Civil Service Fast Stream Assessment Scheme-Specific Technical Assessment Flashcards

24 sample cards from the Scheme-Specific Technical Assessment deck

Sampled from the end of the deck, so these are different cards from the ones shown on the syllabus page.

1. For the Cyber Fast Stream, what are the three pillars of the CIA triad in information security?

   Confidentiality (data is accessible only to authorised parties), Integrity (data is accurate and unaltered), and Availability (systems and data are accessible when needed). These are the core objectives of information security.

2. Distinguish symmetric from asymmetric encryption.

   Symmetric encryption uses a single shared secret key for both encryption and decryption (fast, e.g. AES). Asymmetric encryption uses a public/private key pair — encrypt with one, decrypt with the other (e.g. RSA) — enabling secure key exchange and digital signatures.

3. What is a 'phishing' attack and what category of threat does it represent?

   Phishing is a social engineering attack in which an attacker impersonates a trusted entity (usually via email) to trick victims into revealing credentials, transferring money, or installing malware. It exploits human rather than technical vulnerabilities.

4. What does the principle of 'least privilege' mean in cyber security?

   The principle of least privilege states that users, processes and systems should be granted only the minimum access rights necessary to perform their function, reducing the attack surface and limiting damage from compromise.

5. In user-centred design, what is the core idea and name a common UCD activity.

   User-centred design places the needs, goals and context of real users at the centre of every design decision, validated through iterative research and testing. A common activity is usability testing (observing users completing tasks with a prototype).

6. What are the four values prioritised in the Agile Manifesto?

   (1) Individuals and interactions over processes and tools; (2) Working software over comprehensive documentation; (3) Customer collaboration over contract negotiation; (4) Responding to change over following a plan.

7. In Scrum, what are the three core roles?

   The Product Owner (owns and prioritises the backlog, maximising value), the Scrum Master (facilitates the process and removes impediments), and the Development Team (self-organising group that builds the increment).

8. What are the four phases of the GOV.UK Service Manual delivery lifecycle?

   Discovery, Alpha, Beta, and Live. Discovery researches user needs; Alpha builds and tests prototypes of solutions; Beta builds the working service and tests it with real users; Live runs and iterates the operating service.

9. In commercial/procurement, what does the procurement cycle typically involve at a high level?

   It involves defining the need/specification, market analysis and sourcing strategy, tendering/competition, supplier evaluation and award, contract management and performance monitoring, and finally contract closure or renewal.

10. What is the difference between a fixed-price contract and a cost-reimbursement contract?

    A fixed-price (lump-sum) contract sets an agreed price regardless of the supplier's actual costs, transferring cost risk to the supplier. A cost-reimbursement contract pays the supplier's allowable costs plus a fee, placing more cost risk on the buyer; better suited to uncertain scope.

11. In procurement, what does 'most economically advantageous tender' (MEAT) mean?

    MEAT is an award criterion under which a contract is awarded on the best overall value — balancing price against quality, social value, technical merit, and whole-life cost — rather than on lowest price alone.

12. What is the difference between a framework agreement and a single contract in public procurement?

    A framework agreement establishes terms (price, quality, conditions) with one or more suppliers over a set period, from which specific 'call-off' contracts are placed as needs arise. A single contract is a one-off agreement for a defined requirement.

13. For the Finance Fast Stream, what does CCAB stand for and why does it matter?

    CCAB is the Consultative Committee of Accountancy Bodies. The Finance route trains people towards a CCAB-recognised professional accountancy qualification (e.g. CIPFA, ICAEW, ACCA, CIMA-equivalent), the professional standard for government finance roles.

14. State the fundamental accounting equation.

    $$\text{Assets} = \text{Liabilities} + \text{Equity}$$ It expresses that everything a body owns is financed either by what it owes (liabilities) or by owners'/taxpayers' capital (equity).

15. In public finance, what is the difference between capital expenditure (CapEx) and resource/revenue expenditure (RevEx)?

    Capital expenditure (CapEx/DEL capital) is spending on long-lived assets such as buildings and infrastructure. Resource/revenue expenditure is recurring day-to-day running costs such as salaries and supplies. HM Treasury budgets distinguish capital from resource DEL/AME.

16. What is the difference between accruals accounting and cash accounting?

    Accruals accounting records income and expenses when they are earned or incurred, regardless of when cash moves. Cash accounting records transactions only when cash is actually received or paid. UK government uses accruals-based accounting under IFRS.

17. In Project Delivery, name a key difference between the waterfall and agile lifecycle methodologies.

    Waterfall is sequential and plan-driven — each phase (requirements, design, build, test, deploy) completes before the next begins, suiting stable requirements. Agile is iterative and incremental, delivering working products in short cycles and embracing changing requirements.

18. What is a 'business case' in project delivery, and what model does UK government use?

    A business case justifies investment by setting out the rationale, options and value for money. UK government uses HM Treasury's Five Case Model: the Strategic, Economic, Commercial, Financial and Management cases.

19. What does a RAID log capture in project management?

    RAID stands for Risks (potential future problems), Assumptions (things taken as true), Issues (current problems needing action), and Dependencies (links to other tasks/projects). It is a core project control tool.

20. For the HR Fast Stream, what is the CIPD Profession Map / People Profession capability framework?

    The CIPD Profession Map is the international benchmark for the people profession, defining the core knowledge ('purpose and impact'), core behaviours, and specialist knowledge that HR/L&D professionals need to create value and drive change in organisations.

21. What does the Foreign, Commonwealth and Development Office (FCDO) do, and from which 2020 merger was it formed?

    The FCDO leads the UK's diplomacy, international development and consular work, promoting UK interests and values overseas. It was formed in September 2020 from the merger of the Foreign and Commonwealth Office (FCO) and the Department for International Development (DFID).

22. In international affairs, what is 'soft power' and how does the UK exercise it?

    Soft power is the ability to influence others through attraction and persuasion rather than coercion or payment. The UK exercises it via the BBC World Service, the British Council, universities, culture, the English language, and development assistance.

23. What level of security clearance is typically required for FCDO roles handling the most sensitive material, and what is its abbreviation?

    Developed Vetting (DV) is the highest standard, required for frequent, uncontrolled access to TOP SECRET material. Lower levels include CTC (Counter-Terrorist Check) and SC (Security Check); FCDO overseas roles often require DV due to sensitive postings.

24. What are the typical expectations on language aptitude and overseas postings for the FCDO Fast Stream?

    Diplomatic Fast Streamers are expected to be geographically and functionally mobile, accepting overseas postings, and to learn foreign languages — including 'hard' languages (e.g. Arabic, Mandarin, Russian) — assessed for aptitude and trained at the FCDO's diplomatic academy/language centre before posting.

What this deck covers

Scheme-Specific Technical Assessment flashcards FAQ