Cyber Awareness 2023 Questions with well explained answers

Spillage: how should uou respond if you receive an inquiry for info not clear for public release? - AnswerRefer your order to PAO. Spillage: what will help prevent spillage? - Answer-Follow procedures for transfering data to and from outside agency and networks. Classified data: what is the basis for handling classified data? - Answer-Classification level and handling caveats Classified data: who designates classified data? - Answer-Original Classification Authority Insider Threat: which is the following of a potential insider threat? - Answer-Difficult life circumstances Insider threat: what function do insider threat programs aim to fulfill? - Answer-Proactively identify future threats and formulate wholistic mitigation responses Insider threats: what is a reportable insider threat? - Answer-A colleague removes sensitive info w/o seeking authorization in order to perform authorized telework Social Networking: when might you be subject to criminal, disciplinary, or administrative action due to online harassment, bullying, stalking, etc? - Answer-If you participate/condone it in anyway Social Networking: which of the following is a security best practice when using social networking sites? - Answer-Avoid posting pii (mothers maiden name) Social Networking: Protect yourself on social networking sites? - Answer-Delete posts containing Personal information on a regular basis Controlled Unclass Info: which Desi marks information that does not have the potential to damage national security - Answer-UnclassifiedControlled Unclass Info: What's true for CUI? - Answer-CUI must have diseminating controls Controlled Unclass Info: best way to transmit CUI? - Answer-Make sure recipients are clear and need to know then send via encrypted email Physical security: which CPCON establishes a protection policy focus critical functions only - AnswerCPCON 1 Identity Management: strong password? - Answer-@rF+13gtK5! Identify Management: whats true about CACs? - Answer-It contains certificates for ID, encryption, and digital signature SCI: what's true of sharing info in a SCIF? - Answer-Avoid referencing derivitavely classified reports classified higher than the recipient SCI: what's true for transmitting SCI? - Answer-Only transmit SCI if you're courier briefed for SCI Removable media in SCIF: what's true of PEDs in a SCIF? - Answer-Only connect government-owned PEDs to the same level classification information system when authorized Malicious Code: what's true for downloading apps? - Answer-For government devices, use approved and authorized apps only Website use: how should you respond to theft of identity? - Answer-Contact reporting agencies, financial institutions, monitor credit card statements and report crime to law enforcement Social engineering: how to protect from social engineering? - Answer-Verify identity of individuals Social engineering: common indicator of phishng attempt? - Answer-Claim that you update or validate informationSocial engineering: what security issue is associated with compressed URLs? - Answer-Can be used to mask malicious intent Travel: problems w/ public wifi? - Answer-May expose information sent to theft GFE: what is personally owned monitor you shouldn't connect to your GFE? - Answer-USB Mobile Devices: which is a best practice for using removable media? - Answer-Avoid inserting removable media with unknown content into your computer