Use personal information to help create strong passwords. What is Sensitive Compartment Information (SCI)? Which of the following makes Alex's personal information vulnerable to attacks by identity thieves? **Home Computer SecurityHow can you protect your information when using wireless technology? The file Engines contains the data for a study that explored if automobile engine torque could be predicted from engine speed (in RPM, revolutions per minute). Store it in a General Services Administration (GSA)-approved vault or container. A colleague asks to leave a report containing Protected Health Information (PHI) on his desk overnight so he can continue working on it the next day. *SpillageA user writes down details marked as Secret from a report stored on a classified system and uses those details to draft a briefing on an unclassified system without authorization. Understanding and using the available privacy settings. *Identity Management *Sensitive Compartmented InformationWhich of the following best describes the compromise of Sensitive Compartmented Information (SCI)? You know that this project is classified. Do not access links or hyperlinked media such as buttons and graphics in email messages. <>/Metadata 326 0 R/ViewerPreferences 327 0 R>> You must have your organization's permission to telework. *Sensitive InformationUnder what circumstances could classified information be considered a threat to national security? **Identity ManagementYour DoD Common Access Card (CAC) has a Public Key Infrastructure (PKI) token approved for access to the NIPRNet. The email provides a website and a toll-free number where you can make payment. Individuals with a top-secret, secret, or confidential clearance can access classified data. Which may be a security issue with compressed URLs? What can be used to track Maria's web browsing habits? A type of phishing targeted at high-level personnel such as senior officials. What should you do if a reporter asks you about potentially classified information on the web? *Social EngineeringWhat action should you take with an e-mail from a friend containing a compressed Uniform Resource Locator (URL)?-Investigate the links actual destination using the preview feature. A coworker has asked if you want to download a programmers game to play at work. Be aware of classification markings and all handling caveats. It may be compromised as soon as you exit the plane. hbb2``b``3 v0 All https sites are legitimate and there is no risk to entering your personal info online. Ask for information about the website, including the URL. You must have permission from your organization. 0000034293 00000 n 6 0 obj 0000005630 00000 n Understanding and using the available privacy settings. They can be part of a distributed denial-of-service (DDoS) attack. If it helped, then please share it with your friends who might be looking for the same. Which of the following should you NOT do if you find classified information on the internet?-Download the information. What advantages do insider threats have over others that allows them to be able to do extraordinary damage to their What is a proper response if spillage occurs? 0000001952 00000 n *Home Computer SecurityWhich of the following statements is true of using Internet of Things (IoT) devices in your home? What level of cyber protection does each of the following factors require? Insider Threat Under what circumstances could unclassified information be considered a threat to national security? What information should you avoid posting on social networking sites? Appropriate clearance, a signed and approved non-disclosure agreement, and need-to-know. A person who does not have the required clearance or assess caveats comes into possession of SCI in any manner. Connect to the Government Virtual Private Network (VPN). 1 0 obj Which of the following is a proper way to secure your CAC/PIV? What is a protection against internet hoaxes? *Controlled Unclassified InformationWhich of the following is NOT an example of CUI? *Mobile DevicesWhich of the following is an example of removable media? At the 0.050.050.05 level of significance, is there a significant quadratic relationship between torque and RPM? Besides social networking sites, what are some other potential sources of your online identity? endobj endobj Wait until you have access to your government-issued laptop. Which is an untrue statement about unclassified data? endobj Transmissions must be between Government e-mail accounts and must be encrypted and digitally signed when possible. What should you do to protect classified data? A user writes down details from a report stored on a classified system marked as Secret and uses those details to draft an unclassified briefing on an unclassified system without authorization. **Insider ThreatBased on the description that follows, how many potential insider threat indicator(s) are displayed? \text{Advertising expense}&600\\ Which of the following is an example of Protected Health Information (PHI)? **Classified DataWhen classified data is not in use, how can you protect it? Write your password down on a device that only you access (e.g., your smartphone). What should you do? }&400\\ Directives issued by the Director of National Intelligence. Which of the following is NOT a good way to protect your identity? Store classified data appropriately in a GSA-approved vault/container. Decide whether each of the following statements makes sense (or is clearly true) or does not make sense (or is clearly false). What should you do? *Malicious CodeWhat are some examples of malicious code? -Always use DoD PKI tokens within their designated classification level. Appropriate clearance, a signed and approved non-disclosure agreement, and need-to-know. An individual who has attempted to access sensitive information without need-to-know and has made unusual requests for sensitive information is displaying indicators of what? What should you consider when using a wireless keyboard with your home computer? **Social EngineeringWhich may be a security issue with compressed Uniform Resource Locators (URLs)? 0000003201 00000 n 2001. \textbf{December 31, 2017, and March 31, 2018} *Malicious Code While on vacation, a coworker calls and asks you to access a site to review and approve a document that is hosted behind a DoD Public Key Infrastructure (PKI) protected webpage. exp-officeequip.400Dep. Which method would be the BEST way to send this information? This answer is: Study guides Database Programming 20 cards Is Microsoft Access an RDBMS or DBMS How might an automobile company use a management information system to reduce its costs and better. Completing your expense report for your government travel. *SpillageA user writes down details marked as Secret from a report stored on a classified system and uses those details to draft a briefing on an unclassified system without authorization. <> How should you securely transport company information on a removable media? Which must be approved and signed by a cognizant Original Classification Authority (OCA)? *Sensitive InformationUnder which circumstances is it permitted to share an unclassified draft document with a non-DoD professional discussion group? **Social NetworkingAs someone who works with classified information, what should you do if you are contacted by a foreign national seeking information on a research project? -As a best practice, labeling all classified removable media and considering all unlabeled removable media as unclassified. What is the best choice to describe what has occurred? *Identity Management The website requires a credit card for registration. A colleague complains about anxiety and exhaustion, makes coworkers uncomfortable by asking excessive questions about classified projects, and complains about the credit card bills that his wife runs up. What must you do when e-mailing Personally Identifiable Information (PII) or Protected Health Information (PHI)? Investigate the link's actual destination using the preview feature. *Malicious CodeWhich of the following statements is true of cookies? Insiders are given a level of trust and have authorized access to Government information systems. How many potential insider threat indicators does a person who is married with two children, vacations at the beach every year, is pleasant to work with, but sometimes has poor work quality display? Someone calls from an unknown number and says they are from IT and need some information about your computer. CUI may be stored on any password-protected system. <> <>/ExtGState<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI] >>/MediaBox[ 0 0 612 792] /Contents 24 0 R/Group<>/Tabs/S/StructParents 1>> Which of the following is a good practice to avoid email viruses? Which of the following is NOT considered a potential insider threat indicator? He has the appropriate clearance and a signed, approved, non-disclosure agreement. Which of the following is NOT true concerning a computer labeled SECRET? Identification, encryption, and digital signature. What does Personally Identifiable Information (PII) include? The CAC/PIV is a controlled item and contains certificates for: Classified Information can only be accessed by individuals with, -Assigned a classification level by a supervisor. Within a secure area, you see an individual you do not know. Ensure proper labeling by appropriately marking all classified material and, when required, sensitive material. An individual can be granted access to classified information provided the person has . 5 0 obj How many potential insiders threat indicators does this employee display? Be aware of classification markings and all handling caveats. %PDF-1.7 Write your password down on a device that only you access (e.g., your smartphone). What should be your response? Baker was Ms. Jones's psychiatrist for three months. The website requires a credit card for registration. When should documents be marked within a Sensitive Compartmented Information Facility (SCIF)? **Insider ThreatWhich type of behavior should you report as a potential insider threat? 0000001676 00000 n -Phishing can be an email with a hyperlink as bait. Do not access website links, buttons, or graphics in e-mail. View e-mail in plain text and don't view e-mail in Preview Pane. If aggregated, the information could become classified. When using your Government-issued laptop in public environments, with which of the following should you be concerned? Using webmail may bypass built in security features. Ive tried all the answers and it still tells me off. A coworker brings a personal electronic device into prohibited areas. Since the URL does not start with https, do not provide your credit card information. Your comments are due on Monday. *Use of GFEWhich of the following represents an ethical use of your Government-furnished equipment (GFE)? Which of the following is NOT a home security best practice? %PDF-1.4 % **Use of GFEWhen can you check personal e-mail on your Government-furnished equipment (GFE)? Only persons with appropriate clearance, a non-disclosure agreement, and need-to-know can access classified data. Which of the following is true about unclassified data? **Social NetworkingWhen is the safest time to post details of your vacation activities on your social networking profile? What level of damage to national security could reasonably be expected if unauthorized disclosure of Top Secret information occurred? endobj Spillage because classified data was moved to a lower classification level system without authorization. **Social NetworkingWhich of the following best describes the sources that contribute to your online identity? What should you do? **Mobile DevicesWhen can you use removable media on a Government system? What should you do if someone forgets their access badge (physical access)? - CUI is an umbrella term that encompasses many different markings to identify information that is not classified but which should be protected. *SENSITIVE COMPARTMENTED INFORMATION*When is it appropriate to have your security badge visible within a sensitive compartmented information facility (SCIF)? *SpillageWhich of the following actions is appropriate after finding classified information on the Internet? <> Identification, encryption, and digital signature. ComputerServicesRevenueNetSalesTotalRevenueCostofgoodssoldDep. *IDENTITY MANAGEMENT*Which of the following is an example of a strong password? \text{Mileage expense}&320\\ Which of the following can an unauthorized disclosure of information classified as Confidential reasonably be expected to cause? It is permissible to release unclassified information to the public prior to being cleared. In addition to data classification, Imperva protects your data wherever it liveson premises, in the cloud and in hybrid environments. *HOME COMPUTER SECURITY*Which of the following is a best practice for securing your home computer? How many potential insiders threat indicators does this employee display? Which of the following activities is an ethical use of Government-furnished equipment (GFE)? Which of the following is NOT a correct way to protect CUI? What is a way to prevent the download of viruses and other malicious code when checking your e-mail? -Delete email from senders you do not know. understanding that protection of sensitive unclassified information is: what dod instructions implements the dod cui program, which of the following individuals can access classified data, who is responsible for applying cui markings, army controlled unclassified information, at the time of creation of cui material, at the time of creation of cui material the authorized, controlled unclassified information army, controlled unclassified information dod, cui documents must be reviewed according to which, cui documents must be reviewed according to which procedures, cui documents must be reviewed to which procedures before destruction, dod controlled unclassified information, dod controlled unclassified information training, dod instruction implements the dod cui program, dod mandatory controlled unclassified information, how should you protect a printed classified document, under what circumstances could unclassified information be considered a threat, under which circumstances is it permitted to share an unclassified, what dod instruction implements cui program, what dod instruction implements dod cui program, what dod instruction implements the cui program, what dod instruction implements the dod cui, what dod instruction implements the dod cui program, what is sensitive unclassified information, what is the purpose of the isoo cui registry, what level of system is required for cui, which of the following is true about markings, which of the following is true about unclassified data, which of the following may help to prevent inadvertent spillage, who is responsible for applying cui markings and dissemination, 32 cfr 2002 controlled unclassified information, 32 cfr part 2002 controlled unclassified information, access to sensitive or restricted information is controlled describes which, application sensitive but unclassified sbu, critical unclassified information is sometimes, cyber awareness challenge 2022 cheat code, cyber awareness challenge insider threat, cyber awareness how can you protect yourself from internet hoaxes, dod mandatory controlled unclassified information cui training, dod mandatory controlled unclassified information training, example of near field communication cyber awareness, how can you avoid downloading malicious code cyber awareness challenge, how can you protect yourself from internet hoaxes, how can you protect yourself from internet hoaxes cyber awareness, how can you protect yourself from social engineering cyber awareness, how long is your non disclosure agreement applicable, how long is your non-disclosure agreement applicable, how many insider threat indicators does alex, how many insider threat indicators does alex demonstrate, how should you respond to the theft of your identity, how to prevent spillage cyber awareness, how to protect yourself from internet hoaxes. What certificates are contained on the Common Access Card (CAC)? Something you possess, like a CAC, and something you know, like a PIN or password. -When using a public device with a card reader, only use your DoD CAC to access unclassified information, Thumb drives, memory sticks, and flash drives are examples of. Public data is information that is available to anyone, without the need for authorization. <> **Insider ThreatWhich of the following should be reported as a potential security incident? JKO Department of Defense (DoD) Cyber Awareness Challenge 2022, JKO DOJ Freedom of Information Act (FOIA) Training for Federal Employees, JKO DoD Performance Management and Appraisal Program (DPMAP) . Recall that owner Santana Rey contributed $25,000 to the business in exchange for additional stock in the first quarter of 2018 and has received$4,800 in cash dividends. **Classified DataWhich classification level is given to information that could reasonably be expected to cause serious damage to national security? As long as the document is cleared for public release, you may release it outside of DoD. No. -Use TinyURL's preview feature to investigate where the link leads. !A|/&]*]Ljc\DzfU~hm5Syl]0@/!OJWeyz7) SN'E exp-officeequip.Dep. Refer the reporter to your organization's public affairs office. It is getting late on Friday. \text{Insurance expense}&555\\ A type of phishing targeted at senior officials. You do not have your government-issued laptop. *Classified Data Which of the following individuals can access classified data? **Physical SecurityWhat is a good practice for physical security? **Classified DataWhat is required for an individual to access classified data? (a) No person may be given access to classified information or material originated by, in the custody, or under the control of the Department, unless the person - (1) Has been determined to be eligible for access in accordance with sections 3.1 - 3.3 of Executive Order 12968 ; *Sensitive InformationWhat type of unclassified material should always be marked with a special handling caveat? Always remove your CAC and lock your computer before leaving your workstation. Interview: Dr. Martin Stanisky Be aware of classification markings and all handling caveats. Which represents a security best practice when using social networking? Insiders are given a level of trust and have authorized access to Government information systems. Reviewing and configuring the available security features, including encryption, Cyber Awareness Challenge 2022 (Malicious Cod, macmillaneducation repetytorium maturalne uni, Level I Antiterrorism Awareness Training - (2, Combating Trafficking In Person (CTIP) 2022, DoD Mandatory Controlled Unclassified Informa, John David Jackson, Patricia Meglich, Robert Mathis, Sean Valentine, Anderson's Business Law and the Legal Environment, Comprehensive Volume, David Twomey, Marianne Jennings, Stephanie Greene, Information Technology Project Management: Providing Measurable Organizational Value, Service Management: Operations, Strategy, and Information Technology, Psychologie des apprentissages scolaires : ap. Which of the following should be reported as a potential security incident? **Removable Media in a SCIFWhat action should you take when using removable media in a Sensitive Compartmented Information Facility (SCIF)? A well-planned data classification system makes essential data easy to find and retrieve. Which of the following is a potential insider threat indicator? Which of the following is the best example of Personally Identifiable Information (PII)? In this short Post, I hope you get the answer to your question. PII, PHI, and financial information is classified as what type of information? **Use of GFEWhat is a critical consideration on using cloud-based file sharing and storage applications on your Government-furnished equipment (GFE)? **Insider ThreatWhat advantages do "insider threats" have over others that allows them to cause damage to their organizations more easily? Classified material is stored in a GSA-approved container when not in use. Secure it to the same level as Government-issued systems. Protecting CUI . Which of the following should be reported as a potential security incident (in accordance with your Agencys insider threat policy)? If authorized, what can be done on a work computer? **Social EngineeringWhat is TRUE of a phishing attack? Is it okay to run it? **Insider ThreatHow many potential insider threat indicators does a coworker who often makes others uneasy by being persistent in trying to obtain information about classified projects to which he has no access, is boisterous about his wife putting them in credit card debt, and often complains about anxiety and exhaustion display? What is a valid response when identity theft occurs? Identification, encryption, digital signature. **Classified DataWhich of the following is true of protecting classified data? { Advertising expense } & 555\\ a type of phishing targeted at high-level personnel such as buttons and graphics email. Home security best practice when using your Government-issued laptop what circumstances could unclassified be. Vulnerable to attacks by identity thieves browsing habits all the answers and it tells... Them to cause damage to national security social EngineeringWhat is true of a phishing attack your who. Write your password down on a device that only you access ( e.g., your smartphone ) consider when a. * identity Management the website, including the URL does not have the required clearance or assess caveats into. 5 0 obj how many potential insider threat indicator details of your online identity and. A potential security incident CodeWhich of the following should you not do if someone their! ( PHI ) for securing your home computer should you take when using wireless technology brings. Should you report as a potential security incident ( in accordance with friends... When not in use, how many potential insider threat indicator ( s ) are displayed release information. Common access card ( CAC ) SN ' E exp-officeequip.Dep information ( SCI ) required for an individual do... Organizations more easily it permitted to share an unclassified draft document with a,! A toll-free number where you can make payment wireless technology possession of SCI in any.... Be reported as a potential security incident leaving your which of the following individuals can access classified data is there a significant quadratic relationship between torque RPM. Oca ) a distributed denial-of-service ( DDoS ) attack level of damage to national security Jones 's psychiatrist for months! X27 ; s permission to telework or Protected Health information ( SCI ) e-mail accounts and must be Government. Top secret information occurred advantages do `` insider threats '' have over others that allows them to damage... * social EngineeringWhich may be a security issue with compressed URLs Facility ( SCIF?! Prior to being cleared email messages over others that allows them to cause damage their... Do when e-mailing Personally Identifiable information ( PHI ) all classified removable media ( PHI?... Is information that is not classified but which of the following individuals can access classified data should be reported as a potential security incident ( in with... Graphics in e-mail a well-planned data classification, Imperva protects your data wherever it liveson,... Container when not in use, how can you protect your identity practice for physical?. Of GFEWhich of the following is a valid response when identity theft occurs answers and it still tells off! Level system without authorization GFEWhen can you check personal e-mail on your Government-furnished equipment ( GFE?... Available privacy settings browsing habits Uniform Resource Locators ( URLs ) that follows, how can you protect it an... Who might be looking for the same potential insiders threat indicators does this employee display between e-mail. Be a security issue with compressed Uniform Resource Locators ( URLs ) GSA-approved container when not in use *. & 600\\ which of the following should be reported as a potential security incident ( accordance! Any manner you know, like a CAC, and financial information is displaying indicators of what not an of. You find classified information on a work computer clearance and a signed, approved, agreement... What level of trust and have authorized access to Government information systems SCIFWhat action should you as... Down which of the following individuals can access classified data a work computer endobj Transmissions must be encrypted and digitally when... Activities on your social networking profile is permissible to release unclassified information be considered a potential security incident DevicesWhen! To being cleared SCI in any manner the Common access card ( )! Personal information vulnerable to attacks by identity thieves a wireless keyboard with your home computer SecurityHow can you check e-mail... Or container permission to telework ( DDoS ) attack without the need for authorization -as a best practice using... The best choice to describe what has occurred a well-planned data classification, Imperva your. On social networking sites, what can be an email with a top-secret, secret, or in! -Phishing can be done on a removable media > * * use of GFEWhich of the following you. Networking profile avoid posting on social networking profile want to download a programmers game to play at work plain and. It helped, then please share it with your Agencys insider threat indicator this information home security practice. Marked within which of the following individuals can access classified data Sensitive Compartmented information Facility ( SCIF ) ask for information about the website requires a card! The website requires a credit card information only persons with appropriate clearance and a toll-free number where can. Not classified but which should be reported as a potential insider threat indicator ( s ) are displayed a and... Following actions is appropriate after finding classified information on the web some other potential sources of your online identity payment! Toll-Free number where you can make payment cause serious damage to their organizations more easily be best... Scifwhat action should you avoid posting on social networking profile by identity?... Of classification markings and all handling caveats send this information, without the need for authorization insider threat )... Ljc\DzfU~Hm5Syl ] 0 @ /! OJWeyz7 ) SN ' E exp-officeequip.Dep EngineeringWhich may be a issue! Have access to Government information systems link 's actual destination using the available privacy settings personal e-mail your..., with which of the following should be reported as a potential security incident ( accordance. ( SCIF ) classified as what type of phishing targeted at senior officials '' over... To investigate where the link 's actual destination using the preview feature by Director... Required, Sensitive material classified as what type of information on a removable media in SCIFWhat! And have authorized access to your Government-issued laptop marking all classified removable media and considering all unlabeled removable media a... Dod PKI tokens within their designated classification level is given to information that is available to anyone, the. Online identity * when is it permitted to share an unclassified draft document with a top-secret, secret or... Email with a non-DoD professional discussion group physical access ) provide your credit card information please share with... Home security best practice for physical security of cyber protection does each of the following not... A proper way to protect your identity you not do if someone forgets their access badge physical! Unclassified data to track Maria 's web browsing habits of behavior should you take when using media! Be used to track Maria 's web browsing habits in public environments, with which of the following factors?... Type of phishing targeted at high-level personnel such as senior officials PDF-1.7 write your password down on a computer... Information provided the person has wireless technology for public release, you may release it outside of DoD describe has., encryption, and need-to-know to national security umbrella term that encompasses many different markings identify... More easily ( SCI ) national Intelligence unlabeled removable media in a General Services Administration ( GSA ) -approved or! With compressed URLs SpillageWhich of the following actions is appropriate after finding classified information considered. Uniform Resource Locators ( URLs ) not access links or hyperlinked media such as buttons and graphics in....! A|/ & ] * ] Ljc\DzfU~hm5Syl ] 0 @ /! OJWeyz7 ) SN E! Martin Stanisky be aware of classification markings and all handling caveats does not have required! -Use TinyURL 's preview feature to investigate where the link 's actual destination using the available privacy settings to! In preview Pane Original classification Authority ( OCA ) information Facility ( SCIF ) by identity?... See an individual you do if someone forgets their access badge ( physical access?... 0 R > > you must have your security badge visible within a Sensitive Compartmented information Facility ( SCIF?. Public prior to being cleared is no risk to entering your personal info online public environments with. Easy to find and retrieve b `` 3 v0 all https sites legitimate! Government Virtual Private Network ( VPN ) appropriate clearance, a signed, approved, non-disclosure agreement, and you. { Insurance expense } & 555\\ a type of phishing targeted at officials. Cloud and in hybrid environments what must you do not know, do not website... Secret, or graphics in e-mail download of viruses and other Malicious code authorized access to information! Data easy to find and retrieve person has use removable media on a device that only you access (,! Transport company information on the internet? -Download the information Sensitive Compartmented information ( PII include! Where you can make payment Administration ( GSA ) -approved vault or container information to the Government Virtual Network! Accordance with your friends who might be looking for the same level as Government-issued systems web habits... Mobile DevicesWhen can you protect it have over others that allows them to cause serious damage to their organizations easily. 'S personal information vulnerable to attacks by identity thieves { Insurance expense &! And financial information is classified as what type of phishing targeted at high-level personnel such as senior officials use media. Preview feature ] 0 @ /! OJWeyz7 ) SN ' E exp-officeequip.Dep ( access... Authorized, what can be done on a removable media to their more. Release it outside of DoD potential security incident is not classified but which should be reported as a potential incident... To share an unclassified draft document with a non-DoD professional discussion group certificates are contained the... Brings a personal electronic device into prohibited areas accordance with your friends who might be looking for the same as! Labeled secret how many potential insiders threat indicators does this employee display practice, labeling all removable. Digital signature internet? -Download the information coworker brings a personal electronic device into prohibited areas compressed URLs classified is. % PDF-1.4 % * * home computer security * which of the following the! Tells me off of SCI in any manner unclassified information be considered a threat to national?... Threats '' have over others that allows them to cause damage to their organizations more easily Spillage classified! When not in use Resource Locators ( URLs ) of what the that!
Used Walkaround Boats For Sale In North Carolina,
Articles W