This article will provide you with all the questions and answers for Cyber Awareness Challenge.<\/p>\n\n\n\n
ActiveX is a type of this?<\/p>\n\n\n\n
-Mobile code<\/p>\n\n\n\n
All https sites are legitimate and there is no risk to entering your personal info online.<\/p>\n\n\n\n
-FALSE<\/p>\n\n\n\n
Bob, a coworker, has been going through a divorce, has financial difficulties and is displaying hostile behavior. How many potential insider threat indicators is Bob displaying?<\/p>\n\n\n\n
-3<\/p>\n\n\n\n
The CAC\/PIV is a controlled item and contains certificates for:<\/p>\n\n\n\n
-All of the above<\/p>\n\n\n\n
Classified Information can only be accessed by individuals with<\/p>\n\n\n\n
-All of the above<\/p>\n\n\n\n
Classified Information is<\/p>\n\n\n\n
-Assigned a classification level by a supervisor<\/p>\n\n\n\n
A coworker has left an unknown CD on your desk. What should you do?<\/p>\n\n\n\n
-Put the CD in the trash<\/p>\n\n\n\n
DoD employees are prohibited from using a DoD CAC in card-reader-enabled public devices.<\/p>\n\n\n\n
-TRUE<\/p>\n\n\n\n
The following practices help prevent viruses and the downloading of malicious code except.<\/p>\n\n\n\n
-Scan external files from only unverifiable sources before uploading to computer<\/p>\n\n\n\n
How are Trojan horses, worms, and malicious scripts spread?<\/p>\n\n\n\n
-By email attachments<\/p>\n\n\n\n
How can you guard yourself against Identity theft?<\/p>\n\n\n\n
-All of the above<\/p>\n\n\n\n
How should you securely transport company information on a removable media?<\/p>\n\n\n\n
-Encrypt the removable media<\/p>\n\n\n\n
If authorized, what can be done on a work computer?<\/p>\n\n\n\n
-Check personal email<\/p>\n\n\n\n
If classified information were released, which classification level would result in “Exceptionally grave damage to national security”?<\/p>\n\n\n\n
-Top Secret<\/p>\n\n\n\n
If your wireless device is improperly configured someone could gain control of the device? T\/F<\/p>\n\n\n\n
-TRUE<\/p>\n\n\n\n
An individual who has attempted to access sensitive information without need-to-know and has made unusual requests for sensitive information is displaying indicators of what?<\/p>\n\n\n\n
-Potential Insider Threat<\/p>\n\n\n\n
It is getting late on Friday. You are reviewing your employees annual self evaluation. Your comments are due on Monday. You can email your employees information to yourself so you can work on it this weekend and go home now. Which method would be the BEST way to send this information?<\/p>\n\n\n\n
-Use the government email system so you can encrypt the information and open the email on your government issued laptop<\/p>\n\n\n\n
It is permissible to release unclassified information to the public prior to being cleared.<\/p>\n\n\n\n
-False<\/p>\n\n\n\n
Malicious code can do the following except?<\/p>\n\n\n\n
-Make your computer more secure<\/p>\n\n\n\n
Maria is at home shopping for shoes on Amazon.com. Before long she has also purchased shoes from several other websites. What can be used to track Maria’s web browsing habits?<\/p>\n\n\n\n
-Cookies<\/p>\n\n\n\n
Media containing Privacy Act information, PII, and PHI is not required to be labeled.<\/p>\n\n\n\n
-FALSE<\/p>\n\n\n\n
A medium secure password has at least 15 characters and one of the following.<\/p>\n\n\n\n
-Special character<\/p>\n\n\n\n
Of the following, which is NOT a characteristic of a phishing attempt?<\/p>\n\n\n\n
-Directing you to a web site that is real<\/p>\n\n\n\n
Of the following, which is NOT a method to protect sensitive information?<\/p>\n\n\n\n
-After work hours, storing sensitive information in unlocked containers, desks, or cabinets if security is not present<\/p>\n\n\n\n
Of the following, which is NOT an intelligence community mandate for passwords?<\/p>\n\n\n\n
-Maximum password age of 45 days<\/p>\n\n\n\n
Of the following, which is NOT a problem or concern of an Internet hoax?<\/p>\n\n\n\n
-Directing you to a website that looks real<\/p>\n\n\n\n
Of the following, which is NOT a security awareness tip?<\/p>\n\n\n\n
-Remove security badge as you enter a restaurant or retail establishment<\/p>\n\n\n\n
P2P (Peer-to-Peer) software can do the following except:<\/p>\n\n\n\n
-Allow attackers physical access to network assets<\/p>\n\n\n\n
PII, PHI, and financial information is classified as what type of information?<\/p>\n\n\n\n
-Sensitive<\/p>\n\n\n\n
Should you always label your removable media?<\/p>\n\n\n\n
-Yes<\/p>\n\n\n\n
Someone calls from an unknown number and says they are from IT and need some information about your computer. What should you do?<\/p>\n\n\n\n
-Request the user’s full name and phone number<\/p>\n\n\n\n
Spear Phishing attacks commonly attempt to impersonate email from trusted entities. What security device is used in email to verify the identity of sender?<\/p>\n\n\n\n
-Digital Signatures<\/p>\n\n\n\n
Spillage occurs when<\/p>\n\n\n\n
-Personal information is inadvertently posted at a website<\/p>\n\n\n\n
There are many travel tips for mobile computing. Which of the following is NOT one?<\/p>\n\n\n\n
-When using a public device with a card reader, only use your DoD CAC to access unclassified information<\/p>\n\n\n\n
Thumb drives, memory sticks, and flash drives are examples of<\/p>\n\n\n\n
-Removable media<\/p>\n\n\n\n
UNCLASSIFIED is a designation to mark information that does not have potential to damage national security.<\/p>\n\n\n\n
-TRUE<\/p>\n\n\n\n
The use of webmail is<\/p>\n\n\n\n
-is only allowed if the organization permits it<\/p>\n\n\n\n
Using webmail may bypass built in security features.<\/p>\n\n\n\n
-TRUE<\/p>\n\n\n\n
What action is recommended when somebody calls you to inquire about your work environment or specific account information?<\/p>\n\n\n\n
-Ask them to verify their name and office number<\/p>\n\n\n\n
What actions should you take prior to leaving the work environment and going to lunch?<\/p>\n\n\n\n
-All of the above<\/p>\n\n\n\n
What can you do to prevent spillage?<\/p>\n\n\n\n
-all of the above<\/p>\n\n\n\n
What can you do to protect yourself against phishing?<\/p>\n\n\n\n
-All of the above<\/p>\n\n\n\n
What constitutes a strong password?<\/p>\n\n\n\n
-all of the above<\/p>\n\n\n\n
What information relates to the physical or mental health of an individual?<\/p>\n\n\n\n
-PHI<\/p>\n\n\n\n
What information should you avoid posting on social networking sites?<\/p>\n\n\n\n
-All of the above<\/p>\n\n\n\n
What is considered a mobile computing device and therefore shouldn’t be plugged in to your Government computer?<\/p>\n\n\n\n
-All of the above<\/p>\n\n\n\n
What is considered ethical use of the Government email system?<\/p>\n\n\n\n
-Distributing Company newsletter<\/p>\n\n\n\n
What is NOT Personally Identifiable Information (PII)?<\/p>\n\n\n\n
-Hobby<\/p>\n\n\n\n
What should be done if you find classified Government Data\/Information Not Cleared for Public Release on the Internet?<\/p>\n\n\n\n
-Make note of any identifying information and the website URL and report it to your security office<\/p>\n\n\n\n
What should be done to protect against insider threats?<\/p>\n\n\n\n
-Report any suspicious behavior<\/p>\n\n\n\n
What should be done to sensitive data on laptops and other mobile computing devices?<\/p>\n\n\n\n
-Encrypt the sensitive data<\/p>\n\n\n\n
What should you do if someone asks to use your government issued mobile device (phone\/laptop..etc)?<\/p>\n\n\n\n
-Decline to lend your phone \/ laptop<\/p>\n\n\n\n
What should you do if someone forgets their access badge (physical access)?<\/p>\n\n\n\n
-Alert the security office<\/p>\n\n\n\n
What should you do to protect classified data?<\/p>\n\n\n\n
-Answer 1 and 2<\/p>\n\n\n\n
What should you do to protect yourself while on social networks?<\/p>\n\n\n\n
-Validate all friend requests through another source before confirming them<\/p>\n\n\n\n
What type of data must be handled and stored properly based on classification markings and handling caveats?<\/p>\n\n\n\n
-Classified<\/p>\n\n\n\n
What type of security is “part of your responsibility” and “placed above all else?”<\/p>\n\n\n\n
-Physical<\/p>\n\n\n\n
When leaving your work area, what is the first thing you should do?<\/p>\n\n\n\n
-Remove your CAC\/PIV<\/p>\n\n\n\n
When using a fax machine to send sensitive information, the sender should do which of the following?<\/p>\n\n\n\n
-Contact the recipient to confirm receipt<\/p>\n\n\n\n
Where should you store PII \/ PHI?<\/p>\n\n\n\n
-Information should be secured in a cabinet or container while not in use<\/p>\n\n\n\n
Which is an untrue statement about unclassified data?<\/p>\n\n\n\n
-If aggregated, the classification of the information may not be changed<\/p>\n\n\n\n
Which is a way to protect against phishing attacks?<\/p>\n\n\n\n
-Look for digital certificates<\/p>\n\n\n\n
Which is NOT a method of protecting classified data?<\/p>\n\n\n\n
-Assuming open storage is always authorized in a secure facility<\/p>\n\n\n\n
Which is NOT a requirement for telework?<\/p>\n\n\n\n
-Telework is only authorized for unclassified and confidential information<\/p>\n\n\n\n
Which is NOT a telework guideline?<\/p>\n\n\n\n
-Taking classified documents from your workspace<\/p>\n\n\n\n
Which is NOT a way to protect removable media?<\/p>\n\n\n\n
-As a best practice, labeling all classified removable media and considering all unlabeled removable media as unclassified<\/p>\n\n\n\n
Which is NOT a wireless security practice?<\/p>\n\n\n\n
-Turning off computer when not in use<\/p>\n\n\n\n
Which of the following attacks target high ranking officials and executives?<\/p>\n\n\n\n
-Whaling<\/p>\n\n\n\n
Which of the following best describes wireless technology?<\/p>\n\n\n\n
-It is inherently not a secure technology<\/p>\n\n\n\n
Which of the following definitions is true about disclosure of confidential information?<\/p>\n\n\n\n
-Damage to national security<\/p>\n\n\n\n
Which of the following is a good practice to avoid email viruses?<\/p>\n\n\n\n
-Delete email from senders you do not know<\/p>\n\n\n\n
Which of the following is an example of malicious code?<\/p>\n\n\n\n
-Trojan horses<\/p>\n\n\n\n
Which of the following is a proper way to secure your CAC\/PIV?<\/p>\n\n\n\n
-Remove and take it with you whenever you leave your workstation<\/p>\n\n\n\n
Which of the following is NOT a criterion used to grant an individual access to classified data?<\/p>\n\n\n\n
-Senior government personnel, military or civilian<\/p>\n\n\n\n
Which of the following is NOT a DoD special requirement for tokens?<\/p>\n\n\n\n
-Using NIPRNet tokens on systems of higher classification level<\/p>\n\n\n\n
Which of the following is NOT a home security best practice?<\/p>\n\n\n\n
-Setting weekly time for virus scan when you are not on the computer and it is powered off<\/p>\n\n\n\n
Which of the following is NOT a potential insider threat?<\/p>\n\n\n\n
-Member of a religion or faith<\/p>\n\n\n\n
Which of the following is NOT a security best practice when saving cookies to a hard drive?<\/p>\n\n\n\n
-Looking for “https” in the URL. All https sites are legitimate.<\/p>\n\n\n\n
Which of the following is NOT a social engineering tip?<\/p>\n\n\n\n
-Following instructions from verified personnel<\/p>\n\n\n\n
Which of the following is NOT considered sensitive information?<\/p>\n\n\n\n
-Sanitized information gathered from personnel records<\/p>\n\n\n\n
Which of the following is NOT Government computer misuse?<\/p>\n\n\n\n
-Checking work email<\/p>\n\n\n\n
Which of the following is NOT PII?<\/p>\n\n\n\n
-Mother’s maiden name, favorite color<\/p>\n\n\n\n
Which of the following is NOT Protected Health Information (PHI)?<\/p>\n\n\n\n
-Medical care facility name<\/p>\n\n\n\n
Which of the following is NOT sensitive information?<\/p>\n\n\n\n
-Unclassified information cleared for public release<\/p>\n\n\n\n
Which of the following makes Alex’s personal information vulnerable to attacks by identity thieves?<\/p>\n\n\n\n
-Carrying his Social Security Card with him<\/p>\n\n\n\n
Which of the following should be done to keep your home computer secure?<\/p>\n\n\n\n
-All of the above<\/p>\n\n\n\n
You are having lunch at a local restaurant outside the installation, and you find a cd labeled “favorite song”. What should you do?<\/p>\n\n\n\n
-Leave the cd where it is<\/p>\n\n\n\n
You are leaving the building where you work. What should you do?<\/p>\n\n\n\n
-Remove your security badge<\/p>\n\n\n\n
You are logged on to your unclassified computer and just received an encrypted email from a co-worker. The email has an attachment whose name contains the word “secret”. What should you do?<\/p>\n\n\n\n
-Contact your security POC right away<\/p>\n\n\n\n
You are working at your unclassified system and receive an email from a coworker containing a classified attachment. What should you do?<\/p>\n\n\n\n
-Alert your security POC<\/p>\n\n\n\n
You check your bank statement and see several debits you did not authorize. You believe that you are a victim of identity theft. Which of the following should you do immediately?<\/p>\n\n\n\n
-Monitor credit card statements for unauthorized purchases<\/p>\n\n\n\n
You receive a call on your work phone and you’re asked to participate in a phone survey. As part of the survey the caller asks for birth date and address. What type of attack might this be?<\/p>\n\n\n\n
-Social Engineering<\/p>\n\n\n\n
You receive an email from a company you have an account with. The email states your account has been compromised and you are invited to click on the link in order to reset your password. What action should you take?<\/p>\n\n\n\n
-Notify security<\/p>\n\n\n\n
Which of these is true of unclassified data?<\/p>\n\n\n\n
-Its classification level may rise when aggregated. (Correct)<\/p>\n\n\n\n
Which type of information includes personal, payroll, medical, and operational information?<\/p>\n\n\n\n
Sensitive<\/p>\n\n\n\n
Which of the following is NOT a correct way to protect sensitive information?<\/p>\n\n\n\n
Sensitive information may be stored on any password-protected system.<\/p>\n\n\n\n
Which of the following is NOT a typical result from running malicious code?<\/p>\n\n\n\n
Disabling cookies<\/p>\n\n\n\n
What level of damage to national security could reasonably be expected if unauthorized disclosure of Top Secret information occurred?<\/p>\n\n\n\n
Exceptionally grave damage<\/p>\n\n\n\n
Which of the following is true about telework?<\/p>\n\n\n\n
-You must have your organization’s permission to telework.<\/p>\n\n\n\n
Which of following is true of protecting classified data?<\/p>\n\n\n\n
-Classified material must be appropriately marked.<\/p>\n\n\n\n
New interest in learning another language?<\/p>\n\n\n\n
A colleague has visited several foreign countries recently, has adequate work quality, speaks openly of unhappiness with U.S. foreign policy, and recently had his car repossessed. How many indicators does this employee display?<\/p>\n\n\n\n
03<\/p>\n\n\n\n
Which of the following is NOT considered a potential insider threat indicator?<\/p>\n\n\n\n
-Treated mental health issues.<\/p>\n\n\n\n
What would you do if you receive a game application request on your government computer that includes permission to access your friends, profile information, cookies, and sites visited?<\/p>\n\n\n\n
-Decline the request.<\/p>\n\n\n\n
What information most likely presents a security risk on your personal social networking profile?<\/p>\n\n\n\n
-Birthplace<\/p>\n\n\n\n
You have reached the office door to exit your controlled area. As a security best practice, what should you do before exiting?<\/p>\n\n\n\n
-Remove your security badge, common access card (CAC), or personal identity verification (PIV) card.<\/p>\n\n\n\n
How should you protect your Common Access Card (CAC) or Personal Identity Verification (PIV) card?<\/p>\n\n\n\n
-Store it in a shielded sleeve to avoid chip cloning.<\/p>\n\n\n\n
Which of the following statements is TRUE about the use of DoD Public Key Infrastructure (PKI) tokens?<\/p>\n\n\n\n
-Always use DoD PKI tokens within their designated classification level.<\/p>\n\n\n\n
Which of the following is a best practice for handling cookies?<\/p>\n\n\n\n
-If possible, set your browser preferences to prompt you each time a website wants to store a cookie.<\/p>\n\n\n\n
You receive an unexpected email from a friend: “I think you’ll like this: (URL)” What action should you take?<\/p>\n\n\n\n
-Use TinyURL’s preview feature to investigate where the link leads.<\/p>\n\n\n\n
You receive an email at your official Government email address from an individual at the Office of Personnel Management (OPM). The email provides a link to a personnel portal where you must enter your personal information as part of an effort to standardize recordkeeping. What action should you take first?<\/p>\n\n\n\n
-Look for a digital signature on the email.<\/p>\n\n\n\n
What is TRUE of a phishing attack?<\/p>\n\n\n\n
-Phishing can be an email with a hyperlink as bait.<\/p>\n\n\n\n
Upon connecting your Government-issued laptop to a public wireless connection, what should you immediately do?<\/p>\n\n\n\n
-Connect to the Government Virtual Private Network (VPN).??<\/p>\n\n\n\n
A coworker has asked if you want to download a programmer’s game to play at work. What should be your response?<\/p>\n\n\n\n
-I’ll pass.<\/p>\n\n\n\n
A coworker wants to send you a sensitive document to review while you are at lunch and you only have your personal tablet. What should you do?<\/p>\n\n\n\n
-Never allow sensitive data on non-Government-issued mobile devices.<\/p>\n\n\n\n
Which of the following demonstrates proper protection of mobile devices?<\/p>\n\n\n\n
-Linda encrypts all of the sensitive data on her government-issued mobile devices.<\/p>\n\n\n\n
How can you protect your information when using wireless technology?<\/p>\n\n\n\n
-Avoid using non-Bluetooth-paired or unencrypted wireless computer peripherals.<\/p>\n\n\n\n
Which of the following is NOT true of traveling overseas with a mobile phone<\/p>\n\n\n\n
Physical security of mobile phones carried overseas is not a major issue<\/p>\n\n\n\n
SPILLAGE<\/em> Be aware of classification markings and all handling caveats.<\/p>\n\n\n\n SPILLAGE<\/em> Label all files, removable media, and subject headers with appropriate classification markings.<\/p>\n\n\n\n Secret<\/p>\n\n\n\n CLASSIFIED DATA<\/em> Ensure proper labeling by appropriately marking all classified material and, when required, sensitive material.<\/p>\n\n\n\n INSIDER THREAT<\/em> 3 or more indicators<\/p>\n\n\n\n INSIDER THREAT<\/em> They may wittingly or unwittingly use their authorized access to perform actions that result in the loss or degradation of resources or capabilities.<\/p>\n\n\n\n INSIDER THREAT<\/em> New interest in learning a foregin language.<\/p>\n\n\n\n SOCIAL NETWORKING<\/em> If you participate in or condone it at any time.<\/p>\n\n\n\n SOCIAL NETWORKING<\/em> After you have returned home following the vacation.<\/p>\n\n\n\n SOCIAL NETWORKING<\/em> Understanding and using the available privacy settings.<\/p>\n\n\n\n UNCONTROLLED CLASSIFIED INFORMATION<\/em> Press release data<\/p>\n\n\n\n UNCONTROLLED CLASSIFIED INFORMATION<\/em> CUI may be stored on any password-protected system.<\/p>\n\n\n\n Select the information on the data sheet that is personally identifiable information (PII) But not protected health information (PHI)<\/p>\n\n\n\n Jane Jones Select the information on the data sheet that is protected health information (PHI)<\/p>\n\n\n\n Jane has been Dr\u2026ect patient..ect.<\/p>\n\n\n\n PHYSICAL SECURITY<\/em> Answer: CPCON 2<\/p>\n\n\n\n PHYSICAL SECURITY<\/em> Ask the individual to see an identification badge.<\/p>\n\n\n\n IDENTITY MANAGEMENT<\/em> Identification, encryption, and digital signature<\/p>\n\n\n\n IDENTITY MANAGEMENT<\/em> eA1xy2!P<\/p>\n\n\n\n SENSITIVE COMPARTMENTED INFORMATION<\/em> Mark SCI documents appropriately and use an approved SCI fax machine.<\/p>\n\n\n\n SENSITIVE COMPARTMENTED INFORMATION<\/em> At all times while in the facility.<\/p>\n\n\n\n REMOVABLE MEDIA IN A SCIF<\/em> Identify and disclose it with local Configuration\/Change Management Control and Property Management authorities<\/p>\n\n\n\n MALICIOUS CODE<\/em> Legitimate software updates<\/p>\n\n\n\n WEBSITE USE<\/em> You should only accept cookies from reputable, trusted websites.<\/p>\n\n\n\n SOCIAL ENGINEERING<\/em> Use online sites to confirm or expose potential hoaxes<\/p>\n\n\n\n SOCIAL ENGINEERING<\/em> Follow instructions given only by verified personnel<\/p>\n\n\n\n SOCIAL ENGINEERING<\/em> Investigate the link\u2019s actual destination using the preview feature<\/p>\n\n\n\n TRAVEL<\/em> Others may be able to view your screen.<\/p>\n\n\n\n USE OF GFE<\/em> Determine if the software or service is authorized<\/p>\n\n\n\n MOBILE DEVICES<\/em> A smartphone that transmits credit card payment information when held in proximity to a credit card reader.<\/p>\n\n\n\n MOBILE DEVICES<\/em> Flash Drive<\/p>\n\n\n\n HOME COMPUTER SECURITY<\/em> Create separate accounts for each user.<\/p>\n\n\n\n *Spillage Attempt to change the subject to something non-work related, but neither confirm nor deny the article\u2019s authenticity.<\/p>\n\n\n\n *Spillage Label all files, removable media, and subject headers with appropriate classification markings.<\/p>\n\n\n\n *Spillage Spillage because classified data was moved to a lower classification level system without authorization.<\/p>\n\n\n\n *Spillage Call your security point of contact immediately<\/p>\n\n\n\n *Spillage Ask for information about the website, including the URL.<\/p>\n\n\n\n *Spillage Refer the reporter to your organization\u2019s public affairs office.<\/p>\n\n\n\n *Spillage ~Immediately notify your security POC.<\/p>\n\n\n\n *Spillage Be aware of classification markings and all handling caveats.<\/p>\n\n\n\n **Classified Data Store classified data appropriately in a GSA-approved vault\/container.<\/p>\n\n\n\n **Classified Data Appropriate clearance, a signed and approved non-disclosure agreement, and need-to-know<\/p>\n\n\n\n **Classified Data Secret<\/p>\n\n\n\n **Classified Data Ensure proper labeling by appropriately marking all classified material and, when required, sensitive material.<\/p>\n\n\n\n **Classified Data Classified material must be appropriately marked.<\/p>\n\n\n\n **Classified Data Damage to national security<\/p>\n\n\n\n **Insider Threat New interest in learning a foreign language<\/p>\n\n\n\n **Insider Threat 1 Indicator(wrong) **Insider Threat 0 indicators<\/p>\n\n\n\n **Insider Threat 3 or more indicators<\/p>\n\n\n\n **Insider Threat 1 indicator<\/p>\n\n\n\n **Insider Threat Insiders are given a level of trust and have authorized access to Government information systems<\/p>\n\n\n\n **Insider Threat Coworker making consistent statements indicative of hostility or anger toward the United States in its policies.<\/p>\n\n\n\n **Insider Threat A coworker removes sensitive information without authorization<\/p>\n\n\n\n **Insider Threat ~A coworker brings a personal electronic device into a prohibited area.<\/p>\n\n\n\n **Social Networking When vacation is over, after you have returned home<\/p>\n\n\n\n **Social Networking Decline the request<\/p>\n\n\n\n *Sensitive Information As long as the document is cleared for public release, you may share it outside of DoD.<\/p>\n\n\n\n *Sensitive Information Date and place of birth<\/p>\n\n\n\n *Sensitive Information Passport number<\/p>\n\n\n\n *Sensitive Information Medical test results<\/p>\n\n\n\n *Sensitive Information For Official Use Only (FOUO)<\/p>\n\n\n\n *Sensitive Information If aggregated, the information could become classified.<\/p>\n\n\n\n **Physical Security Challenge people without proper badges.<\/p>\n\n\n\n **Physical Security CPCON 1<\/p>\n\n\n\n **Identity Management On a NIPRNet system while using it for a PKI-required task<\/p>\n\n\n\n **Identity Management Something you possess, like a CAC, and something you know, like a PIN or password<\/p>\n\n\n\n **Identity management Use a common password for all your system and application logons.<\/p>\n\n\n\n **Identity management Maintain possession of it at all times.<\/p>\n\n\n\n *Sensitive Compartmented Information A program that segregates various type of classified information into distinct compartments for added protection and dissemination for distribution control.<\/p>\n\n\n\n *Sensitive Compartmented Information A person who does not have the required clearance or assess caveats comes into possession of SCI in any manner.<\/p>\n\n\n\n *Sensitive Compartmented Information ~All documents should be appropriately marked, regardless of format, sensitivity, or classification. *Sensitive Compartmented Information Security Classification Guide (SCG)<\/p>\n\n\n\n **Removable Media in a SCIF It displays a label showing maximum classification, date of creation, point of contact, and Change Management 9CM) Control Number.<\/p>\n\n\n\n *Malicious Code Viruses, Trojan horses, or worms<\/p>\n\n\n\n **Website Use Since the URL does not start with \u201chttps,\u201d do not provide you credit card information.<\/p>\n\n\n\n **Social Engineering Do not access links or hyperlinked media such as buttons and graphics in email messages.<\/p>\n\n\n\n **Social Engineering Phishing can be an email with a hyperlink as bait.<\/p>\n\n\n\n **Social Engineering Follow instructions given only by verified personnel.<\/p>\n\n\n\n **Travel Maintain possession of your laptop and other government-furnished equipment (GFE) at all times.<\/p>\n\n\n\n **Use of GFE If allowed by organizational policy<\/p>\n\n\n\n **Mobile Devices Do not use any personally owned\/non-organizational removable media on your organization\u2019s systems.<\/p>\n\n\n\n **Mobile Devices Secure personal mobile devices to the same level as Government-issued systems.<\/p>\n\n\n\n **Home Computer Security Avoid using non-Bluetooth-paired or unencrypted wireless computer peripherals.<\/p>\n\n\n\n What is the best response if you find classified government data on the internet?<\/p>\n\n\n\n Note any identifying information, such as the website\u2019s URL, and report the situation to your security POC.<\/p>\n\n\n\n What information posted publicly on your personal social networking profile represents a security risk?<\/p>\n\n\n\n Your place of birth<\/p>\n\n\n\n What is the best example of Protected Health Information (PHI)?<\/p>\n\n\n\n Your health insurance explanation of benefits (EOB)<\/p>\n\n\n\n What does Personally Identifiable Information (PII) include?<\/p>\n\n\n\n Social Security Number; date and place of birth; mother\u2019s maiden name<\/p>\n\n\n\n What certificates are contained on the DoD Public Key Infrastructure (PKI) implemented by the Common Access Card (CAC)\/Personal Identity Verification (PIV) card?<\/p>\n\n\n\n Identification, encryption, and digital signature<\/p>\n\n\n\n What describes how Sensitive Compartmented Information is marked?<\/p>\n\n\n\n Approved Security Classification Guide (SCG)<\/p>\n\n\n\n Which is a risk associated with removable media?<\/p>\n\n\n\n Spillage of classified information.<\/p>\n\n\n\n What is an indication that malicious code is running on your system?<\/p>\n\n\n\n File corruption<\/p>\n\n\n\n What is a valid response when identity theft occurs?<\/p>\n\n\n\n Report the crime to local law enforcement.<\/p>\n\n\n\n What is whaling?<\/p>\n\n\n\n A type of phishing targeted at high-level personnel such as senior officials.<\/p>\n\n\n\n What is a best practice to protect data on your mobile computing device?<\/p>\n\n\n\n Lock your device screen when not in use and require a password to reactivate.<\/p>\n\n\n\n What is a possible indication of a malicious code attack in progress?<\/p>\n\n\n\n A pop-up window that flashes and warns that your computer is infected with a virus.<\/p>\n\n\n\n Which of the following may be helpful to prevent inadvertent spillage?<\/p>\n\n\n\n What should you do after you have ended a call from a reporter asking you to confirm potentially classified info found on the web?<\/p>\n\n\n\n Alert your security point of contact.<\/p>\n\n\n\n Which of the following is NOT an example of sensitive information?<\/p>\n\n\n\n PII<\/p>\n\n\n\n SSN, date and place of birth, mother\u2019s maiden name, biometric records, PHI, passport number<\/p>\n\n\n\n PHI<\/p>\n\n\n\n Subset of PII, health information that identifies the individual, relates to physical or mental health of an individual, provision of health care to an individual, or payment of healthcare for individual<\/p>\n\n\n\n Which of the following is NOT a typical result from running malicious code?<\/p>\n\n\n\n Disable cookies<\/p>\n\n\n\n What kind of information could reasonably be expected to cause serious damage to national security in the event of unauthorized disclosure?<\/p>\n\n\n\n Secret<\/p>\n\n\n\n Telework<\/p>\n\n\n\n Have your permissions from your organization, follow your organization guideline, use authorized equipment and software, employ cyber security best practice, perform telework in dedicated when home.<\/p>\n\n\n\n Which of the following should be reported as a potential security incident (in accordance with your Agency\u2019s insider threat policy)?<\/p>\n\n\n\n A coworker brings a personal electronic device into prohibited areas.<\/p>\n\n\n\n A colleague complains about anxiety and exhaustion, makes coworkers uncomfortable by asking excessive questions about classified projects, and complains about the credit card bills that his wife runs up. How many potential insider threat indicators does this employee display?<\/p>\n\n\n\n 3 or more indicators<\/p>\n\n\n\n A colleague has won 10 high-performance awards, can be playful and charming, is not currently in a relationship, and occasionally aggressive in trying to access sensitive information. How many potential insider threat indicators does this employee display?<\/p>\n\n\n\n 1 indicator<\/p>\n\n\n\n What information most likely presents a security risk on your personal social networking profile?<\/p>\n\n\n\n Mother\u2019s maiden name<\/p>\n\n\n\n Which of the following represents a good physical security practice?<\/p>\n\n\n\n Use your own security badge, key code, or Common Access Card (CAC)\/Personal Identity Verification (PIC) card.<\/p>\n\n\n\n How should you protect your Common Access Card (CAC) or Personal Identity Verification (PIV) card?<\/p>\n\n\n\n Store it in a shielded sleeve to avoid chip cloning.<\/p>\n\n\n\n Which of the following statements is NOT true about protecting your virtual identity?<\/p>\n\n\n\n Use personal information to help create strong passwords.<\/p>\n\n\n\n While you are registering for a conference, you arrive at the website http:\/\/www.dcsecurityconference.org\/registration\/. The website requires a credit card for registration. What should you do?<\/p>\n\n\n\n Since the URL does not start with \u201chttps,\u201d do not provide your credit card information.<\/p>\n\n\n\n You receive an email from the Internal Revenue Service (IRS) demanding immediate payment of back taxes of which you were not aware. The email provides a website and a toll-free number where you can make payment. What action should you take?<\/p>\n\n\n\n Contact the IRS using their publicly available, official contact information.<\/p>\n\n\n\n Which of the following is a practice that helps to prevent the download of viruses and other malicious code when checking your email?<\/p>\n\n\n\n Do not access links or hyperlinked media such as buttons and graphics in email messages.<\/p>\n\n\n\n Which of the following is true of Internet hoaxes?<\/p>\n\n\n\n They can be part of a distributed denial-of-service (DDoS) attack.<\/p>\n\n\n\n Which of the following is NOT true of traveling overseas with a mobile phone?<\/p>\n\n\n\n Physical security of mobile phones carried overseas is not a major issue.<\/p>\n\n\n\n A coworker has asked if you want to download a programmer\u2019s game to play at work. What should be your response?<\/p>\n\n\n\n I\u2019ll pass.<\/p>\n\n\n\n A coworker wants to send you a sensitive document to review while you are at lunch and you only have your personal tablet. What should you do?<\/p>\n\n\n\n Never allow sensitive data on non-Government-issued mobile devices.<\/p>\n\n\n\n A man you do not know is trying to look at your Government-issued phone and has asked to use it. What should you do?<\/p>\n\n\n\n Decline to lend the man your phone.<\/p>\n\n\n\n How can you protect your information when using wireless technology?<\/p>\n\n\n\n Avoid using non-Bluetooth-paired or unencrypted wireless computer peripherals.<\/p>\n\n\n\n What should you do if a reporter asks you about potentially classified information on the web?<\/p>\n\n\n\n Neither confirm or deny the information is classified<\/p>\n\n\n\n .<\/p>\n\n\n\n Which of the following may be helpful to prevent inadvertent spillage?<\/p>\n\n\n\n Label all files, removable media, and subject headers with appropriate classification markings.<\/p>\n\n\n\n What kind of information could reasonably be expected to cause serious damage to national security in the event of unauthorized disclosure?<\/p>\n\n\n\n Secret<\/p>\n\n\n\n Which of the following is NOT true concerning a computer labeled SECRET?<\/p>\n\n\n\n May be used on an unclassified network.<\/p>\n\n\n\n A colleague complains about anxiety and exhaustion, makes coworkers uncomfortable by asking excessive questions about classified projects, and complains about the credit card bills that his wife runs up. How many potential insider threat indicators does this employee display?<\/p>\n\n\n\n 3 or more indicators<\/p>\n\n\n\n Which of the following should be reported as a potential security incident?<\/p>\n\n\n\n A coworker removes sensitive information without approval.<\/p>\n\n\n\n Which of the following should be reported as a potential security incident (in accordance with your Agency\u2019s insider threat policy)?<\/p>\n\n\n\n A coworker brings a personal electronic device into prohibited areas.<\/p>\n\n\n\n When would be a good time to post your vacation location and dates on your social networking website?<\/p>\n\n\n\n When you return from your vacation.<\/p>\n\n\n\n In setting up your personal social networking service account, what email address should you use?<\/p>\n\n\n\n Your personal email address.<\/p>\n\n\n\n Which of the following is NOT a correct way to protect sensitive information?<\/p>\n\n\n\n Sensitive information may be stored on any password-protected system.<\/p>\n\n\n\n Which of these is true of unclassified data?<\/p>\n\n\n\n It\u2019s classification level may rise when aggregated.<\/p>\n\n\n\n Is it permitted to share an unclassified draft document with a non-DoD professional discussion group?<\/p>\n\n\n\n As long as the document is cleared for public release, you may share it outside of DoD.<\/p>\n\n\n\n Within a secure area, you see an individual you do not know. Her badge is not visible to you. What is the best course of action?<\/p>\n\n\n\n Ask the individual to identify herself.<\/p>\n\n\n\n How should you protect your Common Access Card (CAC) or Personal Identity Verification (PIV) card?<\/p>\n\n\n\n Store it in a shielded sleeve to avoid chip cloning.<\/p>\n\n\n\n Your DoD Common Access Card (CAC) has a Public Key Infrastructure (PKI) token approves for access to the NIPRNET. In which situation below are you permitted to use your PKI token?<\/p>\n\n\n\n On a NIPRNET system while using it for a PKI-required task<\/p>\n\n\n\n After clicking on a link on a website, a box pops up and asks if you want to run an application. Is it okay to run it?<\/p>\n\n\n\n No. Only allow mobile code to run from your organization or your organization\u2019s trusted sites.<\/p>\n\n\n\n Upon connecting your Government- issued laptop to a public wireless connection, what should you immediately do?<\/p>\n\n\n\n Connect to the Government Virtual Private Network (VPN).<\/p>\n\n\n\n What do you do if spillage occurs?<\/p>\n\n\n\n Immediately notify your security point of contact.<\/p>\n\n\n\n What should you do after you have ended a call from a reporter asking you to confirm potentially classified information found on the web?<\/p>\n\n\n\n Alert your security point of contact.<\/p>\n\n\n\n Which of the following is NOT a requirement for telework?<\/p>\n\n\n\n You must possess security clearance eligibility to telework.<\/p>\n\n\n\n Who can be permitted access to classified data?<\/p>\n\n\n\n Only persons with appropriate clearance, a non-disclosure agreement, and need-to-know can access classified data.<\/p>\n\n\n\n A colleague has won 10 high-performance awards, can be playful and charming, is not currently in a relationship, and is occasionally aggressive in trying to access sensitive information. How many potential insiders threat indicators does this employee display?<\/p>\n\n\n\n 1 indicator<\/p>\n\n\n\n A colleague has visited several foreign countries recently, has adequate work quality, speaks openly of unhappiness with U.S. foreign policy, and recently had his car repossessed. How many potential insiders threat indicators does this employee display?<\/p>\n\n\n\n 3 or more indicators<\/p>\n\n\n\n A colleague complains about anxiety and exhaustion, makes coworkers uncomfortable by asking excessive questions about classified projects, and complains about the credit card bills that his wife runs up. How many potential insiders threat indicators does this employee display?<\/p>\n\n\n\n 3 or more indicators<\/p>\n\n\n\n In setting up your personal social networking service account, what email address should you use?<\/p>\n\n\n\n Your personal email address<\/p>\n\n\n\n What information most likely presents a security risk on your personal social networking profile?<\/p>\n\n\n\n Your place of birth<\/p>\n\n\n\n Which of the following is NOT an example of sensitive information?<\/p>\n\n\n\n Press release data<\/p>\n\n\n\n Is it permitted to share an unclassified draft document with a non-DoD professional discussion group?<\/p>\n\n\n\n As long as the document is cleared for public release, you may release it outside of DoD<\/p>\n\n\n\n Which of the following is an example of Protected Health Information (PHI)?<\/p>\n\n\n\n I\u2019ve tried all the answers and it still tells me off. Examples are: Patient names, Social Security numbers, Driver\u2019s license numbers, insurance details, and birth dates<\/p>\n\n\n\n Which of the following represents a good physical security practice?<\/p>\n\n\n\n Use your own security badge, key code, or Common Access Card (CAC)\/Personal Identity Verification (PIC) card.<\/p>\n\n\n\n Which of the following is NOT a good way to protect your identity?<\/p>\n\n\n\n Use a single, complex password for your system and application logons.<\/p>\n\n\n\n Which of the following statements is TRUE about the use of DoD Public Key Infrastructure (PKI) tokens?<\/p>\n\n\n\n Always use DoD PKI tokens within their designated classification level.<\/p>\n\n\n\n Which of the following is NOT a typical means for spreading malicious code?<\/p>\n\n\n\n Patching from a trusted source<\/p>\n\n\n\n Which of the following is a practice that helps to protect you from identity theft?<\/p>\n\n\n\n Ordering a credit report annually<\/p>\n\n\n\n Which of the following is a practice that helps to prevent the download of viruses and other malicious code when checking your email?<\/p>\n\n\n\n Do not access links or hyperlinked media such as buttons and graphics in email messages.<\/p>\n\n\n\n You receive an unexpected email from a friend: \u201cI think you\u2019ll like this: https:\/\/tinyurl.com\/2fcbvy.\u201d What action should you take?<\/p>\n\n\n\n Use TinyURL\u2019s preview feature to investigate where the link leads.<\/p>\n\n\n\n You receive an email from the Internal Revenue Service (IRS) demanding immediate payment of back taxes of which you were not aware. The email provides a website and a toll-free number where you can make payment. What action should you take?<\/p>\n\n\n\n Contact the IRS<\/p>\n\n\n\n When using your government-issued laptop in public environments, with which of the following should you be concerned?<\/p>\n\n\n\n The potential for unauthorized viewing of work-related information displayed on your screen.<\/p>\n\n\n\n Under what circumstances is it acceptable to check personal email on Government-furnished equipment (GFE)?<\/p>\n\n\n\n If your organization allows it.<\/p>\n\n\n\n Which of the following is NOT a best practice to protect data on your mobile computing device?<\/p>\n\n\n\n Lock your device screen when not in use and require a password to reactivate.<\/p>\n\n\n\n When checking in at the airline counter for a business trip, you are asked if you would like to check your laptop bag. This bag contains your government-issued laptop. What should you do?<\/p>\n\n\n\n I\u2019ve tried all the answers and it still tells me off, part 2. Decline So That You Maintain Physical Control of Your Government-Issued Laptop.<\/p>\n\n\n\n How can you protect your information when using wireless technology?<\/p>\n\n\n\n Avoid using non-Bluetooth-paired or unencrypted wireless computer peripherals.<\/p>\n\n\n\n not an example of cui<\/p>\n\n\n\n which is not an example of cui<\/p>\n\n\n\n what is not an example of cui<\/p>\n\n\n\n example of cui cyber awareness<\/p>\n\n\n\n cui examples<\/p>\n\n\n\n examples of cui<\/p>\n\n\n\n examples of cui include<\/p>\n\n\n\n what are examples of cui<\/p>\n\n\n\n what is not an example of cui cyber awareness<\/p>\n\n\n\n which is not an example of cui cyber awareness<\/p>\n\n\n\n cui example<\/p>\n\n\n\n example of cui<\/p>\n\n\n\n examples of controlled unclassified information include<\/p>\n\n\n\n examples of controlled unclassified information includes<\/p>\n\n\n\n what are examples of controlled unclassified information<\/p>\n\n\n\n what is considered cui<\/p>\n\n\n\n controlled unclassified information examples<\/p>\n\n\n\n correct way to protect cui<\/p>\n\n\n\n cui cyber awareness<\/p>\n\n\n\n cui protection<\/p>\n\n\n\n examples of controlled unclassified information<\/p>\n\n\n\n how to protect cui cyber awareness<\/p>\n\n\n\n is pii controlled unclassified information<\/p>\n\n\n\n not a correct way to store cui<\/p>\n\n\n\n what is considered cui data<\/p>\n\n\n\n what is controlled unclassified information basic<\/p>\n\n\n\n what is cui data<\/p>\n\n\n\n what is not a correct way to protect cui<\/p>\n\n\n\n a cui<\/p>\n\n\n\n controlled classified information<\/p>\n\n\n\n controlled unclassified information<\/p>\n\n\n\n cui controlled unclassified information<\/p>\n\n\n\n cui cyber security<\/p>\n\n\n\n cui data classification<\/p>\n\n\n\n cui documents<\/p>\n\n\n\n cui security<\/p>\n\n\n\n cui security classification<\/p>\n\n\n\n cui vs unclassified<\/p>\n\n\n\n cyber awareness cui<\/p>\n\n\n\n define controlled unclassified information<\/p>\n\n\n\n examples of controlled unclassified information cui include<\/p>\n\n\n\n is pii cui<\/p>\n\n\n\n is press release data cui<\/p>\n\n\n\n protecting cui<\/p>\n\n\n\n what cui basic<\/p>\n\n\n\n what is a controlled unclassified information<\/p>\n\n\n\n what is a cui<\/p>\n\n\n\n what is considered controlled unclassified information<\/p>\n\n\n\n what is controlled unclassified information<\/p>\n\n\n\n what is controlled unclassified information cui<\/p>\n\n\n\n what is cui cyber awareness<\/p>\n\n\n\n what is the correct way to protect cui<\/p>\n\n\n\n who is responsible for protecting cui markings and dissemination instructions<\/p>\n\n\n\n army cui<\/p>\n\n\n\n classification cui<\/p>\n\n\n\n controlled technical information<\/p>\n\n\n\n controlled unclassified info<\/p>\n\n\n\n controlled unclassified information categories<\/p>\n\n\n\n controlled unclassified information cui<\/p>\n\n\n\n controlled unclassified information marking<\/p>\n\n\n\n controlled unclassified information markings<\/p>\n\n\n\n controlled unclassified information registry<\/p>\n\n\n\n cui basic<\/p>\n\n\n\n cui classification<\/p>\n\n\n\n cui defined<\/p>\n\n\n\n cui distribution<\/p>\n\n\n\n cui documents must be reviewed<\/p>\n\n\n\n cui guidance<\/p>\n\n\n\n cui guide<\/p>\n\n\n\n cui markings<\/p>\n\n\n\n cui means<\/p>\n\n\n\n cui pii<\/p>\n\n\n\n cui registry<\/p>\n\n\n\n cui requirements<\/p>\n\n\n\n cui security classification guide<\/p>\n\n\n\n cui specified<\/p>\n\n\n\n cui transmission<\/p>\n\n\n\n define cui<\/p>\n\n\n\n definition of controlled unclassified information<\/p>\n\n\n\n how to protect cui<\/p>\n\n\n\n how to store cui<\/p>\n\n\n\n in order to obtain access to cui<\/p>\n\n\n\n information may be cui in accordance with<\/p>\n\n\n\n marking controlled unclassified information<\/p>\n\n\n\n protect cui<\/p>\n\n\n\n protecting cui includes which steps<\/p>\n\n\n\n security cui<\/p>\n\n\n\n types of cui<\/p>\n\n\n\n unclassified cui<\/p>\n\n\n\n unclassified information<\/p>\n\n\n\n what cui<\/p>\n\n\n\n what is controlled unclassified information specified<\/p>\n\n\n\n what is cui basic<\/p>\n\n\n\n what is cui dod<\/p>\n\n\n\n what is cui information<\/p>\n\n\n\n what is cui specific<\/p>\n\n\n\n what level of system and network is required for cui<\/p>\n\n\n\n when destroying or disposing of classified information you must<\/p>\n\n\n\n 32 cfr part 2002<\/p>\n\n\n\n air force cui<\/p>\n\n\n\n army controlled unclassified information training<\/p>\n\n\n\n at the time of creation of cui<\/p>\n\n\n\n can cui<\/p>\n\n\n\n can cui be stored in a locked desk<\/p>\n\n\n\n can cui be stored on any password protected system<\/p>\n\n\n\n controlled unclassified information cover sheet<\/p>\n\n\n\n controlled unclassified information cui awareness training<\/p>\n\n\n\n controlled unclassified information meaning<\/p>\n\n\n\n controlled unclassified information training<\/p>\n\n\n\n controlled unclassified information training army<\/p>\n\n\n\n correct banner marking for unclassified documents with cui<\/p>\n\n\n\n cui<\/p>\n\n\n\n cui acronym<\/p>\n\n\n\n cui army<\/p>\n\n\n\n cui basic definition<\/p>\n\n\n\n cui categories<\/p>\n\n\n\n cui category<\/p>\n\n\n\n cui classification marking<\/p>\n\n\n\n cui data<\/p>\n\n\n\n cui definition<\/p>\n\n\n\n cui distribution statement<\/p>\n\n\n\n cui distribution statements<\/p>\n\n\n\n cui dod<\/p>\n\n\n\n cui government<\/p>\n\n\n\n cui includes information traditionally marked as<\/p>\n\n\n\n cui information<\/p>\n\n\n\n cui labeling<\/p>\n\n\n\n cui marking examples<\/p>\n\n\n\n cui marking handbook<\/p>\n\n\n\n cui markings dod<\/p>\n\n\n\n cui meaning<\/p>\n\n\n\n cui navy<\/p>\n\n\n\n cui specified definition<\/p>\n\n\n\n cui stands for<\/p>\n\n\n\n cui.<\/p>\n\n\n\n definition of cui<\/p>\n\n\n\n dod cui instruction<\/p>\n\n\n\n dod cui marking examples<\/p>\n\n\n\n dod cui markings<\/p>\n\n\n\n is proprietary data cui<\/p>\n\n\n\n it is mandatory to include a banner<\/p>\n\n\n\n it is mandatory to include a banner marking<\/p>\n\n\n\n level of system and network configuration is required for cui<\/p>\n\n\n\n navy cui<\/p>\n\n\n\n sensitive unclassified information<\/p>\n\n\n\n the correct banner for unclassified documents with cui is<\/p>\n\n\n\n the correct banner marking for unclassified documents with cui is<\/p>\n\n\n\n understanding that protection of sensitive unclassified information is<\/p>\n\n\n\n understanding that protection of sensitive unclassified information is:<\/p>\n\n\n\n what dod instructions implements the dod cui program<\/p>\n\n\n\n what does cui mean<\/p>\n\n\n\n what is basic cui<\/p>\n\n\n\n what is cui specified<\/p>\n\n\n\n what is the goal of destroying cui<\/p>\n\n\n\n which of the following individuals can access classified data<\/p>\n\n\n\n who can control cui<\/p>\n\n\n\n who is responsible for applying cui markings<\/p>\n\n\n\n who is responsible for protecting cui<\/p>\n\n\n\n 32 cfr 2002<\/p>\n\n\n\n army controlled unclassified information<\/p>\n\n\n\n army cui training<\/p>\n\n\n\n army unclassified<\/p>\n\n\n\n at the time of creation of cui material<\/p>\n\n\n\n at the time of creation of cui material the authorized<\/p>\n\n\n\n can cui be emailed if encrypted<\/p>\n\n\n\n cmmc cui<\/p>\n\n\n\n controlled unclassified information army<\/p>\n\n\n\n controlled unclassified information dod<\/p>\n\n\n\n cui army training<\/p>\n\n\n\n cui banner<\/p>\n\n\n\n cui banner marking<\/p>\n\n\n\n cui category markings<\/p>\n\n\n\n cui cdi<\/p>\n\n\n\n cui cmmc<\/p>\n\n\n\n cui date<\/p>\n\n\n\n cui designation indicator<\/p>\n\n\n\n cui documents must be reviewed according to which<\/p>\n\n\n\n cui documents must be reviewed according to which procedures<\/p>\n\n\n\n cui documents must be reviewed to which procedures before destruction<\/p>\n\n\n\n cui email<\/p>\n\n\n\n cui email marking<\/p>\n\n\n\n cui fouo<\/p>\n\n\n\n cui marking<\/p>\n\n\n\n cui marking guidance<\/p>\n\n\n\n cui marking guide<\/p>\n\n\n\n cui stand for<\/p>\n\n\n\n cui training<\/p>\n\n\n\n cui training air force<\/p>\n\n\n\n cui vs fouo<\/p>\n\n\n\n cui’s<\/p>\n\n\n\n dod controlled unclassified information<\/p>\n\n\n\n dod controlled unclassified information training<\/p>\n\n\n\n dod cui guidance<\/p>\n\n\n\n dod cui program instruction<\/p>\n\n\n\n dod instruction cui program<\/p>\n\n\n\n dod instruction implements the dod cui program<\/p>\n\n\n\n dod mandatory controlled unclassified information<\/p>\n\n\n\n eo 13556<\/p>\n\n\n\n executive order 13556<\/p>\n\n\n\n fouo vs cui<\/p>\n\n\n\n how long is your nda applicable<\/p>\n\n\n\n how should you protect a printed classified document<\/p>\n\n\n\n is financial information cui<\/p>\n\n\n\n isoo cui<\/p>\n\n\n\n isoo cui registry<\/p>\n\n\n\n isoo registry<\/p>\n\n\n\n marking cui<\/p>\n\n\n\n proprietary data cui<\/p>\n\n\n\n unclasified<\/p>\n\n\n\n unclassifed<\/p>\n\n\n\n unclassified<\/p>\n\n\n\n under what circumstances could unclassified information be considered a threat<\/p>\n\n\n\n under which circumstances is it permitted to share an unclassified<\/p>\n\n\n\n what dod instruction implements cui<\/p>\n\n\n\n what dod instruction implements cui program<\/p>\n\n\n\n what dod instruction implements dod cui program<\/p>\n\n\n\n what dod instruction implements the cui program<\/p>\n\n\n\n what dod instruction implements the dod cui<\/p>\n\n\n\n what dod instruction implements the dod cui program<\/p>\n\n\n\n what does cui stand for<\/p>\n\n\n\n what is cui<\/p>\n\n\n\n what is fouo<\/p>\n\n\n\n what is purpose of isoo cui registry<\/p>\n\n\n\n what is sensitive unclassified information<\/p>\n\n\n\n what is the purpose of the isoo cui registry<\/p>\n\n\n\n what level of system is required for cui<\/p>\n\n\n\n what marking banner and footer<\/p>\n\n\n\n which of the following is true about markings<\/p>\n\n\n\n which of the following is true about unclassified data<\/p>\n\n\n\n which of the following may help to prevent inadvertent spillage<\/p>\n\n\n\n who can decontrol cui<\/p>\n\n\n\n who is responsible for applying cui markings and dissemination<\/p>\n\n\n\n why is cui important<\/p>\n\n\n\n 2002 date<\/p>\n\n\n\n 2002 h<\/p>\n\n\n\n 200squared<\/p>\n\n\n\n 2022 cyber awareness challenge<\/p>\n\n\n\n 32 2002<\/p>\n\n\n\n 32 cfr 2002 controlled unclassified information<\/p>\n\n\n\n 32 cfr part 2002 controlled unclassified information<\/p>\n\n\n\n 32 part<\/p>\n\n\n\n access to classified information<\/p>\n\n\n\n access to sensitive or restricted information is controlled describes which<\/p>\n\n\n\n adversaries mc<\/p>\n\n\n\n af cyber awareness challenge<\/p>\n\n\n\n air force cyber awareness challenge<\/p>\n\n\n\n air force fouo cover sheet<\/p>\n\n\n\n all classified<\/p>\n\n\n\n application sensitive but unclassified sbu<\/p>\n\n\n\n army cyber awareness 2022<\/p>\n\n\n\n army jko cyber awareness<\/p>\n\n\n\n army privacy act cover sheet<\/p>\n\n\n\n army sipr email address format<\/p>\n\n\n\n army unclassified powerpoint template<\/p>\n\n\n\n banner markings identify the<\/p>\n\n\n\n c ui<\/p>\n\n\n\n can 2002<\/p>\n\n\n\n cbt cyber security<\/p>\n\n\n\n compressed url cyber awareness<\/p>\n\n\n\n controlled government<\/p>\n\n\n\n critical unclassified information is sometimes<\/p>\n\n\n\n ctp requirements<\/p>\n\n\n\n cui can<\/p>\n\n\n\n cui cbt<\/p>\n\n\n\n cui certification<\/p>\n\n\n\n cui compliance<\/p>\n\n\n\n cui cover sheet<\/p>\n\n\n\n cui cti<\/p>\n\n\n\n cui cui<\/p>\n\n\n\n cui dfars<\/p>\n\n\n\n cui fedcon<\/p>\n\n\n\n cui itar<\/p>\n\n\n\n cui label<\/p>\n\n\n\n cui labels<\/p>\n\n\n\n cui propin<\/p>\n\n\n\n cui training army<\/p>\n\n\n\n cui.me<\/p>\n\n\n\n cui\/\/sp-cti<\/p>\n\n\n\n cyber awareness cbt<\/p>\n\n\n\n cyber awareness challenge 2022<\/p>\n\n\n\n cyber awareness challenge 2022 cheat code<\/p>\n\n\n\n cyber awareness challenge insider threat<\/p>\n\n\n\n cyber awareness challenge jko<\/p>\n\n\n\n cyber awareness how can you protect yourself from internet hoaxes<\/p>\n\n\n\n cyber awareness jko<\/p>\n\n\n\n cyber awareness training 2022<\/p>\n\n\n\n cyber awarness 2022<\/p>\n\n\n\n cyber security cbt<\/p>\n\n\n\n define counterintelligence<\/p>\n\n\n\n dfars cui<\/p>\n\n\n\n disclosure con<\/p>\n\n\n\n dod 5200.48<\/p>\n\n\n\n dod cui training<\/p>\n\n\n\n dod cyber awareness challenge 2022<\/p>\n\n\n\n dod instruction 5200.48<\/p>\n\n\n\n dod mandatory controlled unclassified information cui training<\/p>\n\n\n\n dod mandatory controlled unclassified information training<\/p>\n\n\n\n dod mandatory cui training<\/p>\n\n\n\n dodi 5200.48<\/p>\n\n\n\n email marking<\/p>\n\n\n\n example of near field communication cyber awareness<\/p>\n\n\n\n good practice to prevent spillage<\/p>\n\n\n\n how can you avoid downloading malicious code cyber awareness challenge<\/p>\n\n\n\n how can you protect yourself from internet hoaxes<\/p>\n\n\n\n how can you protect yourself from internet hoaxes cyber awareness<\/p>\n\n\n\n how can you protect yourself from social engineering cyber awareness<\/p>\n\n\n\n how long is your non disclosure agreement applicable<\/p>\n\n\n\n how long is your non-disclosure agreement applicable<\/p>\n\n\n\n how many insider threat indicators does alex<\/p>\n\n\n\n how many insider threat indicators does alex demonstrate<\/p>\n\n\n\n how should you respond to the theft of your identity<\/p>\n\n\n\n how to prevent spillage cyber awareness<\/p>\n\n\n\n how to protect yourself from internet hoaxes<\/p>\n\n\n\n i hate cbts cyber awareness<\/p>\n\n\n\n identify the correct and incorrect statements about executive orders.<\/p>\n\n\n\n if you are a military personnel and you knowingly leaked<\/p>\n\n\n\n ihatecbts cyber awareness 2022<\/p>\n\n\n\n inadvertent spillage<\/p>\n\n\n\n information may be cui in accordance with executive order 13526<\/p>\n\n\n\n intentional unauthorized disclosure of classified information<\/p>\n\n\n\n internet hoaxes cyber awareness<\/p>\n\n\n\n is it permitted to share an unclassified draft document<\/p>\n\n\n\n is press release data sensitive information<\/p>\n\n\n\n is whistleblowing the same as reporting an unauthorized disclosure<\/p>\n\n\n\n isoo cui registry purpose<\/p>\n\n\n\n isso cui registry<\/p>\n\n\n\n itar cui<\/p>\n\n\n\n itar vs cui<\/p>\n\n\n\n jko cyber awareness<\/p>\n\n\n\n jko cyber awareness 2022 answers<\/p>\n\n\n\n jko cyber security<\/p>\n\n\n\n malicious code cyber awareness<\/p>\n\n\n\n mc requirements<\/p>\n\n\n\n near field communication cyber awareness<\/p>\n\n\n\n near field communication cyber awareness 2022<\/p>\n\n\n\n network configuration for cui<\/p>\n\n\n\n non federal systems<\/p>\n\n\n\n opsec is a dissemination control category<\/p>\n\n\n\n opsec is a dissemination control category within the cui program<\/p>\n\n\n\n penalties for unauthorized disclosure of classified information<\/p>\n\n\n\n portion mark<\/p>\n\n\n\n portion markings<\/p>\n\n\n\n possible effect of malicious code<\/p>\n\n\n\n prevent spillage<\/p>\n\n\n\n purpose of isoo cui registry<\/p>\n\n\n\n relates to reporting of gross mismanagement and\/or abuse of authority<\/p>\n\n\n\n requirements to access classified information<\/p>\n\n\n\n sensitive but unclassified<\/p>\n\n\n\n spillage definition cyber awareness<\/p>\n\n\n\n the act of publicly documenting and sharing information is called<\/p>\n\n\n\n the whistleblower protection enhancement act relates to reporting<\/p>\n\n\n\n transfer email from nipr to sipr<\/p>\n\n\n\n unauthorized disclosure of classified<\/p>\n\n\n\n unauthorized disclosure of classified information<\/p>\n\n\n\n unauthorized disclosure of classified information for dod and industry<\/p>\n\n\n\n unauthorized disclosure of information classified as confidential<\/p>\n\n\n\n unclassified banner<\/p>\n\n\n\n unclassified cover sheet<\/p>\n\n\n\n unclassified resume<\/p>\n\n\n\n unnpi<\/p>\n\n\n\n what can malicious code do cyber awareness challenge<\/p>\n\n\n\n what dod instruction implements the dod program<\/p>\n\n\n\n what is a possible effect of malicious code<\/p>\n\n\n\n what is a possible effect of malicious code cyber awareness<\/p>\n\n\n\n what is a protection against internet hoaxes<\/p>\n\n\n\n what is a protection against internet hoaxes cyber awareness<\/p>\n\n\n\n what is controlled<\/p>\n\n\n\n what is possible effect of malicious code<\/p>\n\n\n\n what is protection against internet hoaxes<\/p>\n\n\n\n what is purpose of the isoo cui registry<\/p>\n\n\n\n what is required for an individual to access classified data<\/p>\n\n\n\n what is sensitive compartmented information cyber awareness 2022<\/p>\n\n\n\n what is spillage cyber awareness<\/p>\n\n\n\n what is spillage in cyber awareness<\/p>\n\n\n\n what is the possible effect of malicious code<\/p>\n\n\n\n what is the purpose of isoo cui registry<\/p>\n\n\n\n what is the purpose of the isoo registry<\/p>\n\n\n\n what level of damage can the unauthorized disclosure of information<\/p>\n\n\n\n what security risk does a public wi-fi connection pose<\/p>\n\n\n\n what should the owner of this printed sci do differently<\/p>\n\n\n\n what should you do if you suspect spillage has occurred<\/p>\n\n\n\n what threat do insiders with authorized<\/p>\n\n\n\n what threat do insiders with authorized access to information<\/p>\n\n\n\n what threat do insiders with authorized access to information pose<\/p>\n\n\n\n when can you check personal email on your gfe<\/p>\n\n\n\n when using social networking services the penalties for ignoring requirements<\/p>\n\n\n\n which of the following individuals can access classified data 2022<\/p>\n\n\n\n which of the following is an<\/p>\n\n\n\n which of the following is an example of nfc<\/p>\n\n\n\n which of the following is good practice to prevent spillage<\/p>\n\n\n\n which of the following is not an<\/p>\n\n\n\n which of the following is true about protecting classified data<\/p>\n\n\n\n which of the following is true of protecting classified data<\/p>\n\n\n\n which of the following may help prevent spillage<\/p>\n\n\n\n which of the following may help to prevent spillage<\/p>\n\n\n\n which of the following represents a good physical security practice<\/p>\n\n\n\n which of these is true of unclassified data<\/p>\n\n\n\n whistleblowing should be used to report which of the following<\/p>\n\n\n\n who is responsible for applying cui markings and dissemination instructions<\/p>\n\n\n\n working papers must be remarked within<\/p>\n\n\n\n Which of the following is an example of malicious code? Software that install itself without the user’s knowledge.<\/p>\n\n\n\n It is getting late on Friday. You are reviewing your employees annual self evaluation. Your comments are due on Monday. You can email your employees information to yourself so you can work on it this weekend and go home now. Which method would be the BEST way to send this information? What should you do if someone asks to use your government issued mobile device (phone\/laptop..etc)? Where should you store PII \/ PHI? Of the following, which is NOT an intelligence community mandate for passwords? Which of the following is NOT Government computer misuse? Which is NOT a telework guideline? What should you do if someone forgets their access badge (physical access)? What can you do to protect yourself against phishing? What should you do to protect classified data? What action is recommended when somebody calls you to inquire about your work environment or specific account information? If classified information were released, which classification level would result in “Exceptionally grave damage to national security”? Which of the following is NOT considered sensitive information? Which of the following is NOT a criterion used to grant an individual access to classified data? Of the following, which is NOT a problem or concern of an Internet hoax? Media containing Privacy Act information, PII, and PHI is not required to be labeled. Which of the following is NOT a home security best practice? Which of the following best describes wireless technology? You are leaving the building where you work. What should you do? Which of the following is a good practice to avoid email viruses? What is considered a mobile computing device and therefore shouldn’t be plugged in to your Government computer? Which is NOT a way to protect removable media? What is NOT Personally Identifiable Information (PII)? Of the following, which is NOT a method to protect sensitive information? There are many travel tips for mobile computing. Which of the following is NOT one? The use of webmail is What is considered ethical use of the Government email system? Which of the following attacks target high ranking officials and executives? What constitutes a strong password? You are logged on to your unclassified computer and just received an encrypted email from a co-worker. The email has an attachment whose name contains the word “secret”. What should you do? Which is a way to protect against phishing attacks? You receive an email from a company you have an account with. The email states your account has been compromised and you are invited to click on the link in order to reset your password. What action should you take? You are having lunch at a local restaurant outside the installation, and you find a cd labeled “favorite song”. What should you do? How should you securely transport company information on a removable media? Should you always label your removable media? Which of the following is NOT Protected Health Information (PHI)? If authorized, what can be done on a work computer? Spear Phishing attacks commonly attempt to impersonate email from trusted entities. What security device is used in email to verify the identity of sender? What type of security is “part of your responsibility” and “placed above all else?” If your wireless device is improperly configured someone could gain control of the device? T\/F Which of the following is a proper way to secure your CAC\/PIV? What actions should you take prior to leaving the work environment and going to lunch? P2P (Peer-to-Peer) software can do the following except: How can you guard yourself against Identity theft? When leaving your work area, what is the first thing you should do? Using webmail may bypass built in security features. Of the following, which is NOT a characteristic of a phishing attempt? Classified Information can only be accessed by individuals with Which of the following definitions is true about disclosure of confidential information? It is permissible to release unclassified information to the public prior to being cleared. Which of the following is NOT sensitive information? What should you do to protect yourself while on social networks? Which is NOT a method of protecting classified data? What can you do to prevent spillage? Which of the following makes Alex’s personal information vulnerable to attacks by identity thieves? DoD employees are prohibited from using a DoD CAC in card-reader-enabled public device Which of the following is an example of malicious code? Which of the following is NOT PII? Classified Information is Maria is at home shopping for shoes on Amazon.com. Before long she has also purchased shoes from several other websites. What can be used to track Maria’s web browsing habits? Which is an untrue statement about unclassified data? A medium secure password has at least 15 characters and one of the following. PII, PHI, and financial information is classified as what type of information? The CAC\/PIV is a controlled item and contains certificates for: An individual who has attempted to access sensitive information without need-to-know and has made unusual requests for sensitive information is displaying indicators of what? Which of the following is NOT a social engineering tip? Bob, a coworker, has been going through a divorce, has financial difficulties and is displaying hostile behavior. How many potential insider threat indicators is Bob displaying? You are working at your unclassified system and receive an email from a coworker containing a classified attachment. What should you do? You check your bank statement and see several debits you did not authorize. You believe that you are a victim of identity theft. Which of the following should you do immediately? Thumb drives, memory sticks, and flash drives are examples of What information relates to the physical or mental health of an individual? What should be done if you find classified Government Data\/Information Not Cleared for Public Release on the Internet? All https sites are legitimate and there is no risk to entering your personal info online. When using a fax machine to send sensitive information, the sender should do which of the following? What should be done to protect against insider threats? Which of the following is NOT a potential insider threat? Of the following, which is NOT a security awareness tip? ActiveX is a type of this? Which of the following is NOT a security best practice when saving cookies to a hard drive? Which is NOT a requirement for telework? Someone calls from an unknown number and says they are from IT and need some information about your computer. What should you do? Which is NOT a wireless security practice? Malicious code can do the following except? What type of data must be handled and stored properly based on classification markings and handling caveats? What information should you avoid posting on social networking sites? A coworker has left an unknown CD on your desk. What should you do? Which of the following is NOT a DoD special requirement for tokens? UNCLASSIFIED is a designation to mark information that does not have potential to damage national security. You receive a call on your work phone and you’re asked to participate in a phone survey. As part of the survey the caller asks for birth date and address. What type of attack might this be? “Spillage” occurs when What should be done to sensitive data on laptops and other mobile computing devices? Which of the following should be done to keep your home computer secure? How are Trojan horses, worms, and malicious scripts spread? The following practices help prevent viruses and the downloading of malicious code except. Questions and Answers<\/p>\n\n\n\n <\/p>\n","protected":false},"excerpt":{"rendered":" This article will provide you with all the questions and answers for Cyber Awareness Challenge. ActiveX is a type of this? -Mobile code All https sites are legitimate and there is no risk to entering your personal info online. -FALSE Bob, a coworker, has been going through a divorce, has financial difficulties and is displaying […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[25],"tags":[],"class_list":["post-117147","post","type-post","status-publish","format-standard","hentry","category-exams-certification"],"_links":{"self":[{"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/posts\/117147","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/comments?post=117147"}],"version-history":[{"count":0,"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/posts\/117147\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/media?parent=117147"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/categories?post=117147"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.learnexams.com\/blog\/wp-json\/wp\/v2\/tags?post=117147"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
Which of the following may be helpful to prevent spillage?<\/p>\n\n\n\n
Which of the following may be helpful to prevent spillage?<\/p>\n\n\n\n\n
Which type of information could reasonably be expected to cause serious damage to national security if disclosed without authorization?<\/li>\n<\/ul>\n\n\n\n
What is a good practice to protect classified information?<\/p>\n\n\n\n
Based on the description below how many potential insider threat indicators are present? A colleague often makes others uneasy by being persistent in trying to obtain information about classified projects to which he has no access, is boisterous about his wife putting them in credit card debt, and often complains about anxiety and exhaustion display?<\/p>\n\n\n\n
What threat do insiders with authorized access to information or information systems pose?<\/p>\n\n\n\n
Which of the following is NOT considered a potential insider threat indicator?<\/p>\n\n\n\n
When may you be subject to criminal, disciplinary, and\/or administrative action due to online misconduct?<\/p>\n\n\n\n
When is the safest time to post details of your vacation activities on your social networking profile?<\/p>\n\n\n\n
Which of the following is a security best practice when using social networking sites?<\/p>\n\n\n\n
Which of the following is NOT an example of CUI?<\/p>\n\n\n\n
Which of the following is NOT a correct way to protect CUI?<\/p>\n\n\n\n
Social security number: 123-45-6789<\/p>\n\n\n\n
At which Cyberspace Protection Condition (CPCON) is the priority focus on critical and essential functions?<\/p>\n\n\n\n
Within a secure area, you see an individual who you do not know and is not wearing a visible badge<\/p>\n\n\n\n
What certificates does the Common Access Card (CAC) or Personal Identity Verification (PIV) card contain?<\/p>\n\n\n\n
Which of the following is an example of a strong password?<\/p>\n\n\n\n
When faxing Sensitive Compartmented Information (SCI), what actions should you take?<\/p>\n\n\n\n
When is it appropriate to have your security badge visible within a sensitive compartmented information facility (SCIF)?<\/p>\n\n\n\n
What action should you take when using removable media in a Sensitive Compartmented Information Facility (SCIF)?<\/p>\n\n\n\n
Which of the following is NOT a way malicious code spreads?<\/p>\n\n\n\n
Which of the following statements is true of cookies?<\/p>\n\n\n\n
How can you protect yourself from internet hoaxes?<\/p>\n\n\n\n
How can you protect yourself from social engineering?<\/p>\n\n\n\n
What action should you take with an e-mail from a friend containing a compressed Uniform Resource Locator (URL)?<\/p>\n\n\n\n
Which of the following is a concern when using your Government-issued laptop in public?<\/p>\n\n\n\n
What is a critical consideration on using cloud-based file sharing and storage applications on your Government-furnished equipment (GFE)?<\/p>\n\n\n\n
Which of the following is an example of near field communication (NFC)?<\/p>\n\n\n\n
Which of the following is an example of removable media?<\/p>\n\n\n\n
Which of the following is a best practice for securing your home computer?<\/p>\n\n\n\n
After reading an online story about a new security project being developed on the military installation where you work, your neighbor asks you to comment about the article. You know this project is classified. What should be your response?<\/p>\n\n\n\n
Which of the following may help prevent inadvertent spillage?<\/p>\n\n\n\n
A user writes down details marked as Secret from a report stored on a classified system and uses those details to draft a briefing on an unclassified system without authorization. What is the best choice to describe what has occurred?<\/p>\n\n\n\n
What should you do when you are working on an unclassified system and receive an email with a classified attachment?<\/p>\n\n\n\n
What should you do if a reporter asks you about potentially classified information on the web?<\/p>\n\n\n\n
.What should you do if a reporter asks you about potentially classified information on the web?<\/p>\n\n\n\n
What is a proper response if spillage occurs?<\/p>\n\n\n\n
Which of the following is a good practice to aid in preventing spillage?<\/p>\n\n\n\n
When classified data is not in use, how can you protect it?<\/p>\n\n\n\n
What is required for an individual to access classified data?<\/p>\n\n\n\n
Which classification level is given to information that could reasonably be expected to cause serious damage to national security?<\/p>\n\n\n\n
What is a good practice to protect classified information?<\/p>\n\n\n\n
Which of the following is true of protecting classified data?<\/p>\n\n\n\n
Which of the following can an unauthorized disclosure of information classified as Confidential reasonably be expected to cause?<\/p>\n\n\n\n
Which of the following is NOT considered a potential insider threat indicator?<\/p>\n\n\n\n
A colleague has visited several foreign countries recently, has adequate work quality, speaks openly of unhappiness with U.S. foreign policy, and recently had his car repossessed. How many potential insider threat indicators does this employee display?<\/p>\n\n\n\n
~3 or more indicators<\/p>\n\n\n\n
A colleague vacations at the beach every year, is married and a father of four, his work quality is sometimes poor, and he is pleasant to work with. How many potential insider threat indicators does this employee display?<\/p>\n\n\n\n
How many potential insider threat indicators does a coworker who often makes others uneasy by being persistent in trying to obtain information about classified projects to which he has no access, is boisterous about his wife putting them in credit card debt, and often complains about anxiety and exhaustion display?<\/p>\n\n\n\n
How many potential insider threat indicators does a person who is playful and charming, consistently wins performance awards, but is occasionally aggressive in trying to access sensitive information display?<\/p>\n\n\n\n
What advantages do \u201cinsider threats\u201d have over others that allows them to cause damage to their organizations more easily?<\/p>\n\n\n\n
What type of activity or behavior should be reported as a potential insider threat?<\/p>\n\n\n\n
Which of the following should be reported as a potential security incident?<\/p>\n\n\n\n
Which of the following should be reported as a potential security incident (in accordance with you Agency\u2019s insider threat policy)?<\/p>\n\n\n\n
When is the safest time to post details of your vacation activities on your social networking website?<\/p>\n\n\n\n
What should you do if you receive a game application request that includes permission to access your friends, profile information, cookies, and sires visited?<\/p>\n\n\n\n
Under which circumstances is it permitted to share an unclassified draft document with a non-DoD professional discussion group?<\/p>\n\n\n\n
What is the best example of Personally Identifiable Information (PII)?<\/p>\n\n\n\n
Which of the following is the best example of Personally Identifiable Information (PII)?<\/p>\n\n\n\n
Which of the following is an example of Protected Health Information (PHI)?<\/p>\n\n\n\n
What type of unclassified material should always be marked with a special handling caveat?<\/p>\n\n\n\n
Under what circumstances could classified information be considered a threat to national security?<\/p>\n\n\n\n
What is a good practice for physical security?<\/p>\n\n\n\n
At which Cyberspace Protection Condition (CPCON) is the priority focus on critical functions only?<\/p>\n\n\n\n
Your DoD Common Access Card (CAC) has a Public Key Infrastructure (PKI) token approved for access to the NIPRNet. In which situation below are you permitted to use your PKI token?<\/p>\n\n\n\n
Which of the following is the nest description of two-factor authentication?<\/p>\n\n\n\n
Which is NOT a sufficient way to protect your identity?<\/p>\n\n\n\n
What is the best way to protect your Common Access Card (CAC)?<\/p>\n\n\n\n
What is a Sensitive Compartmented Information (SCI) program?<\/p>\n\n\n\n
Which of the following best describes the compromise of Sensitive Compartmented Information (SCI)?<\/p>\n\n\n\n
When should documents be marked within a Sensitive Compartmented Information Facility (SCIF)<\/p>\n\n\n\n
Unclassified documents do not need to be marked as a SCIF.
Only paper documents that are in open storage need to be marked.
Only documents that are classified Secret, Top Secret, or SCI require marking. (Wrong)<\/p>\n\n\n\n
Which must be approved and signed by a cognizant Original Classification Authority (OCA)?<\/p>\n\n\n\n
What must users ensure when using removable media such as compact disk (CD)?<\/p>\n\n\n\n
What are some examples of malicious code?<\/p>\n\n\n\n
While you are registering for a conference, you arrive at the website http:\/\/www.dcsecurityconference.org\/registration\/. The website requires a credit card for registration. What should you do?<\/p>\n\n\n\n
Which of the following is a practice that helps to prevent the download of viruses and other malicious code when checking your email?<\/p>\n\n\n\n
What is TRUE of a phishing attack?<\/p>\n\n\n\n
Which of the following is a way to protect against social engineering?<\/p>\n\n\n\n
What is a best practice while traveling with mobile computing devices?<\/p>\n\n\n\n
Under what circumstances is it acceptable to use your Government-furnished computer to check personal e-mail and do other non-work-related activities?<\/p>\n\n\n\n
Which is a rule for removable media, other portable electronic devices (PEDs), and mobile computing devices to protect Government systems?<\/p>\n\n\n\n
Which of the following helps protect data on your personal mobile devices?<\/p>\n\n\n\n
How can you protect your information when using wireless technology?<\/p>\n\n\n\n\n
\n
\n
\n
Use the government email system so you can encrypt the information and open the email on your government issued laptop<\/p>\n\n\n\n
Decline to lend your phone \/ laptop<\/p>\n\n\n\n
Information should be secured in a cabinet or container while not in use<\/p>\n\n\n\n
Maximum password age of 45 days<\/p>\n\n\n\n
Checking work email<\/p>\n\n\n\n
Taking classified documents from your workspace<\/p>\n\n\n\n
Alert the security office<\/p>\n\n\n\n
All of the above<\/p>\n\n\n\n
Answer 1 and 2 are correct<\/p>\n\n\n\n
Ask them to verify their name and office number<\/p>\n\n\n\n
Top Secret<\/p>\n\n\n\n
Sanitized information gathered from personnel records<\/p>\n\n\n\n
Senior government personnel, military or civilian<\/p>\n\n\n\n
Directing you to a website that looks real<\/p>\n\n\n\n
FALSE<\/p>\n\n\n\n
Setting weekly time for virus scan when you are not on the computer and it is powered off<\/p>\n\n\n\n
It is inherently not a secure technology<\/p>\n\n\n\n
Remove your security badge<\/p>\n\n\n\n
Delete email from senders you do not know<\/p>\n\n\n\n
All of the above<\/p>\n\n\n\n
As a best practice, labeling all classified removable media and considering all unlabeled removable media as unclassified<\/p>\n\n\n\n
Hobby<\/p>\n\n\n\n
After work hours, storing sensitive information in unlocked containers, desks, or cabinets if security is not present<\/p>\n\n\n\n
When using a public device with a card reader, only use your DoD CAC to access unclassified information<\/p>\n\n\n\n
is only allowed if the organization permits it<\/p>\n\n\n\n
Distributing Company newsletter<\/p>\n\n\n\n
Whaling<\/p>\n\n\n\n
all of the above<\/p>\n\n\n\n
Contact your security POC right away<\/p>\n\n\n\n
Look for digital certificates<\/p>\n\n\n\n
Notify security<\/p>\n\n\n\n
Leave the cd where it is<\/p>\n\n\n\n
Encrypt the removable media<\/p>\n\n\n\n
Yes<\/p>\n\n\n\n
Medical care facility name<\/p>\n\n\n\n
Check personal email<\/p>\n\n\n\n
Digital Signatures<\/p>\n\n\n\n
Physical<\/p>\n\n\n\n
TRUE<\/p>\n\n\n\n
Remove and take it with you whenever you leave your workstation<\/p>\n\n\n\n
All of the above<\/p>\n\n\n\n
Allow attackers physical access to network assets<\/p>\n\n\n\n
All of the above<\/p>\n\n\n\n
Remove your CAC\/PIV<\/p>\n\n\n\n
TRUE<\/p>\n\n\n\n
Directing you to a web site that is real<\/p>\n\n\n\n
All of the above<\/p>\n\n\n\n
Damage to national security<\/p>\n\n\n\n
False<\/p>\n\n\n\n
Unclassified information cleared for public release<\/p>\n\n\n\n
Validate all friend requests through another source before confirming them<\/p>\n\n\n\n
Assuming open storage is always authorized in a secure facility<\/p>\n\n\n\n
all of the above<\/p>\n\n\n\n
Carrying his Social Security Card with him<\/p>\n\n\n\n
TRUE<\/p>\n\n\n\n
Trojan horses<\/p>\n\n\n\n
Mother’s maiden name<\/p>\n\n\n\n
Assigned a classification level by a supervisor<\/p>\n\n\n\n
Cookies<\/p>\n\n\n\n
If aggregated, the classification of the information may not be changed<\/p>\n\n\n\n
Special character<\/p>\n\n\n\n
Sensitive<\/p>\n\n\n\n
All of the above<\/p>\n\n\n\n
Potential Insider Threat<\/p>\n\n\n\n
Following instructions from verified personnel<\/p>\n\n\n\n
3<\/p>\n\n\n\n
Alert your security POC<\/p>\n\n\n\n
Monitor credit card statements for unauthorized purchases<\/p>\n\n\n\n
Removable media<\/p>\n\n\n\n
PHI<\/p>\n\n\n\n
Make note of any identifying information and the website URL and report it to your security office<\/p>\n\n\n\n
FALSE<\/p>\n\n\n\n
Contact the recipient to confirm receipt<\/p>\n\n\n\n
Report any suspicious behavior<\/p>\n\n\n\n
Member of a religion or faith<\/p>\n\n\n\n
Remove security badge as you enter a restaurant or retail establishment<\/p>\n\n\n\n
Mobile code<\/p>\n\n\n\n
Looking for “https” in the URL. All https sites are legitimate.<\/p>\n\n\n\n
Telework is only authorized for unclassified and confidential information<\/p>\n\n\n\n
Request the user’s full name and phone number<\/p>\n\n\n\n
Turning off computer when not in use<\/p>\n\n\n\n
Make your computer more secure<\/p>\n\n\n\n
Classified<\/p>\n\n\n\n
All of the above<\/p>\n\n\n\n
Put the CD in the trash<\/p>\n\n\n\n
Using NIPRNet tokens on systems of higher classification level<\/p>\n\n\n\n
TRUE<\/p>\n\n\n\n
Social Engineering<\/p>\n\n\n\n
Personal information is inadvertently posted at a website<\/p>\n\n\n\n
Encrypt the sensitive data<\/p>\n\n\n\n
All of the above<\/p>\n\n\n\n
By email attachments<\/p>\n\n\n\n
Scan external files from only unverifiable sources before uploading to computer<\/p>\n\n\n\n\n
A. Something you doExplanation<\/strong>
“Something you do” is not used for multi-factor authentication. Multi-factor authentication typically involves using a combination of two or more factors to verify a user’s identity. These factors can include “something you have” (such as a physical token or a mobile device), “something you know” (such as a password or PIN), and “something you are” (such as biometric data like fingerprints or facial recognition). However, “something you do” refers to behavioral biometrics, which is a separate authentication method that analyzes patterns of behavior, such as typing speed or mouse movements, to verify identity.Rate this question:<\/li>\n\n\n\n
D. Make it numericExplanation<\/strong>
Making a password numeric is actually a best practice for choosing strong passwords. Including numbers in a password adds complexity and makes it harder for attackers to guess or crack the password. Therefore, the given answer is incorrect.Rate this question:<\/li>\n\n\n\n
C. Hiding passwords below keyboardExplanation<\/strong>
The Clean Desk Policy aims to maintain a clutter-free and secure work environment. Tidying your desk, locking your screen, and putting away sensitive documents are all practices that align with this policy. However, hiding passwords below the keyboard is not a part of the Clean Desk Policy. This action poses a security risk as it makes it easier for unauthorized individuals to access sensitive information.Rate this question:<\/li>\n\n\n\n
D. Install any software without approvalExplanation<\/strong>
The correct answer is “Install any software without approval.” This is not a part of the appropriate use – Laptop Security Policy because it can pose a security risk to the laptop and the network. Installing software without approval can introduce malware or other malicious programs, compromise the laptop’s security, and violate company policies. It is important to obtain proper approval before installing any software to ensure the security and integrity of the laptop and the organization’s network.Rate this question:<\/li>\n\n\n\n
B. Use official Email ID for personal purposesExplanation<\/strong>
The statement “Use official Email ID for personal purposes” is not a part of the appropriate use – Email Security Policy. This policy is designed to ensure the security and confidentiality of email communication within an organization. Using official email IDs for personal purposes may compromise the security of sensitive information and increase the risk of unauthorized access or data breaches. It is important to separate personal and official email accounts to maintain the integrity of the organization’s email security policy.Rate this question:<\/li>\n\n\n\n
B. Delete the mailExplanation<\/strong>
When receiving an email from an unknown contact that has an attachment, it is recommended to delete the mail. Opening the attachment can pose a security risk as it may contain malware or viruses that can harm your computer or compromise your personal information. Forwarding the email to co-workers or personal email accounts can potentially spread the risk to others or expose personal information to unauthorized individuals. Therefore, the safest course of action is to delete the email to protect yourself and your system from potential harm.Rate this question:<\/li>\n\n\n\n
B. Disconnect your computer from the network & call the IT Support DeskExplanation<\/strong>
If the mouse on your computer is moving and clicking on things without you touching it, it is likely that your computer has been compromised by malware or a hacker. Disconnecting your computer from the network is important to prevent further unauthorized access or potential damage. Calling the IT Support Desk is necessary to report the incident and seek assistance in resolving the issue and ensuring the security of your computer system.Rate this question:<\/li>\n\n\n\n
D. Www.virustotal.comExplanation<\/strong>
www.virustotal.com is an online malware scanning service that allows users to scan suspicious files and URLs for potential malware or viruses. It provides a comprehensive analysis by using multiple antivirus engines and other tools to detect any malicious content. Users can upload files or enter URLs to be scanned, and the service provides detailed reports on the potential threats found. It is a trusted platform used by individuals and organizations to ensure the safety of their files and websites.Rate this question:<\/li>\n\n\n\n
D. None of the aboveExplanation<\/strong>
The best time to lie to your information security auditor or officer is never. Lying to cover up someone else’s faults or mistakes, or because you don’t trust the auditor, or to protect key people in your organization is unethical and can have serious consequences. It is always best to be honest and transparent with auditors and officers to maintain the integrity and security of the organization’s information.Rate this question:<\/li>\n\n\n\n
B. Disconnect to Starbucks\/CCD WIFI network.Explanation<\/strong>
The correct answer is to disconnect from the Starbucks\/CCD WIFI network. This is because when browsing Google Mail, the page redirects to a suspicious website (http:\/\/www.googlemail.anish.net) instead of the legitimate Google Mail website (https:\/\/mail.google.com\/). This could indicate a potential security threat or a man-in-the-middle attack. To ensure the safety of personal information, it is best to disconnect from the WIFI network to prevent any unauthorized access or data breach.Rate this question:<\/li>\n\n\n\n
B. Install an antivirus program and enable firewall<\/li>\n\n\n\n
B. Shred it using a shredderExplanation<\/strong>
Shredding the hard copy of the design document is the correct answer because it ensures that the sensitive information contained in the document is destroyed and cannot be accessed by unauthorized individuals. This helps to protect the confidentiality of the information and prevent any potential misuse or data breaches. Shredding is a secure and reliable method of disposing of confidential documents.Rate this question:<\/li>\n\n\n\n
B. Creating a situation wherein a third party gains confidential information from youExplanation<\/strong>
Social engineering refers to the act of manipulating individuals into divulging confidential information or performing actions that may compromise their security. This can be done through various techniques such as impersonation, deception, or psychological manipulation. The correct answer states that social engineering involves creating a situation where a third party gains confidential information from the individual, which accurately describes the concept. It is important to be aware of social engineering tactics to protect oneself from potential security breaches.Rate this question:<\/li>\n\n\n\n
C. Any of the aboveExplanation<\/strong>
The correct answer is “Any of the above” because reporting a security incident can be done through various means, including email and phone. This allows individuals to choose the most convenient method for them to report the incident and ensure that it is communicated to the appropriate authorities.Rate this question:<\/li>\n\n\n\n
C. Escort the person to the security and raise a security incidentExplanation<\/strong>
If a non-familiar face is seen in the access controlled areas of the office without any proper identification, the appropriate action would be to escort the person to the security and raise a security incident. This ensures that the person is properly addressed and investigated by the security team, maintaining the safety and security protocols of the office.<\/li>\n<\/ul>\n\n\n\n