IIS-Ch-7 Operations Security

What does OPSEC stand for?

• Operational Strategy

• Operational Security

• Operational Safety

• Operational Surveillance

Which of the following is NOT a step in the operations security process?

• Analyze threats

• Assess financial performance

• Implement security measures

• Identify critical information

What is the first step in the operations security process?

• Analyze vulnerabilities

• Assess risks

• Identify critical information

• Apply countermeasures

According to the text, what is a threat?

• A type of data

• A protective measure

• A potential cause of harm

• A weakness that can be exploited

What is the main focus of OPSEC?

• Monitoring social media activity

• Implementing strict access controls

• Protecting unclassified data that can be correlated

• Protecting classified data only

What is an example of critical information for a soft drink company?

• Marketing strategy

• Secret recipe

• Employee records

• Sales data

What does the analysis of vulnerabilities involve?

• Identifying potential threats

• Determining the value of information assets

• Assessing weaknesses that can be exploited

• Evaluating the effectiveness of countermeasures

What is the purpose of countermeasures in OPSEC?

• To analyze financial impacts

• To mitigate risks associated with threats and vulnerabilities

• To identify critical information

• To assess the effectiveness of security measures

Which of the following is a law of operations security according to Kurt Haas?

• Awareness of potential threats

• Public disclosure of security measures

• Strict access control policies

• Regular audits of information assets

What is a common example of a vulnerability?

• Employee training programs

• Weak security controls

• Strong encryption methods

• Regular software updates