CYBER AWARENESS CHALLENGE 2023
(UPDATED) QUESTIONS AND ANSWERS
*Spillage
After reading an online story about a new security project being developed on the
x x x x x x x x x x x x x
military installation where you work, your neighbor asks you to comment about the
x x x x x x x x x x x x x
article. You know that this project is classified. How should you respond? - Correct
x x x x x x x x x x x x x x
Answer - Attempt to change the subject to something non-work related, but neither
x x x x x x x x x x x x x
confirm nor deny the article's authenticity
x x x x x x
*Spillage
Which of the following may help to prevent spillage? - Correct Answer - Label all files,
x x x x x x x x x x x x x x x
removable media, and subject headers with appropriate classification markings.
x x x x x x x x x
*Spillage
A user writes down details marked as Secret from a report stored on a classified system
x x x x x x x x x x x x x x x
and uses those details to draft a briefing on an unclassified system without
x x x x x x x x x x x x x
authorization. What is the best choice to describe what has occurred? - Correct Answer
x x x x x x x x x x x x x x
- Spillage because classified data was moved to a lower classification level system
x x x x x x x x x x x x x
without authorization.
x x
*Spillage
What should you do when you are working on an unclassified system and receive an
x x x x x x x x x x x x x x
email with a classified attachment? - Correct Answer - Call your security point of contact
x x x x x x x x x x x x x x x
immediately
x
*Spillage
What should you do if a reporter asks you about potentially classified information on the
x x x x x x x x x x x x x x
web? - Correct Answer - Ask for information about the website, including the URL.
x x x x x x x x x x x x x x
*Spillage
.What should you do if a reporter asks you about potentially classified information on the
x x x x x x x x x x x x x x
xweb? - Correct Answer - Refer the reporter to your organization's public affairs office.
x x x x x x x x x x x x x
*Spillage
What should you do if you suspect spillage has occurred? - Correct Answer -
x x x x x x x x x x x x x
Immediately notify your security point of contact
x x x x x x x
*Spillage
Which of the following is a good practice to prevent spillage? - Correct Answer - Be
x x x x x x x x x x x x x x x
aware of classification markings and all handling caveats.
x x x x x x x x
,*Spillage
Which of the following actions is appropriate after finding classified information on the
x x x x x x x x x x x x
Internet? - Correct Answer - Note any identifying information and the website's Uniform
x x x x x x x x x x x x x
Resource Locator (URL)
x x x
**Classified Data x
When classified data is not in use, how can you protect it? - Correct Answer - Store
x x x x x x x x x x x x x x x x
classified data appropriately in a GSA-approved vault/container.
x x x x x x x
**Classified Data x
What is required for an individual to access classified data? - Correct Answer -
x x x x x x x x x x x x x
Appropriate clearance, a signed and approved non-disclosure agreement, and need-to-
x x x x x x x x x x
know
**Classified Data x
Which classification level is given to information that could reasonably be expected to
x x x x x x x x x x x x
cause serious damage to national security? - Correct Answer - Secret
x x x x x x x x x x x
**Classified Data x
Which of the following is a good practice to protect classified information? - Correct
x x x x x x x x x x x x x
Answer - Ensure proper labeling by appropriately marking all classified material and,
x x x x x x x x x x x x
when required, sensitive material
x x x x
**Classified Data x
Which of the following is true of protecting classified data? - Correct Answer - Classified
x x x x x x x x x x x x x x
material must be appropriately marked.
x x x x x
**Classified Data x
What level of damage can the unauthorized disclosure of information classified as
x x x x x x x x x x x
Confidential reasonably be expected to cause? - Correct Answer - Damage to national
x x x x x x x x x x x x x
security
x
**Classified Data x
Which of the following is true of telework? - Correct Answer - You must have permission
x x x x x x x x x x x x x x x
from your organization.
x x x
**Classified Data x
Which type of information could reasonably be expected to cause serious damage to
x x x x x x x x x x x x
national security if disclosed without authorization? - Correct Answer - Secret
x x x x x x x x x x x
**Classified Data x
How should you protect a printed classified document when it is not in use? - Correct
x x x x x x x x x x x x x x x
Answer - Store it in a General Services Administration (GSA)-approved vault or
x x x x x x x x x x x x
container
x
, What level of damage to national security could reasonably be expected if unauthorized
x x x x x x x x x x x x
disclosure of Top Secret information occurred? - Correct Answer - Exceptionally grave
x x x x x x x x x x x x
Damage
x
**Insider Threat x
Based on the description that follows, how many potential insider threat indicator(s) are
x x x x x x x x x x x x
displayed? A colleague vacations at the beach every year, is married and a father of
x x x x x x x x x x x x x x x
four, sometimes has poor work quality, and works well with his team. - Correct Answer -
x x x x x x x x x x x x x x x x
~0 indicator
x x
**Insider Threat x
How many potential insider threat indicators does a coworker who often makes others
x x x x x x x x x x x x
uneasy by being persistent in trying to obtain information about classified projects to
x x x x x x x x x x x x x
which he has no access, is boisterous about his wife putting them in credit card debt,
x x x x x x x x x x x x x x x x
and often complains about anxiety and exhaustion display? - Correct Answer - 3 or
x x x x x x x x x x x x x x
more indicators
x x
**Insider Threat x
Based on the description that follows, how many potential insider threat indicator(s) are
x x x x x x x x x x x x
displayed? A colleague is playful and charming, consistently wins performance awards,
x x x x x x x x x x x
and is occasionally aggressive in trying to access classified information. - Correct
x x x x x x x x x x x x
Answer - 1 indicator
x x x x
**Insider Threat x
What advantages do "insider threats" have over others that allows them to cause
x x x x x x x x x x x x
damage to their organizations more easily? - Correct Answer - Insiders are given a level
x x x x x x x x x x x x x x x
of trust and have authorized access to Government information systems
x x x x x x x x x x
**Insider Threat x
What type of activity or behavior should be reported as a potential insider threat? -
x x x x x x x x x x x x x x
Correct Answer - Coworker making consistent statements indicative of hostility or anger
x x x x x x x x x x x x
toward the United States in its policies.
x x x x x x x
**Insider Threat x
Which of the following should be reported as a potential security incident? - Correct
x x x x x x x x x x x x x
Answer - A coworker removes sensitive information without authorization
x x x x x x x x x
**Insider Threat x
Which scenario might indicate a reportable insider threat? - Correct Answer - A coworker
x x x x x x x x x x x x x
uses a personal electronic device in a secure area where their use is prohibited.
x x x x x x x x x x x x x x
**Insider Threat x
Based on the description that follows, how many potential insider threat indicator(s) are
x x x x x x x x x x x x
displayed? A colleague often makes others uneasy with her persistent efforts to obtain
x x x x x x x x x x x x x
information about classified project where she has no need-to-know, is vocal about her
x x x x x x x x x x x x x
(UPDATED) QUESTIONS AND ANSWERS
*Spillage
After reading an online story about a new security project being developed on the
x x x x x x x x x x x x x
military installation where you work, your neighbor asks you to comment about the
x x x x x x x x x x x x x
article. You know that this project is classified. How should you respond? - Correct
x x x x x x x x x x x x x x
Answer - Attempt to change the subject to something non-work related, but neither
x x x x x x x x x x x x x
confirm nor deny the article's authenticity
x x x x x x
*Spillage
Which of the following may help to prevent spillage? - Correct Answer - Label all files,
x x x x x x x x x x x x x x x
removable media, and subject headers with appropriate classification markings.
x x x x x x x x x
*Spillage
A user writes down details marked as Secret from a report stored on a classified system
x x x x x x x x x x x x x x x
and uses those details to draft a briefing on an unclassified system without
x x x x x x x x x x x x x
authorization. What is the best choice to describe what has occurred? - Correct Answer
x x x x x x x x x x x x x x
- Spillage because classified data was moved to a lower classification level system
x x x x x x x x x x x x x
without authorization.
x x
*Spillage
What should you do when you are working on an unclassified system and receive an
x x x x x x x x x x x x x x
email with a classified attachment? - Correct Answer - Call your security point of contact
x x x x x x x x x x x x x x x
immediately
x
*Spillage
What should you do if a reporter asks you about potentially classified information on the
x x x x x x x x x x x x x x
web? - Correct Answer - Ask for information about the website, including the URL.
x x x x x x x x x x x x x x
*Spillage
.What should you do if a reporter asks you about potentially classified information on the
x x x x x x x x x x x x x x
xweb? - Correct Answer - Refer the reporter to your organization's public affairs office.
x x x x x x x x x x x x x
*Spillage
What should you do if you suspect spillage has occurred? - Correct Answer -
x x x x x x x x x x x x x
Immediately notify your security point of contact
x x x x x x x
*Spillage
Which of the following is a good practice to prevent spillage? - Correct Answer - Be
x x x x x x x x x x x x x x x
aware of classification markings and all handling caveats.
x x x x x x x x
,*Spillage
Which of the following actions is appropriate after finding classified information on the
x x x x x x x x x x x x
Internet? - Correct Answer - Note any identifying information and the website's Uniform
x x x x x x x x x x x x x
Resource Locator (URL)
x x x
**Classified Data x
When classified data is not in use, how can you protect it? - Correct Answer - Store
x x x x x x x x x x x x x x x x
classified data appropriately in a GSA-approved vault/container.
x x x x x x x
**Classified Data x
What is required for an individual to access classified data? - Correct Answer -
x x x x x x x x x x x x x
Appropriate clearance, a signed and approved non-disclosure agreement, and need-to-
x x x x x x x x x x
know
**Classified Data x
Which classification level is given to information that could reasonably be expected to
x x x x x x x x x x x x
cause serious damage to national security? - Correct Answer - Secret
x x x x x x x x x x x
**Classified Data x
Which of the following is a good practice to protect classified information? - Correct
x x x x x x x x x x x x x
Answer - Ensure proper labeling by appropriately marking all classified material and,
x x x x x x x x x x x x
when required, sensitive material
x x x x
**Classified Data x
Which of the following is true of protecting classified data? - Correct Answer - Classified
x x x x x x x x x x x x x x
material must be appropriately marked.
x x x x x
**Classified Data x
What level of damage can the unauthorized disclosure of information classified as
x x x x x x x x x x x
Confidential reasonably be expected to cause? - Correct Answer - Damage to national
x x x x x x x x x x x x x
security
x
**Classified Data x
Which of the following is true of telework? - Correct Answer - You must have permission
x x x x x x x x x x x x x x x
from your organization.
x x x
**Classified Data x
Which type of information could reasonably be expected to cause serious damage to
x x x x x x x x x x x x
national security if disclosed without authorization? - Correct Answer - Secret
x x x x x x x x x x x
**Classified Data x
How should you protect a printed classified document when it is not in use? - Correct
x x x x x x x x x x x x x x x
Answer - Store it in a General Services Administration (GSA)-approved vault or
x x x x x x x x x x x x
container
x
, What level of damage to national security could reasonably be expected if unauthorized
x x x x x x x x x x x x
disclosure of Top Secret information occurred? - Correct Answer - Exceptionally grave
x x x x x x x x x x x x
Damage
x
**Insider Threat x
Based on the description that follows, how many potential insider threat indicator(s) are
x x x x x x x x x x x x
displayed? A colleague vacations at the beach every year, is married and a father of
x x x x x x x x x x x x x x x
four, sometimes has poor work quality, and works well with his team. - Correct Answer -
x x x x x x x x x x x x x x x x
~0 indicator
x x
**Insider Threat x
How many potential insider threat indicators does a coworker who often makes others
x x x x x x x x x x x x
uneasy by being persistent in trying to obtain information about classified projects to
x x x x x x x x x x x x x
which he has no access, is boisterous about his wife putting them in credit card debt,
x x x x x x x x x x x x x x x x
and often complains about anxiety and exhaustion display? - Correct Answer - 3 or
x x x x x x x x x x x x x x
more indicators
x x
**Insider Threat x
Based on the description that follows, how many potential insider threat indicator(s) are
x x x x x x x x x x x x
displayed? A colleague is playful and charming, consistently wins performance awards,
x x x x x x x x x x x
and is occasionally aggressive in trying to access classified information. - Correct
x x x x x x x x x x x x
Answer - 1 indicator
x x x x
**Insider Threat x
What advantages do "insider threats" have over others that allows them to cause
x x x x x x x x x x x x
damage to their organizations more easily? - Correct Answer - Insiders are given a level
x x x x x x x x x x x x x x x
of trust and have authorized access to Government information systems
x x x x x x x x x x
**Insider Threat x
What type of activity or behavior should be reported as a potential insider threat? -
x x x x x x x x x x x x x x
Correct Answer - Coworker making consistent statements indicative of hostility or anger
x x x x x x x x x x x x
toward the United States in its policies.
x x x x x x x
**Insider Threat x
Which of the following should be reported as a potential security incident? - Correct
x x x x x x x x x x x x x
Answer - A coworker removes sensitive information without authorization
x x x x x x x x x
**Insider Threat x
Which scenario might indicate a reportable insider threat? - Correct Answer - A coworker
x x x x x x x x x x x x x
uses a personal electronic device in a secure area where their use is prohibited.
x x x x x x x x x x x x x x
**Insider Threat x
Based on the description that follows, how many potential insider threat indicator(s) are
x x x x x x x x x x x x
displayed? A colleague often makes others uneasy with her persistent efforts to obtain
x x x x x x x x x x x x x
information about classified project where she has no need-to-know, is vocal about her
x x x x x x x x x x x x x
