Cyber Awareness Challenge Exam UPDATE

Cyber Awareness Challenge Exam (UPDATE ) (ACTUAL EXAM ) Questions and Answers

• *Spillage After reading an online story about a new security project being developed on the military installation where you work, your neighbor asks you to com- ment about

the article. You know that this project is classified. How should you respond?:

Attempt to change the subject to something non-work related, but neither confirm nor deny the article's authenticity

• *Spillage

Which of the following may help to prevent spillage?:

Label all files, removable media, and subject headers with appropriate classification markings.

• *Spillage A user writes down details marked as Secret from a report stored on a classified system and uses those details to draft a briefing on an unclassified system without

authorization. What is the best choice to describe what has occurred?:

Spillage because classified data was moved to a lower classification level system without authorization.

• *Spillage What should you do when you are working on an unclassified system and

receive an email with a classified attachment?:

Call your security point of contact immediately

• *Spillage What should you do if a reporter asks you about potentially classified infor- mation

on the web?:

Ask for information about the website, including the URL. 1 / 2

• *Spillage .What should you do if a reporter asks you about potentially classified

information on the web?:

Refer the reporter to your organization's public affairs office.

• *Spillage

What should you do if you suspect spillage has occurred?:

Immediately notify your security point of contact

• *Spillage

Which of the following is a good practice to prevent spillage?:

Be aware of classification markings and all handling caveats.

• *Spillage Which of the following actions is appropriate after finding classified informa- tion on

the Internet?:

Note any identifying information and the website's Uniform Resource Locator (URL)

• **Classified Data

When classified data is not in use, how can you protect it?:

Store classified data appropriately in a GSA-approved vault/container.

• **Classified Data

What is required for an individual to access classified data?:

Appropriate clearance, a signed and approved non-disclosure agreement, and need-to-know

• **Classified Data Which classification level is given to information that could reasonably be

expected to cause serious damage to national security?:

Secret

• / 2