Ensure proper labeling by appropriately marking all classified material. A colleague abruptly becomes hostile and unpleasant after previously enjoying positive working relationships with peers, purchases an unusually expensive new car, and has unexplained absences from work. Maintain visual or physical control of the device. Is this safe? It is not corporate intellectual property unless created for or included in requirements related to a government contract. *Social Networking UNCLASSIFIED - CLASSIFICATION MARKINGS FOR TRAINING PURPOSES ONLY Marking in the Electronic Environment Short Student Guide Center for Development of Security Excellence Page 4 UNCLASSIFIED - CLASSIFICATION MARKINGS FOR TRAINING PURPOSES ONLY IM and Chat Instant messages and chats are brief, text-based message exchanges and conversations. Select the information on the data sheet that is personally identifiable information (PII). You are reviewing your employees annual self evaluation. You receive a call on your work phone and youre asked to participate in a phone survey. E-mailing your co-workers to let them know you are taking a sick day. Classified information that should be unclassified and is downgraded. You receive an email from the Internal Revenue Service (IRS) demanding immediate payment of back taxes of which you were not aware. A .gov website belongs to an official government organization in the United States. Based on the description that follows, how many potential insider threat indicator (s) are displayed? Which scenario might indicate a reportable insider threat security incident? The proper security clearance and indoctrination into the SCI program. Validate all friend requests through another source before confirming them. Ensure that the wireless security features are properly configured. Badges must be visible and displayed above the waist at all times when in the facility. Insiders are given a level of trust and have authorized access to Government information systems. Which of the following does NOT constitute spillage? You must possess security clearance eligibility to telework. There are no choices provides which make it hard to pick the untrue statement about unclassified data. Scan external files from only unverifiable sources before uploading to computer. Which of the following is an example of two-factor authentication? Infographic - Text version Infographic [PDF - 594 KB] Report a problem or mistake on this page Date modified: 2020-12-14 Approved Security Classification Guide (SCG). Since the URL does not start with https, do not provide your credit card information. It contains certificates for identification, encryption, and digital signature. You must have permission from your organization. *Sensitive Information Under which circumstances is it permitted to share an unclassified draft document with a non-DoD professional discussion group? Using NIPRNet tokens on systems of higher classification level. What does Personally Identifiable Information (PII) include? **Identity Management Which of the following is the nest description of two-factor authentication? Which of the following is NOT a DoD special requirement for tokens? Which designation marks information that does not have potential to damage national security? Cyber Awareness 2022. CPCON 1 (Very High: Critical Functions) e. Why do Elodea and onion cells have more consistent shapes than human epithelial cells? Correct. Which of the following is NOT a good way to protect your identity? correct. How can you protect your information when using wireless technology? Being cognizant of classification markings and labeling practices are good strategies to avoid inadvertent spillage. How many potential insider threat indicators does this employee display? New interest in learning another language, Which of the following is a good practice to protect classified information. Its classification level may rise when aggregated. The Chinese Spy Balloon Showdown The discovery of a Chinese surveillance balloon floating over the United States has added to the rising tensions between the two superpowers. not correct Is it okay to run it? (Correct) -It does not affect the safety of Government missions. A colleague complains about anxiety and exhaustion, makes coworkers uncomfortable by asking excessive questions about classified projects, and complains about the credit card bills that his wife runs up. (Mobile Devices) When can you use removable media on a Government system? Which of the following is NOT one? Use only your personal contact information when establishing your account. Secure personal mobile devices to the same level as Government-issued systems. What actions should you take with a compressed Uniform Resource Locator (URL) on a website known to you? All data transfers via the internet are not 100% secure and there might be some security vulnerabilities. Which of the following is true of using DoD Public key Infrastructure (PKI) token? While it may seem safer, you should NOT use a classified network for unclassified work. In addition to offering an overview of cybersecurity best practices, the challenge also provides awareness of potential and common cyber threats. Sanitized information gathered from personnel records. A measure of how much useful work each unit of input energy provides. Government-owned PEDs, if expressly authorized by your agency. Which of the following is true about unclassified data? What should you do? Physically assess that everyone within listening distance is cleared and has a need-to-know for the information being discussed. Phishing can be an email with a hyperlink as bait. Which of the following is true of Unclassified Information? Store it in a GSA approved vault or container. What should you do? Classified material must be appropriately marked. *Spillage Which of the following is a good practice to prevent spillage? What should be your response? Which of the following is true of downloading apps? The email has an attachment whose name contains the word secret. *Sensitive Compartmented Information What is Sensitive Compartmented Information (SCI)? Unclassified information can become a threat to national security. Bob, a coworker, has been going through a divorce, has financial difficulties and is displaying hostile behavior. *Spillage .What should you do if a reporter asks you about potentially classified information on the web? Identification, encryption, and digital signature. **Social Engineering Which may be a security issue with compressed Uniform Resource Locators (URLs)? *Sensitive Compartmented Information What should the owner of this printed SCI do differently? They can be part of a distributed denial-of-service (DDoS) attack. All to Friends Only. Maybe The annual Cyber Awareness Challenge is a course that helps authorized users learn how to best avoid and reduce threats and vulnerabilities in an organizations system. What Are Some Examples Of Malicious Code Cyber Awareness? Which of the following should you do immediately? Which is an untrue statement about unclassified data? When your vacation is over, and you have returned home. Malicious code can do damage by corrupting files, erasing your hard drive, and/or allowing hackers access. Ask for information about the website, including the URL. Correct. Remove your security badge after leaving your controlled area or office building. Which of the following is true about telework? It should only be in a system while actively using it for a PKI-required task. For Government-owned devices, use approved and authorized applications only. It includes a threat of dire circumstances. Coworker making consistent statements indicative of hostility or anger toward the United States and its policies. *Malicious Code Which of the following is NOT a way that malicious code spreads? **Use of GFE When can you check personal e-mail on your Government-furnished equipment (GFE)? Which of the following may be helpful to prevent inadvertent spillage? How many indicators does this employee display? (social networking) When may you be subjected to criminal, disciplinary, and/or administrative action due to online misconduct? Create separate user accounts with strong individual passwords. If you participate in or condone it at any time. Taking classified documents from your workspace. Under what circumstances could unclassified information be considered a threat to national security? How many potential insider threat indicators does this employee display? A medium secure password has at least 15 characters and one of the following. What information most likely presents a security risk on your personal social networking profile? Which of the following is NOT a potential insider threat? Classified data: (Scene) Which of the following is true about telework? PII includes, but is not limited to, social security numbers, date and places of birth, mothers maiden names, biometric records, and PHI. Which of the following is NOT a typical result from running malicious code? not correct Controlled Unclassified Information (CUI) is information that requires safeguarding or dissemination controls pursuant to and consistent with applicable law, regulations, and government-wide policies but is not classified under Executive Order 13526 or the Atomic Energy Act, as amended. However, agency personnel and contractors should first consult their agency's CUI implementing policies and program management for guidance. What information posted publicly on your personal social networking profile represents a security risk? (removable media) If an incident occurs involving removable media in a Sensitive Compartmented Information Facility (SCIF), what action should you take? Cyber Awareness Challenge Knowledge Check 2023 Answers, Cyber Awareness Challenge 2022 Knowledge Check Answers. Figure 1. How many potential insiders threat indicators does this employee display? Your cousin posted a link to an article with an incendiary headline on social media. Security Classification Guides (SCGs).??? Controlled Unclassified Information (CUI) is information that requires safeguarding or dissemination controls consistent with applicable laws, regulations, and Government-wide policies, but is not classified under Executive Order 13526 "Classified National Security Informat What are examples of CUI? Ensure proper labeling by appropriately marking all classified material and, when required, sensitive material. A 3%3\%3% penalty is charged for payment after 303030 days. How many insider threat indicators does Alex demonstrate? If aggregated, the information could become classified. c. What similarities and differences are there between plant and animal cells? What can help to protect the data on your personal mobile device. You find information that you know to be classified on the Internet. What should you do? Never write down the PIN for your CAC. which of the following is true about unclassified data. Which of the following is NOT an example of sensitive information? Which of the following should be reported as a potential security incident? Appropriate clearance; signed and approved non-disclosure agreement; and need-to-know. You must have your organization's permission to telework. Information should be secured in a cabinet or container while not in use. The email provides a link to a personnel portal where you must enter your personal information as part of an effort to standardize recordkeeping. The Registry is updated as agencies continue to submit governing authorities that authorize the protection and safeguarding of sensitive information. -Ask them to verify their name and office number Ask the individual to see an identification badge. Which of the following is NOT a typical result from running malicious code? Proactively identify potential threats and formulate holistic mitigation responses. Note the websites URL and report the situation to your security point of contact. *Sensitive Compartmented Information Which must be approved and signed by a cognizant Original Classification Authority (OCA)? Write your password down on a device that only you access. As long as the document is cleared for public release, you may release it outside of DoD. How can you protect yourself from social engineering? Press release data. Which of the following is a good practice to prevent spillage. Based on the description that follows, how many potential insider threat indicator(s) are displayed? 1.1 Standard Challenge Answers. Dont assume open storage in a secure facility is authorized Maybe. Which of the following personally-owned computer peripherals is permitted for use with Government-furnished equipment? Q&A for work. Please click here to see any active alerts. Everything you need to know aboutControlled UnclassifiedInformation(CUI). **Classified Data Which of the following is a good practice to protect classified information? Found a mistake? Controlled unclassified information. What should you do if a reporter asks you about potentially classified information on the web? Media containing Privacy Act information, PII, and PHI is not required to be labeled. Law Enforcement Sensitive (LES),and others. (Sensitive Information) Which of the following represents a good physical security practice? What would you do if you receive a game application request on your government computer that includes permission to access your friends, profile information, cookies, and sites visited? (Malicious Code) Which of the following is NOT a way that malicious code spreads? **Insider Threat Based on the description that follows, how many potential insider threat indicator(s) are displayed? Which of the following is a best practice to protect information about you and your organization on social networking sites and applications? Phishing can be an email with a hyperlink as bait. You have reached the office door to exit your controlled area. ! (A type of phishing targeted at senior officials) Which is still your FAT A$$ MOTHER! What does Personally Identifiable information (PII) include? A program that segregates various type of classified information into distinct compartments for added protection and dissemination for distribution control. (2) War planning documents which contain worldwide -- (a) Planning data and assumptions, (b) Wartime planning factors for the use of nuclear weapons, (c) Intelligence estimates of enemy capabilities, (d) Force composition and development, and Ask them to verify their name and office number. Spillage because classified data was moved to a lower classification level system without authorization. It does not require markings or distribution controls. Classified information that should be unclassified and is downgraded. Note any identifying information, such as the websites URL, and report the situation to your security POC. Only expressly authorized government-owned PEDs. How do you respond? When teleworking, you should always use authorized and software. not correct. What certificates are contained on the Common Access Card (CAC)? Which of the following best describes a way to safely transmit Controlled Unclassified Information (CUI)? Store your Common Access Card (CAC) or Personal Identity Verification (PIV) card in a shielded sleeve ~Write your password down on a device that only you access (e.g., your smartphone) Change your password at least every 3 months Enable two-factor authentication whenever available, even for personal accounts. The EPAs Controlled Unclassified Information (CUI) Program issued its Interim CUI Policy in December 2020. Leaked classified or controlled information is still classified/controlled even if it has already been compromised. How should you respond? A trusted friend in your social network posts a link to vaccine information on a website unknown to you. Classified information is defined in PL 96-456, the Classified Information Procedures Act: Coworker making consistent statements indicative of hostility or anger toward the United States and its policies. Which of the following information is a security risk when posted publicly on your social networking profile? Always check to make sure you are using the correct network for the level of data. *Sensitive Information Under what circumstances could classified information be considered a threat to national security? d. How do the size and shape of a human epithelial cell differ from those of the Elodea and onion cells that you examined earlier? You can't have 1.9 children in a family (despite what the census might say ). Not correct Store it in a shielded sleeve to avoid chip cloning. **Social Engineering What action should you take with an e-mail from a friend containing a compressed Uniform Resource Locator (URL)? A smartphone that transmits credit card payment information when held in proximity to a credit card reader. **Social Networking Which of the following is a security best practice when using social networking sites? The questions are broken into the following sections: Controlled Unclassified Information (CUI) isinformation that requires safeguarding or dissemination controls consistent with applicable laws, regulations, and Government-wide policies,but is not classified underExecutive Order 13526 Classified National Security Informationorthe Atomic Energy Act, as amended. **Social Networking Your cousin posted a link to an article with an incendiary headline on social media. CUI may be stored on any password-protected system. Briefly describe what you have learned. data. On a NIPRNet system while using it for a PKI-required task, Something you possess, like a CAC, and something you know, like a PIN or password. What is an indication that malicious code is running on your system? Dofficult life circumstances, such as death of spouse. You receive an email at your official Government email address from an individual at the Office of Personnel Management (OPM). -Classified information that should be unclassified and is downgraded. When unclassified data is aggregated, its classification level may rise. Click the card to flip Flashcards Learn Test Match Created by Jamie_Lancaster Terms in this set (24) What should you do? Correct. **Travel What is a best practice while traveling with mobile computing devices? Keep your operating system and software up to date: This will help patch any security vulnerabilities in your software. How should you protect your Common Access Card (CAC) or Personal Identity Verification (PIV) card? (Spillage) What advantages do insider threats have over others that allows them to cause damage to their organizations more easily? Your password and the second commonly includes a text with a code sent to your phone. Use your own security badge, key code, or Common Access Card (CAC)/Personal Identity Verification (PIV) card. Organizational Policy Not correct A colleague has visited several foreign countries recently, has adequate work quality, speaks openly of unhappiness with U.S. foreign policy, and recently had his car repossessed. Which may be a security issue with compressed urls? Unclassified is a security classification assigned to official information that does not warrant the assignment of Confidential, Secret, or Top Secret markings but which is not publicly-releasable without authorization. As a security best practice, what should you do before exiting? Correct. What actions should you take prior to leaving the work environment and going to lunch? You must have your organization's permission to telework. Adversaries exploit social networking sites to disseminate fake news Correct. A vendor conducting a pilot program with your organization contacts you for organizational data to use in a prototype. Controlled Unclassified Information (CUI) Purpose of the CUI Program. correct. (Travel) Which of the following is a concern when using your Government-issued laptop in public? Executive Order 13556, Controlled Unclassified Information, requires the Executive Branch to establish an open and uniform program for managing [unclassified] information that requires safeguarding or dissemination controls pursuant to and consistent with laws, regulations, and Government-wide policies. The National Archives and Records Administration (NARA) was named the Executive Agent (EA) responsible for overseeing the CUI Program. Which of the following is NOT an example of CUI? What should be done to sensitive data on laptops and other mobile computing devices? That trust is bounded by the Oath of Office we took willingly. Unclassified information cleared for public release. Research the source of the article to evaluate its credibility and reliability. Executive Order 13526 Classified National Security Information, PersonallyIdentifiable Information (PII), Sensitive Personally Identifiable Information (SPII), Proprietary Business Information (PBI) or currently known within EPA as Confidential Business Information (CBI), Unclassified Controlled Technical Information (UCTI). What information should you avoid posting on social networking sites? After you have returned home following the vacation. what should you do? What action should you take? You may use your personal computer as long as it is in a secure area in your home b. Store classified data appropriately in a GSA-approved vault/container. Which of the following is NOT a correct way to protect sensitive information? (Malicious Code) While you are registering for a conference, you arrive at the website http://www.dcsecurityconference.org/registration/. Which of the following is a security best practice when using social networking sites? You must have your organization's permission to telework c. You may use unauthorized software as long as your computer's antivirus software is up to date. Use the government email system so you can encrypt the information and open the email on your government issued laptop. Matt Monroe, a 20-year U. S. Air Force veteran and current operations manager at Omnistruct, explains the breakdown, "There are four classified information categories in the military based on the severity of damage that the information's release would cause. Federal agencies routinely generate, use, store, and share information that, while not meeting the threshold for classification as national security or atomic energy information, requires some level of protection from unauthorized access and release. Have your permissions from your organization, follow your organization guideline, use authorized equipment and software, employ cyber security best practice, perform telework in dedicated when home. (Malicious Code) What are some examples of malicious code? John submits CUI to his organizations security office to transmit it on his behalf.
Princess Temtsimba Dlamini Wedding, Warburg Pincus Managing Director Salary, Articles W
Princess Temtsimba Dlamini Wedding, Warburg Pincus Managing Director Salary, Articles W