In cyber security, OPSEC primarily aims to:

• A. Increase system complexity to deter attackers.
• B. Ensure 100% uptime of all systems.
• C. Protect sensitive information by reducing vulnerabilities to adversaries.
• D. Standardize encryption across all devices regardless of context.

Answer: (C)

OPSEC in cyber security is about protecting sensitive information by reducing what an attacker can learn about a system or operation. It means identifying critical data, assessing how information could leak through everyday activities, and applying mitigations to limit that leakage and close exploitable vulnerabilities. This makes the option that focuses on protecting sensitive information by reducing vulnerabilities to adversaries the best match. The other ideas don’t capture the essence: adding complexity isn’t a reliable deterrent; uptime concerns availability rather than information exposure; and standardizing encryption is a useful practice but not the primary objective of OPSEC, which centers on minimizing information leakage and adversary insight.