Unit 4 pgs 1-9 Security

Question 1

Define OPSEC

Answer 1

OPSEC is a process of identifying, analyzing and controlling critical information indicating friendly actions associated with military operations and other activities.

Question 2

What is the purpose of OPSEC?

Answer 2

Reduce the vulnerability of Air Force missions by eliminating or reducing successful adversary collection and exploitation of critical information.

Question 3

What is the five-step OPSEC process?

Answer 3

Step 1: Identify Critical Information
Step 2: Analyze Threats
Step 3: Analyze Vulnerabilities
Step 4: Assess Risk
Step 5: Apply Countermeasures

Question 4

Define step 1 of the OPSEC process

Answer 4

Identify critical information: The product of Step 1 is a CRITICAL INFORMATION LIST –>approved by commander –>identified at earliest stages of planning

Question 5

What is critical information?

Answer 5

specific fact about friendly intentions, capabilities, and activities vitally needed by adversaries to guarantee failure or unacceptable consequences for friendly mission accomplishment.

Question 6

Define step 2 of the OPSEC process

Answer 6

Analyze threats: identify threats (adversaries) with the capability and intent to undertake action detrimental to the success of program activities or operations.

Question 7

Define step 3 of the OPSEC process

Answer 7

Analyze vulnerabilities: vulnerabilities exists when the adversary is capable of collecting critical information or impact friendly objectives

Question 8

Define step 4 of the OPSEC process

Answer 8

Assess risk:

probability an adversary will gain knowledge of your critical information and the impact if the adversary is successful

Question 9

Define step 5 of the OPSEC process

Answer 9

Apply countermeasures: countermeasures are anything that effectively negates or mitigates an adversary’s ability to exploit vulnerabilities

Question 10

Define COMPUSEC

Answer 10

all measures to safeguard information systems (IS) and information against sabotage, tampering, denial of service, espionage, fraud, misuse

Question 11

What is the objective of COMPUSEC

Answer 11

employ countermeasures to protect confidentiality, integrity, availability, authentication and non-repudiation of US gov. info. processed by AF information systems (IS) (PHYSICAL PROTECTION)

Question 12

What is Public Key Infrastructure?

Answer 12

combination of hardware, software, policies, and procedures to authenticate, protect, digitally sign, and encrypt email/documents

Question 13

What is an example of PKI?

Answer 13

CAC, SIPR token

Question 14

Define COMSEC

Answer 14

Communications Security – measures to deny unauthorized persons information derived from IS of the US gov. related to national security. (SOFTWARE PROTECTION)

Question 15

What is the objective of Personnel Security?

Answer 15

Personnel Security Program is to ensure persons deemed eligible for national security positions remain reliable and trustworthy to access collateral

Question 16

Define JPAS

Answer 16

Joint Personnel Adjudication System – DoD personnel security clearance and access database

Question 17

Define SIF

Answer 17

collection of documents generated as a result of the discovery or development of unfavorable info which brings into question a person’s continuing eligibility for a security clearance or access to SCI.

Question 18

Define Physical Security

Answer 18

Part of security concerned with physical measures to safeguard personnel, prevent unauthorized access to equipment, etc.

Question 19

Define Access Control System

Answer 19

electromechanical, personal recognition

Question 20

Intrusion Detection System (IDS)

Answer 20

detect attempted or actual unauthorized human entry into SCIF

Question 21

INFOSEC

Answer 21

designed to protect calssified information and controlled unclassified information (CUI)

Question 22

Infraction

Answer 22

Failure to comply with requirements – does not result in loss or compromise of classified information

Question 23

Violation

Answer 23

Security incident due to knowing, willfull, and negligent security practices.

Question 24

Data Spillage

Answer 24

Classified info trasfered to lower classified systems through physical means (DVD, USB)

Question 25

Classified Message Incident (CMI)

Answer 25

when a higher classified level of data is transferred to a lower classification level