Operations Security (OPSEC) Flashcards
7 cards from real DOD practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Operations Security (OPSEC) flashcards as text
Which of the following is the MOST important reason social media poses an OPSEC risk for DOD personnel?
Answer: Personnel can unintentionally share location, schedules, and unit information that adversaries can exploit
Social media enables adversaries to collect and aggregate personal and operational information from posts, photos, and check-ins without detection.
An OPSEC program review should be conducted:
Answer: Periodically and whenever significant changes occur to operations or threats
OPSEC reviews must be conducted regularly and whenever operations, personnel, or threat environments change to ensure protections remain effective.
Who is responsible for implementing OPSEC within a DOD organization?
Answer: Every member of the organization, from commanders to individual personnel
OPSEC is a command responsibility that applies to every member of the organization, as each individual can either protect or inadvertently expose critical information.
What is the significance of 'pattern analysis' in adversary intelligence collection against DOD units?
Answer: Adversaries study repeated unit behaviors to predict future actions and identify opportunities
Adversaries conduct pattern analysis to identify predictable behaviors, schedules, and routines that reveal critical information and exploitable vulnerabilities.
A contractor working on a DOD installation is subject to OPSEC requirements:
Answer: To the same extent as DOD civilian and military personnel when performing work for DOD
Contractors performing work for DOD are subject to applicable OPSEC requirements and must protect critical information just as government employees do.
Which of the following actions best supports OPSEC when communicating operational information?
Answer: Using the minimum information necessary and the most secure channel appropriate for the information
OPSEC requires using need-to-know principles and the most secure appropriate channel to minimize exposure of critical information.
In the OPSEC five-step process, which step comes immediately after analyzing vulnerabilities?
Answer: Assess Risk
After analyzing vulnerabilities, the OPSEC process requires assessing the risk by evaluating the likelihood and impact of adversary exploitation before selecting countermeasures.