VA Privacy and Information Security
Awareness and Rules of Behavior (WBT)
Course Questions with Correct Answers
Sending VA personal data to an unauthorized party goes against which of the following
principles? (select all that apply.)
a. Principle of Limited Collection
b. Principle of Accountability
c. Principle of Disclosure
d. Principle of Security
c
To avoid mishandling, you should never ________ (select all that apply.)
a. Send sensitive information by fax
b. Use Social security numbers (SSNs) on mailed documents unless authorized
c. Include sensitive information on a unsecured Teams or SharePoint site
d. Disclose or release sensitive information unless authorized
b, c, and d
VA records may include which of the following? (Select all that apply.)
a. Emails
b. Text messages and instant messages
c. Verbal conversations
d. Documents
, a, b, and d
A record that includes a patient's name and medical diagnosis would be considered
what? (Select all that apply.)
a. VA Sensitive Information
b. Sensitive Personal Information (SPI)
c. Classified Information
d. Protected Health Information (PHI)
a, b, and d
When it comes to Government Furnished Equipment (GFE) and personal devices,
which of the following are never allowed? (Select all that apply.)
a. Accessing social media on Government Furnished Equipment (GFE)
b. Storing VA data on a personal mobile device
c. Plugging a personal device into your GFE laptop
d. Remotely connecting to the VA network from a non-GFE laptop
b and c
Which of the following best states the need-to-know principle?
a. No actor, system, network, or service is trusted until appropriate validations have
been obtained
b. Information and system access should be limited only to those who need it for official
duties and be regularly reviewed to ensure these limitations are in place
c. All personal data should be protected by appropriate safeguards to ensure security
Awareness and Rules of Behavior (WBT)
Course Questions with Correct Answers
Sending VA personal data to an unauthorized party goes against which of the following
principles? (select all that apply.)
a. Principle of Limited Collection
b. Principle of Accountability
c. Principle of Disclosure
d. Principle of Security
c
To avoid mishandling, you should never ________ (select all that apply.)
a. Send sensitive information by fax
b. Use Social security numbers (SSNs) on mailed documents unless authorized
c. Include sensitive information on a unsecured Teams or SharePoint site
d. Disclose or release sensitive information unless authorized
b, c, and d
VA records may include which of the following? (Select all that apply.)
a. Emails
b. Text messages and instant messages
c. Verbal conversations
d. Documents
, a, b, and d
A record that includes a patient's name and medical diagnosis would be considered
what? (Select all that apply.)
a. VA Sensitive Information
b. Sensitive Personal Information (SPI)
c. Classified Information
d. Protected Health Information (PHI)
a, b, and d
When it comes to Government Furnished Equipment (GFE) and personal devices,
which of the following are never allowed? (Select all that apply.)
a. Accessing social media on Government Furnished Equipment (GFE)
b. Storing VA data on a personal mobile device
c. Plugging a personal device into your GFE laptop
d. Remotely connecting to the VA network from a non-GFE laptop
b and c
Which of the following best states the need-to-know principle?
a. No actor, system, network, or service is trusted until appropriate validations have
been obtained
b. Information and system access should be limited only to those who need it for official
duties and be regularly reviewed to ensure these limitations are in place
c. All personal data should be protected by appropriate safeguards to ensure security
