Security Asset Protection Professional Certification (SAPPC) Certification Practice Exam

What type of information collection does CI Elicitation primarily involve?

1. Surveillance techniques

2. Gathering data through social engineering

3. Using technical equipment

4. Analyzing data storage

The correct answer is: Gathering data through social engineering

CI Elicitation primarily involves gathering data through social engineering. This method relies on manipulating social interactions to obtain valuable information that may not be easily accessible through conventional means. Social engineering exploits human psychology and trust, allowing practitioners to extract information by engaging individuals in seemingly innocent conversations or direct inquiries. By focusing on the interactions and relationships between people, CI Elicitation leverages natural communication to elicit critical information without raising suspicion. This aligns well with the objectives of competitive intelligence, where the aim is to gain insights about competitors, market trends, and other strategic data that may influence business decisions. The other options do not accurately represent the primary aspects of CI Elicitation. Surveillance techniques, while useful for monitoring and assessing situations, do not involve engaging in conversations or interactions that can lead to information sharing. Using technical equipment suggests a reliance on technological tools rather than interpersonal skills, which is not the core of CI Elicitation. Analyzing data storage implies working with existing data rather than actively extracting new information through personal interactions. Therefore, the emphasis on social engineering in the correct answer captures the essence of CI Elicitation effectively.