DOD CYBER AWARENESS EXAMS EVALUATION QUESTIONS
AND ANSWERS RATED A+
✔✔Which scenario might indicate a reportable insider threat security incident? - ✔✔A
coworker is observed using a personal electronic device in an area where their use is
prohibited.
✔✔Why might "insiders" be able to cause damage to their organizations more easily
than others? - ✔✔Insiders are given a level of trust and have authorized access to
Government information systems.
✔✔Which of the following is a best practice to protect information about you and your
organization on social networking sites and applications? - ✔✔Use only personal
contact information when establishing personal social networking accounts, never use
Government contact information.
✔✔What should you do if an individual asks you to let her follow you into your controlled
space, stating that she left her security badge at her desk? - ✔✔Don't allow her access
into secure areas and report suspicious activity.
✔✔Which represents a security best practice when using social networking? -
✔✔Understanding and using available privacy settings.
✔✔Under which circumstances may you be subject to criminal, disciplinary, and/or
administrative action due to online misconduct? - ✔✔Any time you participate in or
condone misconduct, whether offline or online.
✔✔As someone who works with classified information, what should you do if you are
contacted by a foreign national seeking information on a research project? - ✔✔Inform
your security POC of all non-professional or non-routine contacts with foreign nations,
including, but not limited to, joining each other's social media sites.
✔✔Which of the following is true about unclassified data? - ✔✔When unclassified data
is aggregated, its classification level may rise.
✔✔What are some potential insider threat indicators? - ✔✔Difficult life circumstances
such as substance abuse; divided loyalty or allegiance to the U.S.; or extreme,
persistent interpersonal difficulties.
✔✔What information posted publicly on your personal social networking profile
represents a security risk? - ✔✔Your place of birth
, ✔✔What is an individual's Personally Identifiable Information (PII) or Protected Health
Information (PHI) considered? - ✔✔Sensitive information.
✔✔Under what circumstances could unclassified information be considered a threat to
national security? - ✔✔If aggregated, the information could become classified.
✔✔What type of unclassified material should always be marked with a special handling
caveat? - ✔✔For Official Use Only (FOUO)
✔✔Which is true for protecting classified data? - ✔✔Classified material is stored in a
GSA-approved container when not in use.
✔✔How many potential insider threat indicators does a person who is playful and
charming, consistently win performance awards, but is occasionally aggressive in trying
to access sensitive information? - ✔✔1 Indicator
✔✔Which of the following terms refers to harm inflicted on national security through
authorized access to information or information systems? - ✔✔Insider Threat
✔✔What is the best example of Personally Identifiable Information (PII)? - ✔✔Date and
place of birth
✔✔What is the best example of Protected Health Information (PHI)? - ✔✔Your health
insurance explanation of benefits (EOB)
✔✔When is the best time to post details of your vacation activities on your social
networking website? - ✔✔When your vacation is over, and you have returned home
✔✔What does Personally Identifiable Information (PII) include? - ✔✔Social Security
Number; date and place of birth; mother's maiden name
✔✔What must you ensure if you work involves the use of different types of smart card
security tokens? - ✔✔Avoid a potential security violation by using the appropriate token
for each system.
✔✔What must you ensure before transmitting Personally Identifiable Information (PII) or
Protected Health Information (PHI) via e-mail? - ✔✔Transmissions must be between
Government e-mail accounts and must be encrypted and digitally signed when possible.
✔✔What must you do when e-mailing Personally Identifiable Information (PII) or
Protected Health Information (PHI)? - ✔✔Encrypt the e-mail and use your Government
e-mail account.
AND ANSWERS RATED A+
✔✔Which scenario might indicate a reportable insider threat security incident? - ✔✔A
coworker is observed using a personal electronic device in an area where their use is
prohibited.
✔✔Why might "insiders" be able to cause damage to their organizations more easily
than others? - ✔✔Insiders are given a level of trust and have authorized access to
Government information systems.
✔✔Which of the following is a best practice to protect information about you and your
organization on social networking sites and applications? - ✔✔Use only personal
contact information when establishing personal social networking accounts, never use
Government contact information.
✔✔What should you do if an individual asks you to let her follow you into your controlled
space, stating that she left her security badge at her desk? - ✔✔Don't allow her access
into secure areas and report suspicious activity.
✔✔Which represents a security best practice when using social networking? -
✔✔Understanding and using available privacy settings.
✔✔Under which circumstances may you be subject to criminal, disciplinary, and/or
administrative action due to online misconduct? - ✔✔Any time you participate in or
condone misconduct, whether offline or online.
✔✔As someone who works with classified information, what should you do if you are
contacted by a foreign national seeking information on a research project? - ✔✔Inform
your security POC of all non-professional or non-routine contacts with foreign nations,
including, but not limited to, joining each other's social media sites.
✔✔Which of the following is true about unclassified data? - ✔✔When unclassified data
is aggregated, its classification level may rise.
✔✔What are some potential insider threat indicators? - ✔✔Difficult life circumstances
such as substance abuse; divided loyalty or allegiance to the U.S.; or extreme,
persistent interpersonal difficulties.
✔✔What information posted publicly on your personal social networking profile
represents a security risk? - ✔✔Your place of birth
, ✔✔What is an individual's Personally Identifiable Information (PII) or Protected Health
Information (PHI) considered? - ✔✔Sensitive information.
✔✔Under what circumstances could unclassified information be considered a threat to
national security? - ✔✔If aggregated, the information could become classified.
✔✔What type of unclassified material should always be marked with a special handling
caveat? - ✔✔For Official Use Only (FOUO)
✔✔Which is true for protecting classified data? - ✔✔Classified material is stored in a
GSA-approved container when not in use.
✔✔How many potential insider threat indicators does a person who is playful and
charming, consistently win performance awards, but is occasionally aggressive in trying
to access sensitive information? - ✔✔1 Indicator
✔✔Which of the following terms refers to harm inflicted on national security through
authorized access to information or information systems? - ✔✔Insider Threat
✔✔What is the best example of Personally Identifiable Information (PII)? - ✔✔Date and
place of birth
✔✔What is the best example of Protected Health Information (PHI)? - ✔✔Your health
insurance explanation of benefits (EOB)
✔✔When is the best time to post details of your vacation activities on your social
networking website? - ✔✔When your vacation is over, and you have returned home
✔✔What does Personally Identifiable Information (PII) include? - ✔✔Social Security
Number; date and place of birth; mother's maiden name
✔✔What must you ensure if you work involves the use of different types of smart card
security tokens? - ✔✔Avoid a potential security violation by using the appropriate token
for each system.
✔✔What must you ensure before transmitting Personally Identifiable Information (PII) or
Protected Health Information (PHI) via e-mail? - ✔✔Transmissions must be between
Government e-mail accounts and must be encrypted and digitally signed when possible.
✔✔What must you do when e-mailing Personally Identifiable Information (PII) or
Protected Health Information (PHI)? - ✔✔Encrypt the e-mail and use your Government
e-mail account.
