Antiterrorism Level 1
Antiterrorism awareness and force protection fundamentals (JS-US007)
Studying for this with your unit? Send it to them.
01True or False: When possible, it is best to always travel with a cell phone.
True
02True or False: In the event of a skyjacking, you should immediately attempt to subdue the skyjackers.
False
03True or False: Keeping a well-maintained vehicle is considered a 'best practice' from both a security and safety perspective.
True
04True or False: From a security perspective, the best rooms are directly next to emergency exits.
False
05True or False: IEDs may come in many forms and may be camouflaged to blend in to the surrounding environment.
True
06True or False: Surveillance can be performed through either stationary or mobile means.
True
07True or False: Terrorists usually avoid tourist locations since they are not DOD-related.
False
08True or False: Room invasions are a significant security issue for hotels located in CONUS.
True
09True or False: In an active shooter incident involving firearms, you should immediately lie on the ground.
False
VERIFIED AGAINST THE SOURCE
“Run to Safety - Seek safety . Getting away from the attacker is the top priority. Leave your belongings behind and get away. Call 9-1-1 when you are safe and describe the attacker, location and weapons. Keep hands visible and empty.”
— Ready.gov (DHS/FEMA), Active Shooter / Mass Gathering Incident ↗10True or False: From an antiterrorism perspective, espionage and security negligence are considered insider threats.
True
11True or False: State Department Travel Warnings should be consulted prior to taking trips across the US-Mexican border.
True
12True or False: Active resistance should be the immediate response to an active shooter incident.
False
VERIFIED AGAINST THE SOURCE
“Defend, Disrupt, Fight. Fight only as a last resort. When you can't run or cover, attempts to disrupt the attack or disable the attacker. Be aggressive and commit to your actions.”
— Ready.gov (DHS/FEMA), Active Shooter / Mass Gathering Incident ↗13True or False: Internet acquaintances can pose a security threat and should be carefully monitored.
True
14True or False: Early symptoms of a biological attack may appear the same as common illnesses.
True
15True or False: Reasons for acquiring hostages include publicity, use as a bargaining chip while executing other crimes, the forcing of political concessions, and ransom.
True
16True or False: Alerts from the National Terrorism Advisory System apply only to the United States and its possessions.
True
17True or False: Home security can be improved with self-help measures like changing locks, securing windows, and improving outdoor lighting.
True
18From the following choices, select the factors you should consider to understand the threat in your environment: How sophisticated are terrorist groups? How active are terrorist groups? Are terrorist groups violent?
All of the above are correct. You should consider all of these factors to understand the threat in your environment.
19Select the factor that will NOT help you avoid becoming the victim of a terrorist attack: Predictability, Location, Opportunity, or Association?
Predictability. Being predictable in your daily routines actually makes you MORE vulnerable to a terrorist attack, not less.
20Force Protection Condition DELTA means that your base is at which one of the following levels?
The most increased level of protection. FPCON DELTA applies in the immediate area where a terrorist attack has occurred or when intelligence is received indicating terrorist action against a specific location is imminent.
21Which of the following is NOT an Antiterrorism Level I theme? (Be Vigilant, Collections, Counter-surveillance, Report and Respond, Anticipate)
Counter-surveillance and Collections are NOT Antiterrorism Level I themes. The four AT Level I themes are: Anticipate, Be Vigilant, Don't Be a Target, and Report and Respond.
22Which of the following have NOT been targeted or plotted against by terrorists or violent individuals?
None of the above. Terrorists and violent individuals have targeted or plotted against all types of locations and personnel.
23What is NOT a terrorist method of surveillance?
Breaking and entering to steal valuables. This is a criminal act, not a method of surveillance used by terrorists.
24Which one of these is a possible indicator of a suspicious letter or package?
Misspellings of common words. Other indicators include excessive postage, no return address, rigid or bulky envelopes, oily stains, protruding wires, and strange odors.
25Which of the following is NOT a useful vehicle feature from a security perspective?
Wi-Fi capable. Useful security features include power locks, power windows, an inside hood release, and a full-size spare tire.
26What should you NOT do during a hostage rescue attempt?
Try to assist the hostage rescue team. During a rescue, drop to the floor, keep your hands visible and empty, do not make sudden movements, and follow all instructions from rescuers.
27Which of the following is NOT a physical security feature you should check when inspecting your hotel room?
Lockbox or safe. Physical security features to check include working door locks, deadbolts, peephole, window locks, and connecting door locks.
28Which one of the following is NOT an early indicator of a potential insider threat?
A reasonable disagreement with a U.S. Government policy. Early indicators of insider threats include unexplained affluence, unusual work hours, unauthorized removal of classified materials, and attempts to gain access to information outside one's need to know.
29Which of the following is NOT a recommended response to an active shooter incident?
Provide instructions to arriving emergency response personnel. The recommended response is Run, Hide, Fight. When law enforcement arrives, keep hands visible, follow their instructions, and do not attempt to direct their actions.
VERIFIED AGAINST THE SOURCE
“Run to Safety - Seek safety . Getting away from the attacker is the top priority. Leave your belongings behind and get away. Call 9-1-1 when you are safe and describe the attacker, location and weapons. Keep hands visible and empty.”
— Ready.gov (DHS/FEMA), Active Shooter / Mass Gathering Incident ↗30What are the four Antiterrorism Level I themes?
Anticipate, Be Vigilant, Don't Be a Target, and Report and Respond.
31What does FPCON stand for?
Force Protection Condition. FPCONs describe progressive levels of protective measures to be implemented by military installations when a terrorist threat exists.
32What are the five FPCON levels in order from lowest to highest?
FPCON Normal, FPCON Alpha, FPCON Bravo, FPCON Charlie, and FPCON Delta.
33What does FPCON Normal indicate?
A general global threat of possible terrorist activity exists and warrants a routine security posture.
34What does FPCON Alpha indicate?
An increased general threat of possible terrorist activity against personnel or facilities, the nature and extent of which are unpredictable.
35What does FPCON Bravo indicate?
An increased or more predictable threat of terrorist activity exists. Measures must be sustainable for weeks without causing undue hardship.
36What does FPCON Charlie indicate?
An incident occurs or intelligence is received indicating some form of terrorist action or targeting against personnel or facilities is likely.
37If you identify a possible surveillance attempt, what should you do?
Do NOT try to handle the situation yourself. Note details about the person and activity, leave the area, and report it immediately to security or law enforcement.
38What are the three recommended responses to an active shooter event in order?
Run, Hide, Fight. First try to evacuate (Run). If you cannot evacuate safely, find a secure hiding place (Hide). As an absolute last resort, take action to incapacitate the shooter (Fight).
VERIFIED AGAINST THE SOURCE
“Defend, Disrupt, Fight. Fight only as a last resort. When you can't run or cover, attempts to disrupt the attack or disable the attacker. Be aggressive and commit to your actions.”
— Ready.gov (DHS/FEMA), Active Shooter / Mass Gathering Incident ↗39What does the 'Run' phase of active shooter response involve?
Have an escape route in mind, evacuate regardless of whether others follow, leave belongings behind, help others escape if possible, prevent others from entering the area, keep hands visible, and call 911 when safe.
VERIFIED AGAINST THE SOURCE
“Run to Safety - Seek safety . Getting away from the attacker is the top priority. Leave your belongings behind and get away. Call 9-1-1 when you are safe and describe the attacker, location and weapons. Keep hands visible and empty.”
— Ready.gov (DHS/FEMA), Active Shooter / Mass Gathering Incident ↗40What does the 'Hide' phase of active shooter response involve?
Find a room that can be locked, blockade the door with heavy furniture, silence your cell phone (not just vibrate), turn off lights, hide behind large items, and remain quiet.
VERIFIED AGAINST THE SOURCE
“Cover and hide if you can't evacuate. Find a place to hide out of view of the attacker and put a solid barrier between yourself and the threat if possible. Lock and block the doors, close blinds and turn off lights. Keep silent.”
— Ready.gov (DHS/FEMA), Active Shooter / Mass Gathering Incident ↗41What does the 'Fight' phase of active shooter response involve?
As an absolute last resort, act with physical aggression, throw items at the shooter, use improvised weapons, commit to your actions, and attempt to incapacitate the shooter.
VERIFIED AGAINST THE SOURCE
“Defend, Disrupt, Fight. Fight only as a last resort. When you can't run or cover, attempts to disrupt the attack or disable the attacker. Be aggressive and commit to your actions.”
— Ready.gov (DHS/FEMA), Active Shooter / Mass Gathering Incident ↗42What is the ticketing area at an airport compared to the area beyond the security checkpoint?
The ticketing area is NOT more secure than the area beyond the security checkpoint. The area beyond the checkpoint has additional screening measures.
43What is the best way to protect yourself from terrorist surveillance?
Vary your daily routines. Change your routes, departure times, modes of transportation, and daily patterns to avoid being predictable.
44What are indicators of a possible Vehicle-Borne IED (VBIED)?
A vehicle that is heavily loaded with sagging suspension, wires or tanks visible, strong chemical odor, parked in an unusual location near buildings, or recently abandoned near a potential target.
45What should you do if you discover a suspicious package or possible IED?
Do NOT touch, move, or open the item. Clear the area immediately, do not use cell phones or radios near the item (RF energy could trigger it), and call security or law enforcement.
46What are the phases of a terrorist attack planning cycle?
Target selection, planning and surveillance, pre-attack surveillance and rehearsal, final preparations, attack execution, and escape/exploitation.
47What does iSALUTE stand for in suspicious activity reporting?
Immediately report, Size/type of activity, Activity observed, Location, Uniform or clothing description, Time observed, Equipment or vehicles involved.
48True or False: Security is a team effort.
True. Every person has a role in maintaining security awareness and reporting suspicious activity.
49What should you do if you observe someone photographing a military installation's security features?
Do not confront the person. Note their description, behavior, vehicle information, and direction of travel. Report the activity immediately to installation security or law enforcement.
50What travel precautions should you take when traveling OCONUS (outside the continental United States)?
Register with the embassy, keep a low profile, avoid military clothing or items identifying you as American military, carry minimal identification, know local emergency numbers, avoid predictable patterns, and follow theater-specific force protection guidance.
51What is the most common method of terrorist attack worldwide?
Bombings and IED attacks. They are relatively easy to construct, can be deployed remotely, and create significant fear and casualties.
52What social media practices help reduce your terrorism risk?
Limit personal information shared online, disable geotagging on photos, do not post travel plans or military movements, use strong privacy settings, do not reveal military affiliation in public profiles, and be wary of unknown friend requests.
53During a hostage situation, what should you do in the initial moments of capture?
Remain calm, be observant, do not resist or make sudden movements, follow instructions, and do not challenge the captors. The first few moments are the most dangerous.
VERIFIED AGAINST THE SOURCE
“When questioned, should I become a prisoner of war, I am required to give name, rank, service number and date of birth. I will evade answering further questions to the utmost of my ability. I will make no oral or written statements disloyal to my country and its allies or harmful to their cause.”
— Executive Order 10631, Code of Conduct for Members of the Armed Forces of the United States (as amended), Article V ↗54What information should a POW provide if captured?
Name, rank, date of birth, and service number only (the 'Big Four'). You are not required to provide any other information.
VERIFIED AGAINST THE SOURCE
“When questioned, should I become a prisoner of war, I am required to give name, rank, service number and date of birth. I will evade answering further questions to the utmost of my ability. I will make no oral or written statements disloyal to my country and its allies or harmful to their cause.”
— Executive Order 10631, Code of Conduct for Members of the Armed Forces of the United States (as amended), Article V ↗55What are indicators of a possible chemical attack?
Unusual dead or dying animals, unexplained casualties with similar symptoms, unusual liquids or sprays, unexplained odors (fruity, flowery, sharp, garlic-like), and low-lying clouds or fog unrelated to weather.
56What is the difference between antiterrorism (AT) and counterterrorism (CT)?
Antiterrorism (AT) consists of defensive measures to reduce vulnerability to terrorist acts and is everyone's responsibility. Counterterrorism (CT) consists of offensive measures to prevent, deter, and respond to terrorism, conducted by specially designated units.
57What are Random Antiterrorism Measures (RAMs)?
Security measures that introduce unpredictability into a security posture to disrupt terrorist planning and surveillance. They vary in timing, location, and type to prevent predictable patterns.
58What should you do if you receive a bomb threat by telephone?
Keep the caller talking as long as possible, note the exact wording, ask specific questions (when, where, what kind), listen for background noises, note voice characteristics, and call security immediately after the call ends.
59What DoDI establishes the DoD Antiterrorism Program?
DoDI 2000.12, DoD Antiterrorism Program.
VERIFIED AGAINST THE SOURCE
“this issuance establishes policy, assigns responsibilities, and prescribes procedures for the DoD Antiterrorism (AT) Program support to force protection (FP)”
— DoDI 2000.12, DoD Antiterrorism Program Support to Force Protection (11 June 2025), Purpose ↗60How often must all DoD personnel complete Antiterrorism Level 1 training?
Annually. All DoD personnel (military, civilian, contractors, and dependents) must complete AT Level 1 awareness training every year.
61What does NTAS stand for?
National Terrorism Advisory System. It replaced the color-coded Homeland Security Advisory System and communicates information about terrorist threats through alerts and bulletins.
62True or false: The initial moments of a hostage taking incident can be extremely dangerous
True
63True or False: The ticketing area is more secure than the area beyond the security check point.
False
64True or False: Everyone on an installation has shared responsibility for security.
True
65What is the most increased Force Protection Level for a base/installation?
Delta
66Which of the following are NOT an Antiterrorism Level I theme? Select all that apply.
Counter-surveillance; Collections
67Persons who have been given access to an installation can be counted on to be of no threat. True or False?
False
68Ed is a new employee with the DOD. He notices some odd behaviors from his coworker, Jane. Which of these behaviors is a potential Terrorism indicator?
Advocating violence to achieve goals; Attempting to collect intelligence regarding installation security; Familial ties to known or suspected terrorist organization
Know questions we're missing?
Submit your own Q&A pairs. AI reviews them for quality, then they go live for everyone.
Study these as flashcards
Load all 68 questions into a free study set — flashcards, a practice test, and spaced repetition. No account.
Works on any PDF, doc or web page too — not just military training.
Most-searched questions from this course
Individual answer pages with the keyed answer verified across every CBT version we index.
Veteran? vetaid.ai — free VA benefits help.