E01 DODIN & Cyberspace Ops — Study Guide

Acronyms first

Key facts

1. How many networks fall under DODIN jurisdiction (per the slides)?

   3 — NIPRNet, SIPRNet, JWICS

2. DODIN is described as a globally interconnected, ____ set of information capabilities.

   end-to-end

3. Which network exchanges sensitive but UNCLASSIFIED information and reaches the public Internet via gateways?

   NIPRNet

4. Which network carries classified info up to and including SECRET?

   SIPRNet

5. SIPRNet travels through NIPRNet (tunneling) but does NOT connect to the public internet.

   True

6. JWICS can carry data up to which level?

   Top Secret, including SCI

7. JWICS information is hosted and accessed within which kind of facility?

   SCIF (Sensitive Compartmented Information Facility)

8. Which DODIN network is 'air-gapped' — completely separate from the internet and only physically accessible?

   JWICS

9. JWICS is used by the DoD and which other community?

   The Intelligence Community (IC)

10. Cyberspace Operations (CO) are defined as the employment of cyberspace capabilities where the primary purpose is to…

    achieve objectives in or through cyberspace

11. Which command unifies the direction of cyberspace operations and integrates DoD's cyber expertise?

    USCYBERCOM

12. Which is NOT one of USCYBERCOM's three primary lines of operation?

    Conduct domestic law enforcement

13. Of the types of DoD cyberspace operations, the military component of CO is the only one guided by joint doctrine.

    True

14. Which joint function is 'the exercise of authority and direction by a properly designated individual over assigned resources'?

    Command and Control (C2)

15. Which joint function is 'the use of weapons systems to create a specific lethal or nonlethal effect on a target'?

    Fires

16. Cyberspace fires are often employed with little or no physical destruction and must comply with the law of war and ROE.

    True

17. Which joint function lets cyberspace enable force projection WITHOUT a physical presence in foreign territory?

    Movement and Maneuver

18. In cyberspace terms, the 'Protection' joint function is the protection of…

    the DODIN and other critical US cyberspace

19. Which three mission types comprehensively cover cyberspace forces' activities?

    DODIN Ops, DCO, OCO

20. Which mission secures, configures, operates, extends, maintains, and sustains DoD cyberspace?

    DODIN Operations

21. DODIN Operations create and preserve which three properties of the DODIN?

    Confidentiality, Availability, Integrity

22. Which mission defends the DODIN from ACTIVE threats in cyberspace?

    Defensive Cyberspace Operations (DCO)

23. Which mission projects power in and through FOREIGN cyberspace?

    Offensive Cyberspace Operations (OCO)

24. How many main threats to the DODIN are listed?

    4

25. Which DODIN threat is potentially the MOST dangerous due to access to resources, personnel, and time?

    Nation-State Threats

26. Which threat = formal/informal organizations NOT bound by national borders?

    Non-State Threats

27. Which threat is enabled by affordable, readily available techniques and malware?

    Individuals or Small Group Threats

28. Operator errors, industrial accidents and natural disasters fall under which DODIN threat?

    Accidents and Natural Hazards

29. Which CMF element conducts CO for internal protection of the DODIN or other blue cyberspace?

    Cyber Protection Force (CPF)

30. The Cyber Protection Force is made of which teams?

    Cyberspace Protection Teams (CPTs)

31. Which CMF element defeats significant cyberspace threats to the DODIN and, when ordered, the nation?

    Cyber National Mission Force (CNMF)

32. The CNMF is comprised of NMTs, associated NSTs, and…

    National-level CPTs (for non-DODIN blue cyberspace)

33. Which CMF element supports the missions and priorities of geographic and functional CCDRs?

    Cyber Combat Mission Force (CCMF)

34. The CCMF consists of which teams?

    Combat Mission Teams (CMTs) and Combat Support Teams (CSTs)

35. On the CO chart, which mission is 'Threat Agnostic'?

    DODIN Operations

36. What are the three interrelated layers of the Cyberspace Layer Model?

    Physical network, Logical network, Cyber-persona

37. The physical network layer provides storage, transport, and ____ of information.

    processing

38. Wired and wireless links, computing, storage and network devices belong to which cyberspace layer?

    Physical network layer

39. Every physical component of cyberspace is owned by a public or private entity that can control or restrict access to it.

    True

40. Which cyberspace layer is abstracted from the physical network based on the logic programming (code) that drives components?

    Logical network layer

41. The Joint Knowledge Online website — many servers, one URL — is an example of which layer?

    Logical network layer

42. E-mail addresses, IP addresses, user accounts and phone numbers belong to which cyberspace layer?

    Cyber-persona layer

43. One individual may create and maintain multiple cyber-personas (e.g., separate work and personal email).

    True

44. DODIN operations are network focused and…

    threat-agnostic

45. Cyber Protection Teams are described as threat-____ and use all available intel about specific threats.

    informed

46. DCO defeats specific threats that have…

    bypassed, breached, or are threatening to breach security measures

47. What are the two components of DCO?

    DCO-IDM and DCO-RA

48. DCO-IDM of the DODIN is authorized by standing order under which memorandum?

    NSPM-13

49. Most DCO missions are DCO-IDM, including proactive internal threat hunting.

    True

50. Which DCO form takes actions EXTERNAL to the defended network without permission of the system owner?

    DCO-RA (Response Actions)

51. DCO-RA requires a coordinated military order and careful consideration of scope, ROE, and…

    measurable objectives

52. Some DCO-RA missions may rise to the level of use of force, with physical damage to enemy systems.

    True

53. Which four targets can OCO's cascading physical effects affect?

    Weapon systems, C2 processes, logistics nodes, high-value targets

54. OCO and DCO-RA missions are described as…

    episodic

55. Standing orders cover DODIN operations and which DCO form?

    DCO-IDM

56. Which cyberspace action is taken within protected cyberspace to PREVENT unauthorized access, exploitation, or damage?

    Cyberspace Security

57. Cyberspace Security ensures CIA plus authorization, authentication, accounting, and…

    nonrepudiation

58. Which cyberspace action detects, characterizes, counters, and mitigates threats that have breached security?

    Cyberspace Defense

59. Who coordinates all defensive actions that impact more than one CCMD?

    JFHQ-DODIN

60. Which cyberspace action occurs in gray/red cyberspace, does NOT create attack effects, and is often clandestine?

    Cyberspace Exploitation

61. Which action creates noticeable denial effects and is a form of fires?

    Cyberspace Attack

62. Which D4M action denies a target to a level expressed as a PERCENTAGE of capacity?

    Degrade

63. Which D4M action COMPLETELY but TEMPORARILY denies a target, with start/stop times?

    Disrupt

64. Which D4M action completely and irreparably denies a target, maximizing time and amount of denial?

    Destroy

65. Which D4M action controls or changes information via deception, decoying, conditioning, spoofing, falsification?

    Manipulate

66. With Manipulate, the targeted network may appear normal until…

    secondary or tertiary effects

67. Internal countermeasures are cyberspace defense actions taken as part of which mission?

    DCO-IDM

68. EW soldiers use D4M to perform countermeasures, counter-countermeasures, intel gathering, and…

    Find and Fix

69. Which doctrine references are cited for Cyberspace Operations?

    JP 3-12 and FM 3-12