Operations Security (OPSEC) Flashcards
7 cards from real DOD practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Operations Security (OPSEC) flashcards as text
What is a 'vulnerability' in the context of the DOD OPSEC process?
Answer: A weakness that allows an adversary to collect critical information or prevent mission accomplishment
An OPSEC vulnerability is a condition that allows an adversary to obtain critical information, exploit friendly activities, or compromise mission success.
Which step of the OPSEC process involves weighing the potential impact of a loss of critical information against the cost of protective measures?
Answer: Assess Risk
Risk assessment compares the threat and vulnerability against the potential impact to determine the priority and cost-effectiveness of countermeasures.
A unit publishes its training schedule on a public Facebook page. In OPSEC terms, this is an example of a(n):
Answer: OPSEC indicator and potential vulnerability
Posting operational schedules publicly creates observable indicators that adversaries can exploit to predict and counter unit activities.
What does a Critical Information List (CIL) primarily help commanders do?
Answer: Focus OPSEC efforts by listing specific information that must be protected
A CIL focuses an organization's OPSEC efforts by specifically listing which information, if acquired by an adversary, would degrade mission success.
In OPSEC, the term 'friendly force information requirements' (FFIR) refers to:
Answer: Information the commander needs about friendly forces to plan and execute operations
FFIR is information a commander needs about friendly forces, and it helps identify what an adversary would also want to know about those same forces.
Which of the following best describes the relationship between OPSEC and classification?
Answer: OPSEC protects unclassified information that could be exploited when combined with other data
OPSEC protects sensitive unclassified information that, when aggregated or combined, could reveal critical information to adversaries.
What is 'aggregation' in the context of OPSEC?
Answer: Combining multiple pieces of unclassified information to deduce sensitive or critical information
Aggregation occurs when individually harmless pieces of information are combined to reveal critical details that would otherwise remain protected.