Unauthorized Disclosure of
Classified Information and CUI
1. CUl does not have to be encrypted if it stays on a government approved network.
CUl must be marked appropriately over an approved network.
It is okay to discuss Unclassified DOD information on a "secure" messaging app
Signal is an approved government app for communicating CUI.: Sheryl just transferred
into the DOD from another Federal agency outside the DOD. One day, Sheryl's former coworker, Angela, needed to message her
Controlled Unclassified Information (CUI) content about an old project they had worked on together at the previous agency.
Angela is unable to send the message via encrypted email.
Angela and Sheryl have communicated over multiple social media apps in the past mostly about their families.
Angela picks the Signal App and communicates the CUI since it is the most secure of all the apps. In this instance, which
misconceptions about unauthorized disclosure might Angela believe?
(Select all that apply)
2. Report the issue to the DOD Inspector General through the whistleblower
hotline.: Bradley, a DOD employee, is working on a project that requires eligibility and access to Top Secret information. While
working on the project, he learns about the lethality of a new weapons system and believes it is a substantial risk to the public.
What can he do to notify the public of the potential danger, while avoiding unauthorized disclosure?
3. Significantly reduce or negatively impact DOD mission capabilities
Damage to DOD assets
Damage to national security
Significant personal financial loss: Cy is an employee of a cleared DOD contractor who works with Controlled Unclassified
Information
(CUI). He regularly posts about the work he does on his social media accounts. One day, Cy posts about new automated entry
controls at the base where he works. What are the potential consequences of Cy posting this CUI on his social media accounts?
4. Use a standard form SF 704 cover sheet to protect the information: Beth is in
possession of printed Secret information for a briefing she is planning. She does not work in an open storage facility. What does
she need to do to protect the Secret information from unauthorized disclosure while walking from her office to the briefing room?
5. In the banner line markings
In the portion markings
On the SF 703 cover sheet
1/5
, Unauthorized Disclosure of
Classified Information and CUI
In the Classification Authority Block (CAB): Adam works with Top Secret information. He regularly collaborates with a foreign
partner on specific projects and wants to know if he can disseminate the information to that partner. Where can he look to
determine whether this information can be disseminated?
6. No, Ellie must sign the appropriate non-disclosure agreement (NDA) in addition to possessing eligibility and having a need-to-
know.: Beau is in possession of Secret
information. He is working on a project with Ellie, who has the appropriate eligibility and a need-to-know for the information Beau
possesses. Does Ellie meet all the requirements to receive this information? Why or why not?
7. Destroy her copy of the information in accordance with regulatory guidance.-
: Sally is in possession of a printed copy of Controlled Unclassified Information (CUI) that she was authorized to use for a specific
program. She just found out the information was recently decontrolled. She knows that this information is not authorized for
public release, but she does not need to use her copy of the information any longer. What should Sally do?
8. : Derek is creating a document that contains Controlled Unclassified Information (CUI). He includes the acronym CUl in the
banner and has chosen not to include portion markings in his document.
What else is required for this document to be properly marked in accordance with DOD regulatory guidance?
9. : Waylon works for a cleared DOD contractor. He is working with printed Controlled Unclassified Information (CUl) in an office
that does not have continuous monitoring. How can he ensure that he is protecting the CUI from unauthorized disclosure?
(Select all that apply)
10. Yes; since it contains DOD information, it needs to undergo a prepublication
review.: Jack, a DOD employee, is writing an op-ed piece about an article that contained declassified information regarding a
communications system. In the piece, he references the declassified information to discredit the article.
Does Jack's op-ed piece need to undergo a prepublication review?
11. Public Affairs Office (PAO): Cheryl is planning to hold a press conference about a recent leak that impacted the DOD. Who
does she need to work with to ensure information is presented appropriately and won't negatively impact the DOD?
12. Loving the weather on my vacation in California. Beach week for me and the fam.
Just landed at my new assignment location
The coffee in my new office tastes amazing! Can you believe they got us five
different flavors of creamers?: Peter, an employee at a cleared DOD contractor, is an avid user of social media. He posts at least
two times a day. Review Peter's drafts and select all of those that are authorized to post. (Select all that apply)
13. Follow Component-specific guidance.
Report the incident to his Security Manager.: Stanley, a DOD employee, regularly plays poker with several local journalists. During
their most recent poker game, Stanley overhears the journalists discussing a story they are working on together about a Top-
Secret DOD program. How should Stanley react in this case?
(Select all that apply)
2/5
Classified Information and CUI
1. CUl does not have to be encrypted if it stays on a government approved network.
CUl must be marked appropriately over an approved network.
It is okay to discuss Unclassified DOD information on a "secure" messaging app
Signal is an approved government app for communicating CUI.: Sheryl just transferred
into the DOD from another Federal agency outside the DOD. One day, Sheryl's former coworker, Angela, needed to message her
Controlled Unclassified Information (CUI) content about an old project they had worked on together at the previous agency.
Angela is unable to send the message via encrypted email.
Angela and Sheryl have communicated over multiple social media apps in the past mostly about their families.
Angela picks the Signal App and communicates the CUI since it is the most secure of all the apps. In this instance, which
misconceptions about unauthorized disclosure might Angela believe?
(Select all that apply)
2. Report the issue to the DOD Inspector General through the whistleblower
hotline.: Bradley, a DOD employee, is working on a project that requires eligibility and access to Top Secret information. While
working on the project, he learns about the lethality of a new weapons system and believes it is a substantial risk to the public.
What can he do to notify the public of the potential danger, while avoiding unauthorized disclosure?
3. Significantly reduce or negatively impact DOD mission capabilities
Damage to DOD assets
Damage to national security
Significant personal financial loss: Cy is an employee of a cleared DOD contractor who works with Controlled Unclassified
Information
(CUI). He regularly posts about the work he does on his social media accounts. One day, Cy posts about new automated entry
controls at the base where he works. What are the potential consequences of Cy posting this CUI on his social media accounts?
4. Use a standard form SF 704 cover sheet to protect the information: Beth is in
possession of printed Secret information for a briefing she is planning. She does not work in an open storage facility. What does
she need to do to protect the Secret information from unauthorized disclosure while walking from her office to the briefing room?
5. In the banner line markings
In the portion markings
On the SF 703 cover sheet
1/5
, Unauthorized Disclosure of
Classified Information and CUI
In the Classification Authority Block (CAB): Adam works with Top Secret information. He regularly collaborates with a foreign
partner on specific projects and wants to know if he can disseminate the information to that partner. Where can he look to
determine whether this information can be disseminated?
6. No, Ellie must sign the appropriate non-disclosure agreement (NDA) in addition to possessing eligibility and having a need-to-
know.: Beau is in possession of Secret
information. He is working on a project with Ellie, who has the appropriate eligibility and a need-to-know for the information Beau
possesses. Does Ellie meet all the requirements to receive this information? Why or why not?
7. Destroy her copy of the information in accordance with regulatory guidance.-
: Sally is in possession of a printed copy of Controlled Unclassified Information (CUI) that she was authorized to use for a specific
program. She just found out the information was recently decontrolled. She knows that this information is not authorized for
public release, but she does not need to use her copy of the information any longer. What should Sally do?
8. : Derek is creating a document that contains Controlled Unclassified Information (CUI). He includes the acronym CUl in the
banner and has chosen not to include portion markings in his document.
What else is required for this document to be properly marked in accordance with DOD regulatory guidance?
9. : Waylon works for a cleared DOD contractor. He is working with printed Controlled Unclassified Information (CUl) in an office
that does not have continuous monitoring. How can he ensure that he is protecting the CUI from unauthorized disclosure?
(Select all that apply)
10. Yes; since it contains DOD information, it needs to undergo a prepublication
review.: Jack, a DOD employee, is writing an op-ed piece about an article that contained declassified information regarding a
communications system. In the piece, he references the declassified information to discredit the article.
Does Jack's op-ed piece need to undergo a prepublication review?
11. Public Affairs Office (PAO): Cheryl is planning to hold a press conference about a recent leak that impacted the DOD. Who
does she need to work with to ensure information is presented appropriately and won't negatively impact the DOD?
12. Loving the weather on my vacation in California. Beach week for me and the fam.
Just landed at my new assignment location
The coffee in my new office tastes amazing! Can you believe they got us five
different flavors of creamers?: Peter, an employee at a cleared DOD contractor, is an avid user of social media. He posts at least
two times a day. Review Peter's drafts and select all of those that are authorized to post. (Select all that apply)
13. Follow Component-specific guidance.
Report the incident to his Security Manager.: Stanley, a DOD employee, regularly plays poker with several local journalists. During
their most recent poker game, Stanley overhears the journalists discussing a story they are working on together about a Top-
Secret DOD program. How should Stanley react in this case?
(Select all that apply)
2/5
