NSA NSA Operations Security (OPSEC) 2

Question 1

In OPSEC, how is a 'threat' defined?

Accepted Answer

An adversary with both the capability and intent to exploit critical information

Answer

An OPSEC threat is an adversary with both the capability to collect information and the intent to use it against your mission or organization.

Question 2

What is a Critical Information List (CIL)?

Accepted Answer

A prioritized list of information requiring protection from adversary exploitation

Answer

A Critical Information List is a prioritized list of specific information whose compromise could damage national security or degrade mission success.

Question 3

In the OPSEC process, 'risk' is defined as a combination of which two factors?

Accepted Answer

Probability of exploitation and the impact of the resulting information loss

Answer

OPSEC risk is calculated as the combination of the probability an adversary will successfully exploit a vulnerability and the resulting impact of that information loss.

Question 4

Which OPSEC step involves identifying potential adversaries and their collection capabilities?

Accepted Answer

Analysis of threats

Answer

The analysis of threats step involves identifying potential adversaries, assessing their capabilities, and determining what information they are likely targeting.

Question 5

What is the role of an OPSEC Program Manager within a government agency?

Accepted Answer

To oversee and coordinate all OPSEC activities to protect the organization's critical information

Answer

An OPSEC Program Manager is responsible for overseeing and coordinating all OPSEC activities to ensure the organization consistently protects its critical information.

NSA - National Security Agency Practice Test

NSA - National Security Agency Practice Test

NSA NSA Operations Security (OPSEC) 2