In C2 networks, what is the cyber and information security consideration?

• A. OPSEC is unrelated to C2 networks.
• B. Protects confidentiality, integrity, and availability of information and systems; includes encryption, access controls, and OPSEC.
• C. Focuses only on physical security of data centers.
• D. Encryption is optional in C2 networks.

Answer: (B)

Security controls for C2 networks revolve around protecting data and command channels from interception, tampering, and disruption. The best choice emphasizes the confidentiality, integrity, and availability of information and systems as the foundation, with practical controls like encryption to keep data private and intact, access controls to ensure only authorized users can issue commands or access sensitive data, and OPSEC to limit what adversaries can infer from operations. This combination directly addresses how to keep the C2 infrastructure resilient and trustworthy in a hostile environment. The other options miss essential parts: OPSEC is not unrelated to C2 networks; focusing only on physical security ignores the cyber layer; and treating encryption as optional ignores a fundamental protective measure used to safeguard communications and data.