It should not matter if she remembers signing it. If the signed NDA exists, then it is legally binding. If it doesn’t exist, and she handled classified information, then that is a violation of the law.
Exactly. I worked for a telecom company, and I remember having to sign FCC documents about listening in on conversations.