NSA Operations Security (OPSEC) Flashcards
6 cards from real NSA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 NSA Operations Security (OPSEC) flashcards as text
What is 'social engineering' in the context of OPSEC?
Answer: Psychologically manipulating individuals into revealing sensitive information or taking security-compromising actions
Social engineering in OPSEC refers to manipulating people psychologically to disclose sensitive information or perform actions that compromise security, exploiting trust rather than technical vulnerabilities.
What is a key OPSEC measure for NSA personnel traveling to foreign countries?
Answer: Limiting discussion of work-related matters in public or foreign environments
Limiting discussion of work-related matters in foreign environments is a fundamental OPSEC measure because adversaries actively target government personnel during overseas travel.
Why does open source intelligence (OSINT) matter to OPSEC practitioners?
Answer: Adversaries can aggregate publicly available information to piece together critical operational details
Adversaries leverage OSINT — publicly available information — to gather and aggregate details about personnel, operations, and capabilities, making control of public information an OPSEC priority.
What is the 'need-to-know' principle in OPSEC?
Answer: The principle that access to sensitive information is limited to those who genuinely require it for official duties
The need-to-know principle limits access to sensitive information only to those who require it to perform official duties, reducing the risk of unauthorized or inadvertent disclosure.
Why is OPSEC considered more critical in the digital age?
Answer: Digital footprints from social media, email, and online activity create new and expanded vulnerabilities for adversary collection
OPSEC is more critical in the digital age because social media, digital communications, and online behavior leave extensive data trails that adversaries can analyze to collect critical information.
What is the purpose of OPSEC awareness training in government agencies?
Answer: To educate personnel on protecting critical information and recognizing indicators, threats, and vulnerabilities
OPSEC awareness training educates personnel to recognize and protect critical information, identify potential indicators and vulnerabilities, and understand adversary collection methods.