BASIC COSMEC POLICIES AND PROCEDURES EXAM ACTUAL
EXAM
Which best describes the purpose of COMSEC? - ANSWER: Denies adversaries access
to information
Which of the following measures is taken to ensure the authenticity of information?
- ANSWER: COMSEC
What COMSEC component provides protection from interception and exploitation? -
ANSWER: Transmission Security
Tier 0 - ANSWER: Consists of the key production facilities and NSA's Central Office of
Record. Provides centralized key management services for all forms of COMSEC key
Tier 1 - ANSWER: Intermediate key generation and distribution center, Central Office
of Record (COR), and privilege managers for COMSEC accounts
Tier 2 - ANSWER: Layer of COMSEC Material Control System (CMCS) comprised of the
COMSEC Accounts that manage key and other COMSEC material
Tier 3 - ANSWER: End user of COMSEC equipment and/or material (LE)
Who is the Commanding Officer's primary advisor on matters concerning the security
and handling of COMSEC material and the associated record, reports, and audits? -
ANSWER: COMSEC Manager
At which Tier do LEs reside? - ANSWER: Tier 3
Which entity operates as part of the NSA and functions primarily as a high volume
key generation and distribution center? - ANSWER: Central Facility
Which of the following is used to distribute, control, and safeguard COMSEC
material? - ANSWER: CMCS
All COMSEC related information is covered within CMCS. - ANSWER: False
Effective key is key that is in the current period of time allowed for use. - ANSWER:
True
For routine modification for material NOT previously authorized, managers must
submit a request how many days in advance? - ANSWER: 60 Days
,What term best describes the series of letters and numbers used to facilitate
identification, handling, accounting, and control of COMSEC material? - ANSWER:
Short Title
Which of the following would be part of a short title for a United States Electronic
Key? - ANSWER: USEAD
The quantity of future editions of keying material (i.e., ROB) to be held by a COMSEC
account is determined by the CNO, CMC, COGARD TISCOM, FLTCINCs, and/or ISICs. -
ANSWER: True
Allowances are unique to the individual account. - ANSWER: True
Which are the responsibilities of the Controlling Authority? - ANSWER: Directs the
establishment and operations of cryptonet/circuits and manages the operational use
and control of KEYMAT assigned to a cryptonet/circuit. Manages traditional COMSEC
material. Evaluates COMSEC incidents and authorizes the issue/destruction of
COMSEC material.
Which are the responsibilities of the CA/CMDAUTH? - ANSWER: Validates CF Form
1206 prior to submission to Central Facility. Grants privileges to URs and associated
key ordering privileges. Manages modern key assets for a department, agency, or
command
What type of accounts are Command Authorities responsible for establishing and
managing? - ANSWER: User Representatives
Who is responsible for managing traditional COMSEC material? - ANSWER:
CONAUTH
Who manages Modern Key? - ANSWER: Command Authority
A CF Form 1205 is also known as a User Representative Partition Privilege
Registration Request. - ANSWER: True
What is a DAO code used to associate? - ANSWER: Ordering Privileges
When does a Modern Key expire? - ANSWER: One year from the date is was
generated
How many spot check can CO delegate to XO? - ANSWER: Up to 2 of 4
How often should CO conduct spot checks? - ANSWER: Quarterly, at minimum
How often should Account Manager conduct spot checks? - ANSWER: Monthly, at
minimum
, What are the guidelines for Account Manager? - ANSWER: Inspect/Spot Check each
LE, annually
How often must a CO perform spot checks? - ANSWER: Quarterly
Self-assessments must be conducted at least quarterly. - ANSWER: True
An access list is the only method allowed for a CO to "grant access in writing to a
COMSEC user." - ANSWER: False (a Designation or Appointment Letter for each
individual may also be used)
All COMSEC users must sign which document acknowledging access to COMSEC
material? - ANSWER: SD-572
What COMSEC component includes secure storage, limited access, life-cycle
accountability, and irretrievable destruction? - ANSWER: Physical Destruction
What type of information is needed by an adversary to develop measures or tactics
to increase their ability to exploit our vulnerabilities? - ANSWER: Mission Critical
Information
Communications Security (COMSEC) is the prevention of unauthorized access to
telecommunications traffic, or to any written information that is transmitted or
transferred. - ANSWER: True
What is the purpose of Tier 0? - ANSWER: Centralized key management for all forms
of COMSEC key
Who is the end user that is responsible for the proper use, accountability, and
destruction of material assigned to their control by the COMSEC Manager? -
ANSWER: LE
The CMCS consists of production facilities, COMSEC COR, distribution facilities (i.e.,
depots), and COMSEC accounts - ANSWER: True
Which entity is responsible for administering the DON COMSEC program and is the
service authority for the DON? - ANSWER: NCMS
After verifying a command's assigned mission and communications capabilities, the
________ determine a command's authorized COMSEC material allowance. -
ANSWER: CNO, CMC, COGARD TISCOM, FLTCINCs. and/or ISICs
The KMI OMM is an example of a Maintenance and Operators Manual - ANSWER:
True
A change in which of the following will justify an increase or decrease in an account's
ROB level? - ANSWER: Operational Requirements
EXAM
Which best describes the purpose of COMSEC? - ANSWER: Denies adversaries access
to information
Which of the following measures is taken to ensure the authenticity of information?
- ANSWER: COMSEC
What COMSEC component provides protection from interception and exploitation? -
ANSWER: Transmission Security
Tier 0 - ANSWER: Consists of the key production facilities and NSA's Central Office of
Record. Provides centralized key management services for all forms of COMSEC key
Tier 1 - ANSWER: Intermediate key generation and distribution center, Central Office
of Record (COR), and privilege managers for COMSEC accounts
Tier 2 - ANSWER: Layer of COMSEC Material Control System (CMCS) comprised of the
COMSEC Accounts that manage key and other COMSEC material
Tier 3 - ANSWER: End user of COMSEC equipment and/or material (LE)
Who is the Commanding Officer's primary advisor on matters concerning the security
and handling of COMSEC material and the associated record, reports, and audits? -
ANSWER: COMSEC Manager
At which Tier do LEs reside? - ANSWER: Tier 3
Which entity operates as part of the NSA and functions primarily as a high volume
key generation and distribution center? - ANSWER: Central Facility
Which of the following is used to distribute, control, and safeguard COMSEC
material? - ANSWER: CMCS
All COMSEC related information is covered within CMCS. - ANSWER: False
Effective key is key that is in the current period of time allowed for use. - ANSWER:
True
For routine modification for material NOT previously authorized, managers must
submit a request how many days in advance? - ANSWER: 60 Days
,What term best describes the series of letters and numbers used to facilitate
identification, handling, accounting, and control of COMSEC material? - ANSWER:
Short Title
Which of the following would be part of a short title for a United States Electronic
Key? - ANSWER: USEAD
The quantity of future editions of keying material (i.e., ROB) to be held by a COMSEC
account is determined by the CNO, CMC, COGARD TISCOM, FLTCINCs, and/or ISICs. -
ANSWER: True
Allowances are unique to the individual account. - ANSWER: True
Which are the responsibilities of the Controlling Authority? - ANSWER: Directs the
establishment and operations of cryptonet/circuits and manages the operational use
and control of KEYMAT assigned to a cryptonet/circuit. Manages traditional COMSEC
material. Evaluates COMSEC incidents and authorizes the issue/destruction of
COMSEC material.
Which are the responsibilities of the CA/CMDAUTH? - ANSWER: Validates CF Form
1206 prior to submission to Central Facility. Grants privileges to URs and associated
key ordering privileges. Manages modern key assets for a department, agency, or
command
What type of accounts are Command Authorities responsible for establishing and
managing? - ANSWER: User Representatives
Who is responsible for managing traditional COMSEC material? - ANSWER:
CONAUTH
Who manages Modern Key? - ANSWER: Command Authority
A CF Form 1205 is also known as a User Representative Partition Privilege
Registration Request. - ANSWER: True
What is a DAO code used to associate? - ANSWER: Ordering Privileges
When does a Modern Key expire? - ANSWER: One year from the date is was
generated
How many spot check can CO delegate to XO? - ANSWER: Up to 2 of 4
How often should CO conduct spot checks? - ANSWER: Quarterly, at minimum
How often should Account Manager conduct spot checks? - ANSWER: Monthly, at
minimum
, What are the guidelines for Account Manager? - ANSWER: Inspect/Spot Check each
LE, annually
How often must a CO perform spot checks? - ANSWER: Quarterly
Self-assessments must be conducted at least quarterly. - ANSWER: True
An access list is the only method allowed for a CO to "grant access in writing to a
COMSEC user." - ANSWER: False (a Designation or Appointment Letter for each
individual may also be used)
All COMSEC users must sign which document acknowledging access to COMSEC
material? - ANSWER: SD-572
What COMSEC component includes secure storage, limited access, life-cycle
accountability, and irretrievable destruction? - ANSWER: Physical Destruction
What type of information is needed by an adversary to develop measures or tactics
to increase their ability to exploit our vulnerabilities? - ANSWER: Mission Critical
Information
Communications Security (COMSEC) is the prevention of unauthorized access to
telecommunications traffic, or to any written information that is transmitted or
transferred. - ANSWER: True
What is the purpose of Tier 0? - ANSWER: Centralized key management for all forms
of COMSEC key
Who is the end user that is responsible for the proper use, accountability, and
destruction of material assigned to their control by the COMSEC Manager? -
ANSWER: LE
The CMCS consists of production facilities, COMSEC COR, distribution facilities (i.e.,
depots), and COMSEC accounts - ANSWER: True
Which entity is responsible for administering the DON COMSEC program and is the
service authority for the DON? - ANSWER: NCMS
After verifying a command's assigned mission and communications capabilities, the
________ determine a command's authorized COMSEC material allowance. -
ANSWER: CNO, CMC, COGARD TISCOM, FLTCINCs. and/or ISICs
The KMI OMM is an example of a Maintenance and Operators Manual - ANSWER:
True
A change in which of the following will justify an increase or decrease in an account's
ROB level? - ANSWER: Operational Requirements
