CYBER AWARENESS CHALLENGE 2023
(UPDATED) QUESTIONS AND ANSWERS
*Spillage
After oreading oan oonline ostory oabout oa onew osecurity oproject obeing odeveloped oon othe
omilitary oinstallation owhere oyou owork, oyour oneighbor oasks oyou oto ocomment oabout othe
oarticle. oYou oknow othat othis oproject ois oclassified. oHow oshould oyou orespond? o- oCorrect
oAnswer o- oAttempt oto ochange othe osubject oto osomething onon-work orelated, obut oneither
oconfirm onor odeny othe oarticle's oauthenticity
*Spillage
Which oof othe ofollowing omay ohelp oto oprevent ospillage? o- oCorrect oAnswer o- oLabel oall ofiles,
oremovable omedia, oand osubject oheaders owith oappropriate oclassification omarkings.
*Spillage
A ouser owrites odown odetails omarked oas oSecret ofrom oa oreport ostored oon oa oclassified
osystem oand ouses othose odetails oto odraft oa obriefing oon oan ounclassified osystem owithout
oauthorization. oWhat ois othe obest ochoice oto odescribe owhat ohas ooccurred? o- oCorrect
oAnswer o- oSpillage obecause oclassified odata owas omoved oto oa olower oclassification olevel
osystem owithout oauthorization.
*Spillage
What oshould oyou odo owhen oyou oare oworking oon oan ounclassified osystem oand oreceive oan
oemail owith oa oclassified oattachment? o- oCorrect oAnswer o- oCall oyour osecurity opoint oof
ocontact oimmediately
*Spillage
What oshould oyou odo oif oa oreporter oasks oyou oabout opotentially oclassified oinformation oon
othe oweb? o- oCorrect oAnswer o- oAsk ofor oinformation oabout othe owebsite, oincluding othe
oURL.
*Spillage
.What oshould oyou odo oif oa oreporter oasks oyou oabout opotentially oclassified oinformation oon
othe oweb? o- oCorrect oAnswer o- oRefer othe oreporter oto oyour oorganization's opublic oaffairs
ooffice.
*Spillage
What oshould oyou odo oif oyou osuspect ospillage ohas ooccurred? o- oCorrect oAnswer o-
oImmediately onotify oyour osecurity opoint oof ocontact
*Spillage
,Which oof othe ofollowing ois oa ogood opractice oto oprevent ospillage? o- oCorrect oAnswer o- oBe
oaware oof oclassification omarkings oand oall ohandling ocaveats.
*Spillage
Which oof othe ofollowing oactions ois oappropriate oafter ofinding oclassified oinformation oon othe
oInternet? o- oCorrect oAnswer o- oNote oany oidentifying oinformation oand othe owebsite's
oUniform oResource oLocator o(URL)
**Classified oData
When oclassified odata ois onot oin ouse, ohow ocan oyou oprotect oit? o- oCorrect oAnswer o- oStore
oclassified odata oappropriately oin oa oGSA-approved ovault/container.
**Classified oData
What ois orequired ofor oan oindividual oto oaccess oclassified odata? o- oCorrect oAnswer o-
oAppropriate oclearance, oa osigned oand oapproved onon-disclosure oagreement, oand oneed-
to-know
**Classified oData
Which oclassification olevel ois ogiven oto oinformation othat ocould oreasonably obe oexpected oto
ocause oserious odamage oto onational osecurity? o- oCorrect oAnswer o- oSecret
**Classified oData
Which oof othe ofollowing ois oa ogood opractice oto oprotect oclassified oinformation? o- oCorrect
oAnswer o- oEnsure oproper olabeling oby oappropriately omarking oall oclassified omaterial oand,
owhen orequired, osensitive omaterial
**Classified oData
Which oof othe ofollowing ois otrue oof oprotecting oclassified odata? o- oCorrect oAnswer o-
oClassified omaterial omust obe oappropriately omarked.
**Classified oData
What olevel oof odamage ocan othe ounauthorized odisclosure oof oinformation oclassified oas
oConfidential oreasonably obe oexpected oto ocause? o- oCorrect oAnswer o- oDamage oto
onational osecurity
**Classified oData
Which oof othe ofollowing ois otrue oof otelework? o- oCorrect oAnswer o- oYou omust ohave
opermission ofrom oyour oorganization.
**Classified oData
Which otype oof oinformation ocould oreasonably obe oexpected oto ocause oserious odamage oto
onational osecurity oif odisclosed owithout oauthorization? o- oCorrect oAnswer o- oSecret
**Classified oData
, How oshould oyou oprotect oa oprinted oclassified odocument owhen oit ois onot oin ouse? o- oCorrect
oAnswer o- oStore oit oin oa oGeneral oServices oAdministration o(GSA)-approved ovault oor
ocontainer
What olevel oof odamage oto onational osecurity ocould oreasonably obe oexpected oif
ounauthorized odisclosure oof oTop oSecret oinformation ooccurred? o- oCorrect oAnswer o-
oExceptionally ograve oDamage
**Insider oThreat
Based oon othe odescription othat ofollows, ohow omany opotential oinsider othreat oindicator(s)
oare odisplayed? oA ocolleague ovacations oat othe obeach oevery oyear, ois omarried oand oa
ofather oof ofour, osometimes ohas opoor owork oquality, oand oworks owell owith ohis oteam. o-
oCorrect oAnswer o- o~0 oindicator
**Insider oThreat
How omany opotential oinsider othreat oindicators odoes oa ocoworker owho ooften omakes oothers
ouneasy oby obeing opersistent oin otrying oto oobtain oinformation oabout oclassified oprojects oto
owhich ohe ohas ono oaccess, ois oboisterous oabout ohis owife oputting othem oin ocredit ocard odebt,
oand ooften ocomplains oabout oanxiety oand oexhaustion odisplay? o- oCorrect oAnswer o- o3 oor
omore oindicators
**Insider oThreat
Based oon othe odescription othat ofollows, ohow omany opotential oinsider othreat oindicator(s)
oare odisplayed? oA ocolleague ois oplayful oand ocharming, oconsistently owins operformance
oawards, oand ois ooccasionally oaggressive oin otrying oto oaccess oclassified oinformation. o-
oCorrect oAnswer o- o1 oindicator
**Insider oThreat
What oadvantages odo o"insider othreats" ohave oover oothers othat oallows othem oto ocause
odamage oto otheir oorganizations omore oeasily? o- oCorrect oAnswer o- oInsiders oare ogiven oa
olevel oof otrust oand ohave oauthorized oaccess oto oGovernment oinformation osystems
**Insider oThreat
What otype oof oactivity oor obehavior oshould obe oreported oas oa opotential oinsider othreat? o-
oCorrect oAnswer o- oCoworker omaking oconsistent ostatements oindicative oof ohostility oor
oanger otoward othe oUnited oStates oin oits opolicies.
**Insider oThreat
Which oof othe ofollowing oshould obe oreported oas oa opotential osecurity oincident? o- oCorrect
oAnswer o- oA ocoworker oremoves osensitive oinformation owithout oauthorization
**Insider oThreat
Which oscenario omight oindicate oa oreportable oinsider othreat? o- oCorrect oAnswer o- oA
ocoworker ouses oa opersonal oelectronic odevice oin oa osecure oarea owhere otheir ouse ois
oprohibited.
(UPDATED) QUESTIONS AND ANSWERS
*Spillage
After oreading oan oonline ostory oabout oa onew osecurity oproject obeing odeveloped oon othe
omilitary oinstallation owhere oyou owork, oyour oneighbor oasks oyou oto ocomment oabout othe
oarticle. oYou oknow othat othis oproject ois oclassified. oHow oshould oyou orespond? o- oCorrect
oAnswer o- oAttempt oto ochange othe osubject oto osomething onon-work orelated, obut oneither
oconfirm onor odeny othe oarticle's oauthenticity
*Spillage
Which oof othe ofollowing omay ohelp oto oprevent ospillage? o- oCorrect oAnswer o- oLabel oall ofiles,
oremovable omedia, oand osubject oheaders owith oappropriate oclassification omarkings.
*Spillage
A ouser owrites odown odetails omarked oas oSecret ofrom oa oreport ostored oon oa oclassified
osystem oand ouses othose odetails oto odraft oa obriefing oon oan ounclassified osystem owithout
oauthorization. oWhat ois othe obest ochoice oto odescribe owhat ohas ooccurred? o- oCorrect
oAnswer o- oSpillage obecause oclassified odata owas omoved oto oa olower oclassification olevel
osystem owithout oauthorization.
*Spillage
What oshould oyou odo owhen oyou oare oworking oon oan ounclassified osystem oand oreceive oan
oemail owith oa oclassified oattachment? o- oCorrect oAnswer o- oCall oyour osecurity opoint oof
ocontact oimmediately
*Spillage
What oshould oyou odo oif oa oreporter oasks oyou oabout opotentially oclassified oinformation oon
othe oweb? o- oCorrect oAnswer o- oAsk ofor oinformation oabout othe owebsite, oincluding othe
oURL.
*Spillage
.What oshould oyou odo oif oa oreporter oasks oyou oabout opotentially oclassified oinformation oon
othe oweb? o- oCorrect oAnswer o- oRefer othe oreporter oto oyour oorganization's opublic oaffairs
ooffice.
*Spillage
What oshould oyou odo oif oyou osuspect ospillage ohas ooccurred? o- oCorrect oAnswer o-
oImmediately onotify oyour osecurity opoint oof ocontact
*Spillage
,Which oof othe ofollowing ois oa ogood opractice oto oprevent ospillage? o- oCorrect oAnswer o- oBe
oaware oof oclassification omarkings oand oall ohandling ocaveats.
*Spillage
Which oof othe ofollowing oactions ois oappropriate oafter ofinding oclassified oinformation oon othe
oInternet? o- oCorrect oAnswer o- oNote oany oidentifying oinformation oand othe owebsite's
oUniform oResource oLocator o(URL)
**Classified oData
When oclassified odata ois onot oin ouse, ohow ocan oyou oprotect oit? o- oCorrect oAnswer o- oStore
oclassified odata oappropriately oin oa oGSA-approved ovault/container.
**Classified oData
What ois orequired ofor oan oindividual oto oaccess oclassified odata? o- oCorrect oAnswer o-
oAppropriate oclearance, oa osigned oand oapproved onon-disclosure oagreement, oand oneed-
to-know
**Classified oData
Which oclassification olevel ois ogiven oto oinformation othat ocould oreasonably obe oexpected oto
ocause oserious odamage oto onational osecurity? o- oCorrect oAnswer o- oSecret
**Classified oData
Which oof othe ofollowing ois oa ogood opractice oto oprotect oclassified oinformation? o- oCorrect
oAnswer o- oEnsure oproper olabeling oby oappropriately omarking oall oclassified omaterial oand,
owhen orequired, osensitive omaterial
**Classified oData
Which oof othe ofollowing ois otrue oof oprotecting oclassified odata? o- oCorrect oAnswer o-
oClassified omaterial omust obe oappropriately omarked.
**Classified oData
What olevel oof odamage ocan othe ounauthorized odisclosure oof oinformation oclassified oas
oConfidential oreasonably obe oexpected oto ocause? o- oCorrect oAnswer o- oDamage oto
onational osecurity
**Classified oData
Which oof othe ofollowing ois otrue oof otelework? o- oCorrect oAnswer o- oYou omust ohave
opermission ofrom oyour oorganization.
**Classified oData
Which otype oof oinformation ocould oreasonably obe oexpected oto ocause oserious odamage oto
onational osecurity oif odisclosed owithout oauthorization? o- oCorrect oAnswer o- oSecret
**Classified oData
, How oshould oyou oprotect oa oprinted oclassified odocument owhen oit ois onot oin ouse? o- oCorrect
oAnswer o- oStore oit oin oa oGeneral oServices oAdministration o(GSA)-approved ovault oor
ocontainer
What olevel oof odamage oto onational osecurity ocould oreasonably obe oexpected oif
ounauthorized odisclosure oof oTop oSecret oinformation ooccurred? o- oCorrect oAnswer o-
oExceptionally ograve oDamage
**Insider oThreat
Based oon othe odescription othat ofollows, ohow omany opotential oinsider othreat oindicator(s)
oare odisplayed? oA ocolleague ovacations oat othe obeach oevery oyear, ois omarried oand oa
ofather oof ofour, osometimes ohas opoor owork oquality, oand oworks owell owith ohis oteam. o-
oCorrect oAnswer o- o~0 oindicator
**Insider oThreat
How omany opotential oinsider othreat oindicators odoes oa ocoworker owho ooften omakes oothers
ouneasy oby obeing opersistent oin otrying oto oobtain oinformation oabout oclassified oprojects oto
owhich ohe ohas ono oaccess, ois oboisterous oabout ohis owife oputting othem oin ocredit ocard odebt,
oand ooften ocomplains oabout oanxiety oand oexhaustion odisplay? o- oCorrect oAnswer o- o3 oor
omore oindicators
**Insider oThreat
Based oon othe odescription othat ofollows, ohow omany opotential oinsider othreat oindicator(s)
oare odisplayed? oA ocolleague ois oplayful oand ocharming, oconsistently owins operformance
oawards, oand ois ooccasionally oaggressive oin otrying oto oaccess oclassified oinformation. o-
oCorrect oAnswer o- o1 oindicator
**Insider oThreat
What oadvantages odo o"insider othreats" ohave oover oothers othat oallows othem oto ocause
odamage oto otheir oorganizations omore oeasily? o- oCorrect oAnswer o- oInsiders oare ogiven oa
olevel oof otrust oand ohave oauthorized oaccess oto oGovernment oinformation osystems
**Insider oThreat
What otype oof oactivity oor obehavior oshould obe oreported oas oa opotential oinsider othreat? o-
oCorrect oAnswer o- oCoworker omaking oconsistent ostatements oindicative oof ohostility oor
oanger otoward othe oUnited oStates oin oits opolicies.
**Insider oThreat
Which oof othe ofollowing oshould obe oreported oas oa opotential osecurity oincident? o- oCorrect
oAnswer o- oA ocoworker oremoves osensitive oinformation owithout oauthorization
**Insider oThreat
Which oscenario omight oindicate oa oreportable oinsider othreat? o- oCorrect oAnswer o- oA
ocoworker ouses oa opersonal oelectronic odevice oin oa osecure oarea owhere otheir ouse ois
oprohibited.
