DoD Cyber Awareness Challenge (FY22) Quiz

DoD Cyber Awareness Challenge (FY22) Key Concepts

• Inquiries about classified information should be directed to the organization's public affairs office.

• If classified information is discovered online, note identifying details and the webpage's URL instead of contacting the website owner or ignoring it.

• Information that could cause serious damage to national security if disclosed without authorization is classified as "Secret."

• Individuals permitted to access classified information include those with appropriate clearance and signed non-disclosure agreements, such as Darryl managing a classified project.

• A colleague demonstrating charm yet showing aggression to access classified data is displaying one insider threat indicator.

• To minimize vulnerability as a target for adversaries, always remove security badges when leaving controlled areas.

• Insiders with authorized access can unintentionally or intentionally compromise resources and capabilities due to their access.

• When using social networking sites, it is crucial to understand and utilize privacy settings effectively.

• Post details about vacations on social media only after returning home to avoid security risks.

• Publicly sharing your birthday on social media represents a significant security risk regarding your personal information.

• Publicly released press data is not classified as Controlled Unclassified Information (CUI).

• CUI should not be stored on any password-protected system; it must be protected within designated environments.

• Social Security numbers qualify as personally identifiable information (PII).

• Medical records are classified as protected health information (PHI).

• A fundamental physical security practice is to use your personal access badge or key code at all times.

• Writing passwords down on personal devices is not a best practice for maintaining identity authenticity.

• Use a PKI token for authorized tasks only on designated systems, specifically on NIPRNet and not on systems of higher classification or public computers.

• Guidance for marking Sensitive Compartmented Information (SCI) includes following Security Classification Guides and consulting original classification authorities.

• If aware that SCI has been compromised, report to your security contact and evaluate the compromise's causes.

• Always display security badges visibly while in a facility to maintain access security.

• Classified documents should be retrieved promptly from printers to mitigate unauthorized access risks.

• When discussing Classified Information, verify that all participants within earshot are cleared for the information.

• Removable media in Sensitive Compartmented Information Facilities (SCIF) must be disclosed to local management authorities.

• Malware can spread through various channels, but infected websites are not classified as a method.

• Only authorized government devices are allowed in SCIF environments.

• An incident such as opening an uncontrolled DVD in a SCIF requires notifying security and analyzing the system for potential threats.

• Malicious code can damage systems by corrupting files, deleting data, or allowing unauthorized access.

• Avoid downloading malicious code by not clicking on website links found in email messages.

• Identity theft should be reported to local law enforcement for proper legal action.

• Accessing links or graphics in emails constitutes a major risk for downloading viruses.

• When receiving emails with untrusted links, such as compressed URLs, it’s important to verify the link’s destination carefully.

• Social engineering tactics targeting specific individuals are known as spear phishing.

• Public Wi-Fi can expose devices to malware threats, posing a significant risk to sensitive information.

• Ethical use of Government-furnished equipment (GFE) includes proper communication regarding absences while unauthorized usage, such as downloading pirated content is prohibited.

• Removable media can only be used on government systems under strict operational necessity and with appropriate approvals.

• Near Field Communication (NFC) is exemplified by smartphones transmitting payment information when near a card reader.

• Charging personal devices using government-furnished equipment is strictly forbidden.

• Proper protection of mobile devices includes encrypting sensitive data on government-issued devices.

• When using wireless keyboards, security settings and encryption options should be carefully evaluated to ensure protection against unauthorized access.