Cjcsi 6510.d (Ia And Cnd)

Front 1

What is IO and what does it accomplish?

Back 1

Information Operations; works to affecting human decision processing to acheive friendly objectives.

Front 2

What are the 5 core capabilities of IO?

Back 2

1.) Pshycological Operations (PSYOP)
2.) Military Deception
3.) Operations Security (OPSEC)
4.) Electronic Warfare (EW)
Electronic Defense (ED)
Electronic Protection (EP)
5.) Computer Network Operations (CNO)
Computer Network Attack (CNA)
Computer Network Defense (CND)

Front 3

What is Computer Network Exploitation?

Back 3

Enables operation and intelligence to gather data from target or adversary systems.

Front 4

IO allows the joint force to do what?

Back 4

to attain a relative advantage in the information environment

Front 5

What is GIG?

Back 5

Global Information Grid

Front 6

What does the GIG provide?

Back 6

It provides interconnect-ability, processes, and personnel for collecting for processing, storing, disseminating and managing information

Front 7

What is NETOPS?

Back 7

Network Operations; It is an organizational, procedural and technological construct for insuring informational superiority.

Front 8

What does IA do?

Back 8

IA integrates an organized, manned, equipped and trained workforce to guard and secure information and information systems by providing the 5 attributes of IA.

Front 9

What are the 5 attributes of IA?

Back 9

Confidentiality, Non-repudiation, Integrity, Availability and Authentication

Front 10

What does confidentiality do?

Back 10

Information is not disclosed to unauthorized entities.

Front 11

What does availability do?

Back 11

Provides reliable, timely access to information by authorized users.

Front 12

What does authentication do?

Back 12

Establishes the validity of a transmission

Front 13

What does Integrity do?

Back 13

ensure logical correctness and reliability of an operating system, or protection against unauthorized modification or destruction of information

Front 14

What does non-repudiation do?

Back 14

Assurance the sender of the data is provided with proof of delivery and the recipient is provided with proof of the sender's identity, so neither can later deny having processed the data.

Front 15

IA processes function to:

Back 15

Protect and defend against unauthorized activity

Front 16

What is Defense-in-Depth?

Back 16

DOD approach for establishing an adequate IA posture in a shared risk environment that allows for shared mitigation through the layering of IA solutions

Front 17

What is Computer Network Defense (CND)?

Back 17

Actions taken to protect, monitor, analyze, detect and respond to unauthorized activity within the DOD information systems and computer networks.

Front 18

What is the main method of employment for IA?

Back 18

Defense-in-Depth

Front 19

Who coordinates and directs DOD-wide CND?

Back 19

CDRUSSTRATCOM

Front 20

What is the DOD CND mission?

Back 20

To coordinate and direct the defense operations of DOD computer networks from unauthorized activity.

Front 21

What are the five activities of CND?

Back 21

operations, law enforcement, counterintelligence and Intelligence community, communications

Front 22

What recognizes unauthorized network activity?

Back 22

CND

Front 23

What is the publication that all DOD information systems and networks will be certified and accredited through (currently known as Dod Information Technology Security Certification and Accreditation Process, or DITSCAP).

Back 23

DOD Instruction 5200.40

Front 24

What is the DOD CND Mission?

Back 24

Coordinate and direct defense operations of DOD Computer Networks from unauthorized activity employing communications, law enforcement, Intelligence, counterintelligence and operations.

Front 25

What identifies unauthorized network activity including CNA and CNE launched by adversaries?

Back 25

CND

Front 26

Name 5 CND service providers.

Back 26

NOC, NOSC, CSIRT, CIRT AND CERT

Front 27

CND System Administrators are responsible for what 3 things?

Back 27

Monitor or report suspicious activity, keep track of audit log, safeguard all captured network traffic, and direct and execute protective measures within DOD computer networks

Front 28

DOD Information systems for IA purposes consist of what 4 categories?

Back 28

1.) AIS applications
2.) Enclaves (which include networks)
3.) Outsource information technology (IT)-based processes
4.) Platform IT connections

Front 29

What DOD instruction and DOD directive, respectively, provides policy and details on IA?

Back 29

DOD Instruction 8500.1
DOD Directive 8500.2

Front 30

C&A for information systems that process TS information will comply with the requirements of who?

Back 30

Director of Central Intelligence

Front 31

What is a MAC?

Back 31

Mission Assurance Category

Front 32

When is C&A not required?

Back 32

When a platform develops software or is a test lab that does not process real-world operations information, and are isolated from DOD operational systems.

Front 33

Only encryption devices listed in _____ are authorized for classified communications.

Back 33

NSA

Front 34

Access:

Back 34

Opportunity to make use of an information system (IS) resource.

Front 35

Access Control:

Back 35

Limiting access to information system resources only to authorized users, programs, processes or other systems.

Front 36

Accountability

Back 36

Process of tracing information system activities to a responsible source.

Front 37

Accreditation

Back 37

Formal declaration by a DAA that an information system is approved to operate in a particular security mode at an acceptable level of risk, based on implementation of an approved set of technical, managerial and procedural safeguards.

Front 38

Application

Back 38

Software program that performs a specific function directly for a user and can be executed without access to system control, monitoring or administrative privileges.

Front 39

Architecture

Back 39

Configuration of any equipment or interconnected system that is used in the automatic acquisition, storage, manipulation, management, movement, control, display, switching, interchange, transmission or reception of data or information; includes computers, ancillary equipment and services.

Front 40

Assurance

Back 40

Measure of confidence that the security features, practices, procedures and architecture of an information system accurately mediate and enforce the security policy.

Front 41

AS&W

Back 41

Attack Sensing and Warning. That detection, correlation, identification and characterization of intentional unauthorized activity, including computer intrusion or attack, across a large specrum coupled with the notification to command and decision makers so that an appropriate response can be developed. Attack sensing and warning also includes attack/intrusion related intelligence collection tasking and dissemination; limited immediate response recommendations; and limited potential impact assessments.

Front 42

Audit

Back 42

Independent review and examination of records and activities to ***** the adequacy of system controls, and to recommend necessary changes.

Front 43

Audit Trail

Back 43

Chronological record of system activities to enable the reconstruction and examination of the sequence of events and/or changes in an event.

Front 44

Backup

Back 44

Copy of file and programs made to facilitate recovery, if necessary.

Front 45

Category

Back 45

Restrictive label applied to classified or unclassified information to limit access.

Front 46

CTTA

Back 46

Certified TEMPEST Technical Authority; An experienced, technically qualified US Gov employee who has met established cert. requirements in accordance with CNSS approved criteria and has been appointed by a US Gov Department/Agency

Front 47

Classified Information

Back 47

Information that has been determined pursuant to Executive Order 12958 or any predecessor Order, or the by the Atomic Energy Act 1954.

Front 48

Communications Security

Back 48

Measures/controls taken to deny unauthorized individuals information information derived from telecommunications.

Front 49

During COMSEC monitoring, whose transmissions do you listen to?

Back 49

Your own

Front 50

Community Risk

Back 50

Probability that a particular vulnerability will be exploited within an interacting population and adversely impact some members of that population.

Front 51

CERT

Back 51

Computer Emergency Response Team: Personnel with technical expertise and organic equipment that may deploy to assist remote sites in the restoration of computer services.

Front 52

Computer Network Attack (CNA)

Back 52

Operations to disrupt, deny, degrade or destroy information resident in computers and computer networks, or computers themselves.

Front 53

Computer Network Exploitation (CNE)

Back 53

Intelligence collection operations that obtain information resident in files of threat automated information systems (AIS) and gain information about potential vulnerabilities, or access critical information resident within foreign AIS that could be used to the benefit of friendly operations.

Front 54

Computer Network Defense

Back 54

Actions taken to protect, monitor, analyze, detect and respond to unauthorized activity within DOD information systems and computer networks.

Front 55

What are the 3 tiers of Computer Network Defense (CND) Operational Hierarchy?

Back 55

Tier One provides DOD-wide CND operational direction to all CC/S/As.
Tier Two provides DOD Component-wide (i.e., CC/S/As) operational direction or support and responds to direction from Tier One.
Tier Three provides local operational direction or support and responds to direction from a designated Tier Two entity.

Front 56

What are some Tier One entities?

Back 56

US Strategic Command, CND Service Certification Authorities, Defense Criminal Investigative Organization Law Enforcement and Counterintelligence Center, and the National Security Incident Response Center.

Front 57

What is a Tier Two entities?

Back 57

CND Service providers that are designated by Heads of Components to coordinate Component-wide CND.

Front 58

What are Tier Three entities?

Back 58

All entities responding to direction from DOD Component Tier Two CND Service (local control centers that manage and control information systems, networks and services, either deployed or fixed at DOD installations).

Front 59

What are CND RA's?

Back 59

Deliberate, authorized defensive measures or activities that protect and defend DOD computer systems and networks under attack.

Front 60

Configuration Management

Back 60

Management of security features and assurances through control of changes made to hardware, software, firmware, documentation, test, test fixtures and test documentation throughout the life cycle of the information system.

Front 61

Connection Approval

Back 61

Formal authorization to interconnect information systems

Front 62

Contingency Plan

Back 62

Plan maintained for emergency response, backup operations, and post-disaster recovery for an information system

Front 63

Counterintelligence

Back 63

Information gathered and activities conducted to protect against espionage or other intelligence activities from foreign governments

Front 64

What are the major characteristics of Controlled Access Protection?

Back 64

Individual accountability, audit, access control and object reuse.

Front 65

Data

Back 65

Representation of facts, concepts or instructions in a formalized manner suitable for communication, interpretation or processing by humans automatic means.

Front 66

Data Integrity

Back 66

Condition existing when data is unchanged from its source and has not been accidentally or maliciously modified, altered or destroyed.

Front 67

Defense Information Systems Network (DISN)

Back 67

The DOD consolidated worldwide enterprise level telecommunications infrastructure that provides the end-to-end information transfer network for supporting military operations.

Front 68

Evaluated Products List (EPL)

Back 68

Equipment, hardware, software and/or firmware evaluated by the NCSC in accordance with DOD TCSEC and found to be technically compliant at a particular level of trust.

Front 69

Event

Back 69

Occurrence, not yet assessed, that may effect the performance of an IS

Front 70

Firewall

Back 70

System designed to defend against unauthorized access to or from a private network.

Front 71

Firmware

Back 71

Program recorded in permanent or sem-permanent computer memory.

Front 72

The Directory, Defense Information Systems Agency, serves also as what?

Back 72

DOD Computer Executive Agent for DOD Computer Forensics

Front 73

Who develops an IA education and awareness program?

Back 73

DISA

Front 74

Common infrastructures such as CAC, PKI, biometrics, and KMI (Key Management Infrastructure) can be found within ____

Back 74

IA

Front 75

DOD Information Systems for IA purposed consist of what 4 categories?

Back 75

AIS, enclaves, outsourced IT-processes, and Platform interconnections

Front 76

What is a guard?

Back 76

Information assessed occurrence having potentially or actually adverse affects on information systems

Front 77

Identification

Back 77

Process an IS uses to recognize an entity.

Front 78

What is a defense posture and response system for DOD information systems and networks?

Back 78

INFOCON

Front 79

What is the capability of an IS network to collect, process and disseminate an uninterrupted flow of information while exploiting an adversary's ability to do the same?

Back 79

Information Superiority

Front 80

What is intrusion?

Back 80

Unauthorized act of bypassing the security mechanism of a system.

Front 81

What is level-of-concern?

Back 81

Rating assigned to an information system that indicates the extent to which protective measures, techniques and procedures must be applied.

Front 82

What is open-source software?

Back 82

Products that are copyrighted and distributed under a license that provides everyone with the ability to use, modify and redistribute the source code of the software.