A colleague often makes others uneasy with her persistent efforts to obtain information about classified project where she has no need-to-know, is vocal about her husband overspending on credit cards, and complains about anxiety and exhaustion. How can you . Investigate the link's actual destination using the preview feature. If aggregated, the information could become classified. <> Use only your personal contact information when establishing your account, *Controlled Unclassified InformationSelect the information on the data sheet that is personally identifiable information (PII) but not protected health information (PHI), Jane JonesSocial Security Number: 123-45-6789, *Controlled Unclassified InformationSelect the information on the data sheet that is protected health information (PHI), Interview: Dr. Nora BakerDr. Coworker making consistent statements indicative of hostility or anger toward the United States in its policies. Appropriate clearance; signed and approved non-disclosure agreement; and need-to-know. \textbf{Comparative Balance Sheet}\\ \textbf{BUSINESS SOLUTIONS}\\ **TravelWhich of the following is a concern when using your Government-issued laptop in public? 8 0 obj *Social EngineeringWhat is a common indicator of a phishing attempt? When using a fax machine to send sensitive information, the sender should do which of the following? <> How many potential insider threat indicators is Bob displaying? What is the best choice to describe what has occurred? *SpillageWhich of the following may help to prevent spillage? The website requires a credit card for registration. **Classified DataWhich of the following is true of telework? A colleague asks to leave a report containing Protected Health Information (PHI) on his desk overnight so he can continue working on it the next day. How many potential insider threat indicators does a person who is married with two children, vacations at the beach every year, is pleasant to work with, but sometimes has poor work quality display? A person who does not have the required clearance or assess caveats comes into possession of SCI in any manner. xref You know this project is classified. Hostility and anger toward the United States and its policies, Remove your security badge after leaving your controlled area or office building, Research the source of the article to evaluate its credibility and reliability, Use only your personal contact information when establishing your account. *Use of GFEWhich of the following represents an ethical use of your Government-furnished equipment (GFE)? You are reviewing your employees annual self evaluation. **Insider ThreatBased on the description that follows, how many potential insider threat indicator(s) are displayed? *Home Computer SecurityWhich of the following is a best practice for securing your home computer?-Create separate accounts for each user. Maintain visual or physical control of the device. You are logged on to your unclassified computer and just received an encrypted email from a co-worker. **Social NetworkingWhen may you be subject to criminal, disciplinary, and/or administrative action due to online misconduct? What should you do? Baker was Ms. Jones's psychiatrist for three months. As a security best practice, what should you do before exiting? *Social EngineeringWhat action should you take with an e-mail from a friend containing a compressed Uniform Resource Locator (URL)?-Investigate the links actual destination using the preview feature. Classified data is permitted to access to only persons with appropriate clearance, a non-disclosure agreement, and need-to-know can access classified data. **Identity managementWhat is the best way to protect your Common Access Card (CAC)? Write your password down on a device that only you access (e.g., your smartphone). -Remove security badge as you enter a restaurant or retail establishment. *Sensitive Compartmented InformationWhen is it appropriate to have your security badge visible? Exempt tool (TEST version 2.1) endobj *IDENTITY MANAGEMENT*What certificates does the Common Access Card (CAC) or Personal Identity Verification (PIV) card contain? **Identity managementWhich of the following is NOT a best practice to preserve the authenticity of your identity? Note any identifying information and the website's Uniform Resource Locator (URL). **TravelWhat security risk does a public Wi-Fi connection pose? *SPILLAGE*Which of the following may be helpful to prevent spillage? Follow instructions given only by verified personnel. Spillage because classified data was moved to a lower classification level system without authorization. Something you possess, like a CAC, and something you know, like a PIN or password. Which term describes an event where a person who does not have the required clearance or access caveats comes into possession of Sensitive Compartmented Information (SCI). Study with Quizlet and memorize flashcards containing terms like How many potential insider threat indicators does a person who is married with two children, vacations at the beach every year, is pleasant to work with, but sometimes has poor work quality display?, What is the best response if you find classified government data on the internet?, After reading an online story about a new . He has the appropriate clearance and a signed, approved non-disclosure agreement. Which of the following individuals can access classified data? As part of the survey the caller asks for birth date and address. *SpillageWhich of the following actions is appropriate after finding classified information on the Internet? 290 33 **Home Computer SecurityWhich of the following is a best practice for securing your home computer? *SpillageAfter reading an online story about a new security project being developed on the military installation where you work, your neighbor asks you to comment about the article. hbb2``b``3 v0 Is this safe? *SpillageWhich of the following actions is appropriate after finding classified information on the internet? When should documents be marked within a Sensitive Compartmented Information Facility (SCIF)? **Identity ManagementWhich of the following is the nest description of two-factor authentication? -Delete email from senders you do not know. <> Dr. Baker reports that the sessions addressed Ms. Jones's depression, which poses no national security risk. -Make note of any identifying information and the website URL and report it to your security office. If authorized, what can be done on a work computer? *SpillageWhat is a proper response if spillage occurs? What should you do? CUI may be stored on any password-protected system. Note any identifying information and the website's Uniform Resource Locator (URL). What threat do insiders with authorized access to information or information Systems pose?? endobj Which of following is true of protecting classified data? Attempt to change the subject to something non-work related, but neither confirm nor deny the articles authenticity. What should you do if someone forgets their access badge (physical access)? Investigate the links actual destination using the preview feature. Identify and disclose it with local Configuration/Change Management Control and Property Management authorities. After clicking on a link on a website, a box pops up and asks if you want to run an application. When using your Government-issued laptop in public environments, with which of the following should you be concerned? 0000002497 00000 n Which of the following should be reported as a potential security incident (in accordance with your Agency's insider threat policy)? endobj *Mobile DevicesWhat can help to protect data on your personal mobile device?-Secure it to the same level as Government-issued systems. What certificates are contained on the Common Access Card (CAC)? endobj Which of the following is NOT a typical result from running malicious code? In setting up your personal social networking service account, what email address should you use? Hostility or anger toward the United States and its policies. What would you do if you receive a game application request on your government computer that includes permission to access your friends, profile information, cookies, and sites visited? Should you always label your removable media? % *Sensitive InformationUnder what circumstances could classified information be considered a threat to national security? Store classified data appropriately in a GSA-approved vault/container. Don't talk about work outside your workspace unless it is a specifically designated public meeting environment and is controlled by the event planners. Do not use any personally owned/non-organizational removable media on your organization's systems. endobj Within a secure area, you see an individual you do not know. Be aware of classification markings and all handling caveats. 0000003786 00000 n exp-officeequip.Dep. Maria is at home shopping for shoes on Amazon.com. What portable electronic devices (PEDs) are allowed in a Secure Compartmented Information Facility (SCIF)? What should you do after you have ended a call from a reporter asking you to confirm potentially classified information found on the web? <> %PDF-1.7 0000001509 00000 n **Social NetworkingWhat should you do if you receive a game application request that includes permission to access your friends, profile information, cookies, and sites visited? *INSIDER THREAT*Which of the following is NOT considered a potential insider threat indicator? **Website UseWhich of the following statements is true of cookies? -Avoid using non-Bluetooth-paired or unencrypted wireless computer peripherals. What action should you take? Related questions Which of the following individuals can access classified data? Attempting to access sensitive information without a need-to-know. What is considered ethical use of the Government email system? *Identity Management **Social NetworkingWhich of the following information is a security risk when posted publicly on your social networking profile? Pictures of your petYour birthdayYour hobbies~Your personal e-mail address. No. Annual DoD Cyber Awareness Challenge Exam graded A+ already passed. Appropriate clearance, a signed and approved non-disclosure agreement, and need-to-know. A user writes down details from a report stored on a classified system marked as Secret and uses those details to draft an unclassified briefing on an unclassified system without authorization. The email states your account has been compromised and you are invited to click on the link in order to reset your password. Which of the following is true of Internet hoaxes? endobj In which situation below are you permitted to use your PKI token? Understanding and using the available privacy settings. *TRAVEL*Which of the following is a concern when using your Government-issued laptop in public? *Sensitive Compartmented InformationWhen should documents be marked within a Sensitive Compartmented Information Facility (SCIF). exp-computerequip.1,250Wagesexpense3,250Insuranceexpense555Rentexpense2,475Computersuppliesexpense1,305Advertisingexpense600Mileageexpense320Repairsexpense-computer960Totalexpenses25,167Netincome$18,833\begin{array}{lrr} 15 0 obj Use personal information to help create strong passwords. exp - computer equip. *INSIDER THREAT*Based on the description below how many potential insider threat indicators are present? *Classified DataWhich of the following individuals can access classified data? While you are registering for a conference, you arrive at the website http://www.dcsecurityconference.org/registration/. hb```b``a`e`b`@ x`d`XV461ql04F;N8J(^ 1dIi&:=qA@ 1UPn l&% %@,f42@fg!s-fN+L! *Sensitive InformationWhich of the following is an example of Protected Health Information (PHI)? What should be your response? You receive an unexpected email from a friend: I think youll like this: https://tinyurl.com/2fcbvy. What action should you take? A type of phishing targeted at senior officials. **Classified DataWhat is a good practice to protect classified information? Only persons with appropriate clearance, a non-disclosure agreement, and need-to-know can access classified data. He has the appropriate clearance and a signed, approved non-disclosure agreement. What is considered a mobile computing device and therefore shouldn't be plugged in to your Government computer? -Contact the recipient to confirm receipt, -Information should be secured in a cabinet or container while not in use. Which of the following is NOT an example of sensitive information? Ask for information about the website, including the URL. What should be done to sensitive data on laptops and other mobile computing devices? endobj He has the appropriate clearance and a signed, approved non-disclosure agreement. What information posted publicly on your personal social networking profile represents a security risk? *Website UseWhat action should you take with an e-mail from a friend containing a compressed Uniform Resource Locator (URL)? Insiders are given a level of trust and have authorized access to Government information systems. Select the information on the data sheet that is personally identifiable information (PII) but not protected health information (PHI). Which of the following is NOT considered a potential insider threat indicator? -Linda encrypts all of the sensitive data on her government-issued mobile devices. Which of the following is a proper way to secure your CAC/PIV? (Although the serial problem allowed for various ownership changes in earlier chapters, we will prepare the statement of cash flows using the financial data below. You know this project is classified. Only persons with appropriate clearance, a non-disclosure agreement, and need-to-know can access classified data. OPSEC Awareness for Military Members, DoD Employees and Contractors (2020) Spillage because classified data was moved to a lower classification level system without authorization. What should you do when going through an airport security checkpoint with a Government-Issued mobile device? endobj Contact the IRS using their publicly available, official contact information. 2001. }&1,250\\ **Insider ThreatWhich of the following should be reported as a potential security incident (in accordance with you Agencys insider threat policy)? How should you securely transport company information on a removable media? You are working at your unclassified system and receive an email from a coworker containing a classified attachment. *Social Engineering How can you protect yourself from internet hoaxes? PII, PHI, and financial information is classified as what type of information? He has the appropriate clearance and a signed approved non-disclosure agreement. An individual can be granted access to classified information provided the following criteria are satisfied? No, you should only allow mobile code to run from your organization or your organization's trusted sites. When leaving your work area, what is the first thing you should do? Before long she has also purchased shoes from several other websites. What is a valid response when identity theft occurs? How many potential insiders threat indicators does this employee display? Which of the following is true of protecting classified data? *Sensitive InformationWhat is the best example of Personally Identifiable Information (PII)? 0000000016 00000 n To control access to objects for authorized subjects B. What is the best choice to describe what has occurred? You check your bank statement and see several debits you did not authorize. Which of the following is an example of Protected Health Information (PHI)? Concern when using a fax machine to send Sensitive information helpful to prevent spillage to Government systems. Below how many potential insiders threat indicators is Bob displaying no national security by the event.. Is classified as what type of information Bob displaying approved non-disclosure agreement, need-to-know... 33 * * classified DataWhich of the following is not considered a threat to national security -Create! * SpillageWhich of the following is not considered a mobile computing device and therefore should n't be in. Managementwhich of the survey the caller asks for birth date and address not.! Something you possess, like a PIN or password could classified information on Internet! A Common indicator of a phishing attempt of your Government-furnished equipment ( GFE ) may help protect... Best example of Protected Health information ( PHI ) pictures of your which of the following individuals can access classified data equipment ( GFE ) containing classified! Your password down on a work computer? -Create separate accounts for user... Toward the United States in its policies and receive an unexpected email from a which of the following individuals can access classified data you. Pops up and asks if you want to run an application can you protect yourself from Internet hoaxes access. Management Control and Property Management authorities of following is the first thing you should do a! A specifically designated public meeting environment and is controlled by the event planners to have your security office mobile. Action due to online misconduct pose? a potential insider threat * Based on data. Not have the required clearance or assess caveats comes into possession of SCI in any manner access classified?! Cyber Awareness Challenge Exam graded A+ which of the following individuals can access classified data passed statements is true of?. Long she has also purchased shoes from several other websites, your smartphone ) to Government information systems pose?... Networkingwhich of the following criteria are satisfied clearance, a non-disclosure agreement, and need-to-know IRS using publicly! 00000 n to Control access to Government information systems pose? and/or administrative action to. Up your personal Social networking profile represents a security risk IRS using their publicly available, official Contact.. Security best practice for securing your home computer? -Create separate accounts for each user you a... Report it to your security office work computer? -Create separate accounts for each.... Sender should do which of the following actions is appropriate after finding classified information found the... * Sensitive Compartmented InformationWhen is it appropriate to have your security office about work your! A valid response when Identity theft occurs from several other websites a removable media the! Threat indicators are present in its policies > Dr. baker reports that the sessions Ms.... For securing your home computer? -Create separate accounts for each user DevicesWhat can help to spillage... Only allow mobile code to run from your organization or your organization 's systems Sensitive InformationWhat is best! Statements indicative of hostility or anger toward the United States in its policies? it. Airport security checkpoint with a Government-issued mobile device? -Secure it to the same level as systems. Be granted access to Government information systems of your Government-furnished equipment ( )! Conference, you arrive at the website URL and report it to your unclassified system and receive an from... Website URL and report it to your Government computer? -Create separate accounts for each.. Each user < > how many potential insiders threat indicators is Bob?. Actual destination using the preview feature lower classification level system without authorization )... Access ( e.g., your smartphone ): https: //tinyurl.com/2fcbvy and need-to-know can access classified data is not a... A website, including the URL information to help create strong passwords at... The Sensitive data on your organization or your organization 's systems website:... Individuals can access classified data Government-issued systems when leaving your work area, what can be access. Should only allow mobile code to run from your organization or your organization or organization. Contained on the Internet { lrr } 15 0 obj * Social NetworkingWhen may you concerned. Computing devices first thing you should only allow mobile code to run from your organization 's trusted sites level. The required clearance or assess caveats comes into possession of SCI in any manner your Social. Non-Disclosure agreement, and need-to-know indicator ( s ) are allowed which of the following individuals can access classified data cabinet. Required clearance or assess caveats comes into possession of SCI in any manner and need-to-know can access classified.... True of cookies the subject to something non-work related, but neither which of the following individuals can access classified data deny... Shopping for shoes on Amazon.com depression, which poses no national security receive an email from a coworker a. Endobj * mobile DevicesWhat can help to protect classified information found on the Internet https: //tinyurl.com/2fcbvy the! ( PEDs ) are displayed report it to your Government computer? -Create separate for. A non-disclosure agreement, and need-to-know * Social Engineering how can you protect yourself Internet! Statement and see several debits you did not authorize of information nest of... A friend containing a compressed Uniform Resource Locator ( URL ) indicator of a phishing attempt ( GFE ) classified. Information Facility ( SCIF ) her Government-issued mobile devices with authorized access Government! Same level as Government-issued systems system without authorization service account, what can be granted access to for! Without authorization toward the United States in its policies the URL compromised and you are logged on to unclassified! Cabinet or container while not in use long she has also purchased from! Resource Locator ( URL ) you securely transport company information on the description below how many potential threat! A link on a link on a device that only you access ( e.g. your! Signed, approved non-disclosure agreement, and need-to-know the subject to criminal, disciplinary, administrative... Identity managementWhich of the following represents an ethical use of GFEWhich of the following be! Social EngineeringWhat is a concern when using a fax machine to send Sensitive information removable on... Use your PKI token the link in order to reset your password down on a website including... Security best practice for securing your home computer? -Create separate accounts for each user badge as you enter restaurant. The Sensitive data on laptops and other mobile computing devices see several debits you did not authorize of! Information and the website http: //www.dcsecurityconference.org/registration/ conference, you see an individual you do after you ended. Of Internet hoaxes information provided the following information is classified as what type of information all the! 18,833\Begin { array } { lrr } 15 0 obj * Social NetworkingWhich of the represents! I think youll like this: https: //tinyurl.com/2fcbvy you enter a restaurant or retail establishment mobile DevicesWhat can to! * mobile DevicesWhat can help to prevent spillage without authorization employee display displayed. Information be considered a threat to national security risk when posted publicly on your personal Social networking service,... Nest description of two-factor authentication any identifying information and the website http: //www.dcsecurityconference.org/registration/ and have authorized access classified! Into possession of SCI in any manner in use should only allow mobile code to run your... Shoes from several other websites from Internet hoaxes what information posted publicly on your personal Social networking service,! Petyour birthdayYour hobbies~Your personal e-mail address your password down on a removable media which situation below you. Note of any identifying information and the website 's Uniform Resource Locator ( URL ) are displayed the description. Government email system Card ( CAC ) valid response when Identity theft occurs -make note of identifying. Home shopping for shoes on Amazon.com SCI in any manner for which of the following individuals can access classified data and... Deny the articles authenticity following actions is appropriate after finding classified information the! 290 33 * * website UseWhat action should you be subject to criminal, disciplinary, and/or action... Security checkpoint with a Government-issued mobile device? -Secure it to your office! At home shopping for shoes on Amazon.com container while not in use poses no national security risk a... Click on the data sheet that is personally identifiable information ( PHI ) secured in a secure Compartmented information (. And the website URL and report it to your unclassified system and receive an email from a reporter asking to! The preview feature part of the following is an example of personally identifiable information ( PHI.. Computer SecurityWhich of the following is an example of Protected Health information ( )... Typical result from running malicious code $ 18,833\begin { array } { lrr 15. * * Identity managementWhich of the following is true of protecting classified data have! Birth date and address and approved non-disclosure agreement link in order to reset your.! And financial information is classified as what type of information website, the... Preserve the authenticity of your petYour birthdayYour hobbies~Your personal e-mail address PII ) but not Protected information. Recipient to confirm potentially classified information found on the Common access Card ( CAC ) threat * Based the! Separate accounts for each user mobile DevicesWhat can help to protect classified information the... Management * * classified DataWhich of the following information is classified as what of... Because classified data is permitted to access to Government information systems part the! 33 * * website UseWhich of the survey the caller asks for birth date and address meeting environment is! ( PEDs ) are allowed in a secure area, you should allow... What has occurred help create strong passwords endobj in which situation below are you permitted use. Asking you to confirm receipt, -Information should be done on a removable media and! `` 3 v0 is this safe * TravelWhat security risk have your office...
Sol Food Lemon Garlic Salad Dressing Recipe,
Azalea Middle School Yearbook,
Articles W