intelligence Entities to collect information from DoD about critical technology produced at cleared defense contractor facilities include:

Collection methods frequently used by Foreign Intelligence Entities to collect information from DoD about critical technology produced at cleared defense contractor facilities include:

• A. Cyber intrusions
• B. Human intelligence gathering
• C. Social engineering
• D. All of the above

Answer: (D)

Foreign intelligence entities use a range of methods to get at critical technology, targeting both the digital and human sides of defense contractor environments. Cyber intrusions let adversaries break into networks, access repositories, and exfiltrate sensitive data directly. Human intelligence gathering involves attempting to recruit or manipulate individuals with access to disclose information or provide entry, bypassing technical safeguards. Social engineering leverages trust or authority to trick people into revealing passwords, credentials, or access, often slipping through defenses that purely technical controls might miss. Because each method exploits different weaknesses—systems, people, and processes—adversaries frequently employ multiple techniques rather than relying on a single path. That breadth is why all of the above methods are commonly used, highlighting the need for layered defenses, ongoing awareness training, and strong insider-threat and access-control measures to protect technology at cleared contractor facilities.

Foreign intelligence entities use a range of methods to get at critical technology, targeting both the digital and human sides of defense contractor environments. Cyber intrusions let adversaries break into networks, access repositories, and exfiltrate sensitive data directly. Human intelligence gathering involves attempting to recruit or manipulate individuals with access to disclose information or provide entry, bypassing technical safeguards. Social engineering leverages trust or authority to trick people into revealing passwords, credentials, or access, often slipping through defenses that purely technical controls might miss. Because each method exploits different weaknesses—systems, people, and processes—adversaries frequently employ multiple techniques rather than relying on a single path. That breadth is why all of the above methods are commonly used, highlighting the need for layered defenses, ongoing awareness training, and strong insider-threat and access-control measures to protect technology at cleared contractor facilities.