Cyber Awareness Challenge 2022 (Incomplete)

*Spillage After reading an online story about a new security project being developed on the military installation where you work, your neighbor asks you to comment about the article. You know that this project is classified. How should you respond?

*Spillage Which of the following may help to prevent spillage?

*Spillage A user writes down details marked as Secret from a report stored on a classified system and uses those details to draft a briefing on an unclassified system without authorization. What is the best choice to describe what has occurred?

*Spillage What should you do when you are working on an unclassified system and receive an email with a classified attachment?

*Spillage What should you do if a reporter asks you about potentially classified information on the web?

*Spillage .What should you do if a reporter asks you about potentially classified information on the web?

*Spillage What should you do if you suspect spillage has occurred?

*Spillage Which of the following is a good practice to prevent spillage?

*Spillage Which of the following actions is appropriate after finding classified information on the Internet?

**Classified Data When classified data is not in use, how can you protect it?

**Classified Data What is required for an individual to access classified data?

**Classified Data Which classification level is given to information that could reasonably be expected to cause serious damage to national security?

**Classified Data Which of the following is a good practice to protect classified information?

**Classified Data Which of the following is true of protecting classified data?

**Classified Data What level of damage can the unauthorized disclosure of information classified as Confidential reasonably be expected to cause?

**Classified Data Which of the following is true of telework?

**Classified Data Which type of information could reasonably be expected to cause serious damage to national security if disclosed without authorization?

**Classified Data How should you protect a printed classified document when it is not in use?

**Insider Threat Based on the description that follows, how many potential insider threat indicator(s) are displayed? A colleague vacations at the beach every year, is married and a father of four, sometimes has poor work quality, and works well with his team.

**Insider Threat How many potential insider threat indicators does a coworker who often makes others uneasy by being persistent in trying to obtain information about classified projects to which he has no access, is boisterous about his wife putting them in credit card debt, and often complains about anxiety and exhaustion display?

**Insider Threat Based on the description that follows, how many potential insider threat indicator(s) are displayed? A colleague is playful and charming, consistently wins performance awards, and is occasionally aggressive in trying to access classified information.

**Insider Threat What advantages do "insider threats" have over others that allows them to cause damage to their organizations more easily?

**Insider Threat What type of activity or behavior should be reported as a potential insider threat?

**Insider Threat Which of the following should be reported as a potential security incident?

**Insider Threat Which scenario might indicate a reportable insider threat?

**Insider Threat Based on the description that follows, how many potential insider threat indicator(s) are displayed? A colleague often makes others uneasy with her persistent efforts to obtain information about classified project where she has no need-to-know, is vocal about her husband overspending on credit cards, and complains about anxiety and exhaustion.

**Insider Threat Which type of behavior should you report as a potential insider threat?

**Insider Threat Which of the following is NOT considered a potential insider threat indicator?

**Social Networking When is the safest time to post details of your vacation activities on your social networking profile?

**Social Networking What should you do if you receive a game application request that includes permission to access your friends, profile information, cookies, and sites visited?

**Social Networking Which of the following information is a security risk when posted publicly on your social networking profile?

**Social Networking Which of the following is a security best practice when using social networking sites?

**Social Networking When may you be subject to criminal, disciplinary, and/or administrative action due to online misconduct?

**Social Networking Which of the following is a security best practice when using social networking sites?

**Social Networking Which of the following information is a security risk when posted publicly on your social networking profile?

**Social Networking Your cousin posted a link to an article with an incendiary headline on social media. What action should you take?

**Social Networking Which of the following best describes the sources that contribute to your online identity?

**Social Networking As someone who works with classified information, what should you do if you are contacted by a foreign national seeking information on a research project?

*Controlled Unclassified Information Which of the following is NOT an example of CUI?

*Controlled Unclassified Information Which of the following is NOT a correct way to protect CUI?

**Physical Security What is a good practice for physical security?

**Physical Security At which Cyberspace Protection Condition (CPCON) is the priority focus on critical functions only?

**Physical Security Which Cyber Protection Condition (CPCON) is the priority focus on critical and essential functions only?

**Physical Security Within a secure area, you see an individual who you do not know and is not wearing a visible badge. What should you do?

**Identity Management Your DoD Common Access Card (CAC) has a Public Key Infrastructure (PKI) token approved for access to the NIPRNet. In which situation below are you permitted to use your PKI token?

**Identity Management Which of the following is the nest description of two-factor authentication?

**Identity management Which is NOT a sufficient way to protect your identity?

**Identity management What is the best way to protect your Common Access Card (CAC)?

**Identity management Which of the following is NOT a best practice to preserve the authenticity of your identity?

**Identity management Which of the following is an example of two-factor authentication?

**Identity management Which of the following is an example of a strong password?

*Sensitive Compartmented Information What is Sensitive Compartmented Information (SCI)?

*Sensitive Compartmented Information Which of the following best describes the compromise of Sensitive Compartmented Information (SCI)?

*Sensitive Compartmented Information When should documents be marked within a Sensitive Compartmented Information Facility (SCIF)

*Sensitive Compartmented Information Which must be approved and signed by a cognizant Original Classification Authority (OCA)?

*Sensitive Compartmented Information What must the dissemination of information regarding intelligence sources, methods, or activities follow?

*Sensitive Compartmented Information When is it appropriate to have your security badge visible?

*Sensitive Compartmented Information What should the owner of this printed SCI do differently?

*Sensitive Compartmented Information What should the participants in this conversation involving SCI do differently?

*Sensitive Compartmented Information When faxing Sensitive Compartmented Information (SCI), what actions should you take?

*Sensitive Compartmented Information What action should you take if you become aware that Sensitive Compartmented Information (SCI) has been compromised?

*Sensitive Compartmented Information What guidance is available for marking Sensitive Compartmented Information (SCI)?

**Removable Media in a SCIF What must users ensure when using removable media such as compact disk (CD)?

**Removable Media in a SCIF What portable electronic devices (PEDs) are allowed in a Sensitive Compartmented Information Facility (SCIF)?

**Removable Media in a SCIF What action should you take when using removable media in a Sensitive Compartmented Information Facility (SCIF)?

*Malicious Code What are some examples of malicious code?

*Malicious Code Which of the following is NOT a way that malicious code spreads?

*Malicious Code After visiting a website on your Government device, a popup appears on your screen. The popup asks if you want to run an application. Is this safe?

**Website Use While you are registering for a conference, you arrive at the website http://www.dcsecurityconference.org/registration/. The website requires a credit card for registration. What should you do?

**Website Use How should you respond to the theft of your identity?

**Website Use Which of the following statements is true of cookies?

**Social Engineering Which is a best practice that can prevent viruses and other malicious code from being downloaded when checking your e-mail?

**Social Engineering What is TRUE of a phishing attack?

**Social Engineering Which of the following is a way to protect against social engineering?

**Social Engineering What is whaling?

**Social Engineering What action should you take with an e-mail from a friend containing a compressed Uniform Resource Locator (URL)?

**Social Engineering How can you protect yourself from internet hoaxes?

**Social Engineering Which may be a security issue with compressed Uniform Resource Locators (URLs)?

**Social Engineering What is a common indicator of a phishing attempt?

**Travel What is a best practice while traveling with mobile computing devices?

**Travel Which of the following is true of traveling overseas with a mobile phone?

**Travel What security risk does a public Wi-Fi connection pose?

**Travel Which of the following is a concern when using your Government-issued laptop in public?

**Use of GFE When can you check personal e-mail on your Government-furnished equipment (GFE)?

**Use of GFE What is a critical consideration on using cloud-based file sharing and storage applications on your Government-furnished equipment (GFE)?

**Mobile Devices Which is a rule for removable media, other portable electronic devices (PEDs), and mobile computing devices to protect Government systems?

**Mobile Devices What can help to protect the data on your personal mobile device?

**Mobile Devices What should you do when going through an airport security checkpoint with a Government-issued mobile device?

**Mobile Devices When can you use removable media on a Government system?

**Mobile Devices Which of the following is an example of removable media?

**Home Computer Security How can you protect your information when using wireless technology?

**Home Computer Security What should you consider when using a wireless keyboard with your home computer?

**Home Computer Security Which of the following is a best practice for securing your home computer?