DOD CYBER AWARENESS CHALLENGE 2026 EXAM PREPARATION GUIDE COMPLETE QUESTIONS WITH CORRECT ANSWERS AND RATIONALE COVERING ALL TESTED DOMAINS – INCLUDING CLASSIFICATION MANAGEMENT, SPILLAGE PREVENTION, INSIDER THREATS, PHYSICAL SECURITY, SOCIAL ENGINEERING

DOD CYBER AWARENESS CHALLENGE 2026 EXAM PREPARATION GUIDE COMPLETE QUESTIONS WITH CORRECT ANSWERS AND RATIONALE COVERING ALL TESTED DOMAINS – INCLUDING CLASSIFICATION MANAGEMENT, SPILLAGE PREVENTION, INSIDER THREATS, PHYSICAL SECURITY, SOCIAL ENGINEERING, REMOTE TELEWORK BEST PRACTICES, SCIF OPERATIONS, OPSEC, PII PROTECTION, AND DOD INFORMATION SYSTEMS COMPLIANCE 1. Which of the following best defines "spillage" in a cybersecurity context? A) When a hard drive physically breaks and data is lost B) When classified information is transferred onto an unclassified information system without proper authorization C) When an authorized user forgets to log off their workstation D) When a network firewall blocks a malicious website Correct Answer: B - Spillage specifically refers to the unauthorized transfer of classified or sensitive information to an unclassified system or network, which is a serious security violation. ________________________________________ 2. What is the primary purpose of the DOD Cyber Awareness Challenge? A) To teach personnel how to hack into adversary systems B) To ensure personnel are aware of cybersecurity threats and their individual responsibilities C) To promote the use of social media for official government communications D) To certify personnel for advanced network engineering roles Correct Answer: B - The annual training is designed to educate all DOD personnel on current cybersecurity threats, best practices, and their specific responsibilities to protect DOD information and systems. ________________________________________ 3. You receive an email from your bank asking you to confirm your account number by replying directly. What should you do? A) Reply with the requested information immediately B) Call the bank using the number on your official bank statement, not the email C) Forward the email to your supervisor for record-keeping D) Click the link in the email to verify your account Correct Answer: B - Legitimate institutions never request sensitive information via email. Contacting the bank through a verified, independent number avoids falling victim to phishing. ________________________________________ 4. Which of the following is a permitted use of a Government-furnished smartphone? A) Downloading personal games from unofficial app stores B) Connecting it to an unsecured public Wi-Fi hotspot for streaming videos C) Responding to official work emails on your government email account D) Allowing family members to use it for emergency calls Correct Answer: C - Government-furnished equipment (GFE) should be used primarily for official duties. Responding to government emails is an authorized activity. ________________________________________ 5. What is the best practice for handling a compressed URL (e.g., TinyURL) received in an email? A) Open the link directly to save time B) Copy and paste the link into a notepad to read it C) Hover over or right-click the link to preview the actual destination before clicking D) Forward the link to the IT helpdesk for analysis Correct Answer: C - Right-clicking or hovering allows you to see the full destination URL, helping you avoid malicious redirects without actually visiting a potentially harmful site. ________________________________________ 6. Under which Cyberspace Protection Condition (CPCON) is the priority focus limited strictly to critical and essential functions? A) CPCON 5 B) CPCON 3 C) CPCON 1 D) CPCON 2 Correct Answer: C - CPCON 1 is the highest state of readiness, where only the most critical and essential functions are maintained to protect against imminent or active threats. ________________________________________ 7. How should you properly secure your Common Access Card (CAC) or badge within a Sensitive Compartmented Information Facility (SCIF)? A) Leave it on your desk to show you are authorized B) Place it in your wallet and keep it on your person C) Hang it around your neck visibly at all times D) Store it in a shared drawer for easy access Correct Answer: B - Keeping your badge in your wallet on your person prevents loss, theft, or unauthorized use while ensuring you have it when needed for access. ________________________________________ 8. Which of the following is an example of two-factor authentication (2FA)? A) Entering a username and a password B) Using a fingerprint scan and a facial recognition scan C) Entering a password and then answering a security question D) Using a smart card and entering a Personal Identification Number (PIN) Correct Answer: D - Two-factor authentication requires two different factors from the categories: something you know, have, or are. A smart card (something you have) plus a PIN (something you know) is a classic 2FA implementation. (Note: B is also two biometrics, which is multi-factor, but D is the standard DOD example). ________________________________________ 9. What is the primary concern with posting "I'm hosting a family reunion for my mom's side, the Smiths, at 1234 Mockingbird Lane on the 8th... grab a slice of cake!" on social media? A) The post contains sensitive personal information (PII) and could enable identity theft or physical harm B) The post is too long and uninteresting C) The post violates copyright laws D) The post does not include enough detail about the event Correct Answer: A - The post reveals full name, address, date, and family associations—all PII that adversaries can use for social engineering or physical targeting. ________________________________________ 10. When working offsite during official travel, which is a best practice to protect sensitive information? A) Work in a busy coffee shop to blend in with the crowd B) Leave your laptop unattended in your hotel room while locked C) Position your monitor so that it is not easily observed by others while in use D) Discuss classified information loudly over the phone in a public area Correct Answer: C - Preventing visual eavesdropping by positioning the screen away from public view is a fundamental physical security measure when working offsite. ________________________________________ 11. What is a Security Classification Guide? A) A physical lock used to secure classified safes B) A document that provides specific guidance on how to classify and mark information