DOD CYBER AWARENESS 2026 STUDY GUIDE QUESTIONS
AND ANSWERS RATED A+
✔✔Which of the following is an example of a strong password? - ✔✔bRobr@79l*P
✔✔Matt is a government employee who needs to share a document containing source
selection data with his supervisor. Which of the following describes the most appropriate
way for Matt to do this? - ✔✔Encrypt it and send it via digitally signed Government e-
mail.
✔✔You receive a phone call from an unknown person asking for a directory name on
your government furnished laptop so that a software update can be made. Which
course of action should you take? - ✔✔Document the interaction and contact your
security POC or help desk.
✔✔Which of the following is permitted within a Sensitive Compartmented Information
Facility (SCIF)? - ✔✔A Bluetooth medical device, such as a glucose monitor
✔✔When linked to a specific individual, which of the following is NOT an example of
Personally Identifiable Information (PII)? - ✔✔Smartphone brand and model
✔✔How can you protect yourself from identity theft? - ✔✔Review your credit report
annually
✔✔Which of the following is true of working within a Sensitive Compartmented
Information Facility (SCIF)? - ✔✔Badges must be worn while in the facility and removed
when leaving the facility.
✔✔How can you prevent viruses and malicious code? - ✔✔Scan all e-mail attachments
✔✔Which of the following is a best practice to protect your identity? - ✔✔Ask how
information will be used before giving it out
✔✔Which of the following is a way to protect classified data? - ✔✔Store it in a GSA-
approved container
✔✔Which of the following uses of removable media is allowed? - ✔✔Sam uses
approved Government owned removable media to transfer files between government
systems as authorized.
✔✔Which of the following can be used to catalogue information about you? - ✔✔All of
these
, ✔✔Tessa is processing payroll data that includes employees' names, home addresses,
and salary. Which of the following is Tessa prohibited from doing with the data? -
✔✔Using her home computer to print the data while working remotely
✔✔John receives an e-mail about a potential shutdown of a major social service unless
a petition receives enough signatures. Which of the following actions should John NOT
take with the e-mail? - ✔✔Forward it
✔✔How can you protect yourself on social networking sites? - ✔✔Validate connection
requests through another source if possible
✔✔You receive an e-mail with a link to run an anti-virus scan. Your IT department has
not sent links like this in the past. The e-mail is not digitally signed. What action should
you take? - ✔✔Report the e-mail to your security POC or help desk
✔✔Which of the following is true of spillage? - ✔✔It can be either inadvertent or
intentional
✔✔Which of the following is true of Controlled Unclassified Information (CUI)? - ✔✔It
belongs to a defined category established in the DoD CUI Registry.
✔✔Which of the following describes Sensitive Compartmented Information (SCI)? -
✔✔SCI introduces an overlay of security to Top Secret, Secret, and Confidential
information.
✔✔Which of the following is an allowed use of government furnished equipment (GFE)?
- ✔✔E-mailing your supervisor
✔✔Which of the following poses a security risk while teleworking in an environment
where Internet of Things (IoT) devices are present? - ✔✔All of these
✔✔Which of the following would working in combination for two-factor authentication? -
✔✔Common Access Card (CAC) and Personal Identification Number (PIN)
✔✔Which of the following provides precise, comprehensive guidance regarding specific
program, system, operation, or weapon system elements of information to be classified?
- ✔✔Security Classification Guide
✔✔Which of the following is a best practice for using government e-mail? - ✔✔Do no
solicit sales
✔✔As you browse a social media site, you come across photos of information with
classification markings. What should you do? - ✔✔Notify your security point of contact.
AND ANSWERS RATED A+
✔✔Which of the following is an example of a strong password? - ✔✔bRobr@79l*P
✔✔Matt is a government employee who needs to share a document containing source
selection data with his supervisor. Which of the following describes the most appropriate
way for Matt to do this? - ✔✔Encrypt it and send it via digitally signed Government e-
mail.
✔✔You receive a phone call from an unknown person asking for a directory name on
your government furnished laptop so that a software update can be made. Which
course of action should you take? - ✔✔Document the interaction and contact your
security POC or help desk.
✔✔Which of the following is permitted within a Sensitive Compartmented Information
Facility (SCIF)? - ✔✔A Bluetooth medical device, such as a glucose monitor
✔✔When linked to a specific individual, which of the following is NOT an example of
Personally Identifiable Information (PII)? - ✔✔Smartphone brand and model
✔✔How can you protect yourself from identity theft? - ✔✔Review your credit report
annually
✔✔Which of the following is true of working within a Sensitive Compartmented
Information Facility (SCIF)? - ✔✔Badges must be worn while in the facility and removed
when leaving the facility.
✔✔How can you prevent viruses and malicious code? - ✔✔Scan all e-mail attachments
✔✔Which of the following is a best practice to protect your identity? - ✔✔Ask how
information will be used before giving it out
✔✔Which of the following is a way to protect classified data? - ✔✔Store it in a GSA-
approved container
✔✔Which of the following uses of removable media is allowed? - ✔✔Sam uses
approved Government owned removable media to transfer files between government
systems as authorized.
✔✔Which of the following can be used to catalogue information about you? - ✔✔All of
these
, ✔✔Tessa is processing payroll data that includes employees' names, home addresses,
and salary. Which of the following is Tessa prohibited from doing with the data? -
✔✔Using her home computer to print the data while working remotely
✔✔John receives an e-mail about a potential shutdown of a major social service unless
a petition receives enough signatures. Which of the following actions should John NOT
take with the e-mail? - ✔✔Forward it
✔✔How can you protect yourself on social networking sites? - ✔✔Validate connection
requests through another source if possible
✔✔You receive an e-mail with a link to run an anti-virus scan. Your IT department has
not sent links like this in the past. The e-mail is not digitally signed. What action should
you take? - ✔✔Report the e-mail to your security POC or help desk
✔✔Which of the following is true of spillage? - ✔✔It can be either inadvertent or
intentional
✔✔Which of the following is true of Controlled Unclassified Information (CUI)? - ✔✔It
belongs to a defined category established in the DoD CUI Registry.
✔✔Which of the following describes Sensitive Compartmented Information (SCI)? -
✔✔SCI introduces an overlay of security to Top Secret, Secret, and Confidential
information.
✔✔Which of the following is an allowed use of government furnished equipment (GFE)?
- ✔✔E-mailing your supervisor
✔✔Which of the following poses a security risk while teleworking in an environment
where Internet of Things (IoT) devices are present? - ✔✔All of these
✔✔Which of the following would working in combination for two-factor authentication? -
✔✔Common Access Card (CAC) and Personal Identification Number (PIN)
✔✔Which of the following provides precise, comprehensive guidance regarding specific
program, system, operation, or weapon system elements of information to be classified?
- ✔✔Security Classification Guide
✔✔Which of the following is a best practice for using government e-mail? - ✔✔Do no
solicit sales
✔✔As you browse a social media site, you come across photos of information with
classification markings. What should you do? - ✔✔Notify your security point of contact.
