DOD CYBER AWARENESS CHALLENGE KNOWLEDGE CHECK 2023 ALREADY PASSED

DOD CYBER AWARENESS CHALLENGE KNOWLEDGE CHECK 2023 ALREADY PASSED Which of the following may help to prevent spillage? Follow procedures for transferring data to and from outside agency and non-Government networks A vendor conducting a pilot program... how should you respond? Refer the vendor to the appropriate personnel What level of damage... Top Secret be expected to cause? Exceptionally grave Which of the following is a good practice for telework? Position your monitor so it is not facing others Inquiry from a reporter...? Refer to public affairs What does spillage refer to? Information improperly moved from higher to lower protection level Which of the following is a good practice to protect classified information? Don't assume open storage is authorized Which scenario might indicate a reportable insider threat? A colleague removes sensitive information without seeking authorization Which of the following is a reportable insider threat activity? Attempting to access sensitive information without need to know What function do Insider Threat Programs aim to fulfill? Proactively identify potential threats and formulate yadayadayada How can you protect your organization on social networking sites? Ensure there are no identifiable landmarks visible in photos What piece of information is safest to include on your social media profile? If you don't know the answer to this one, please do the training in full. you're dumb forreal. Which of the following is a security best practice when using social networking sites? Avoiding posting your mother's maiden name Which of the following statements is true? Many apps and smart devices collect and share your personal information and contribute..... Which of the following statements is true? Adversaries exploit social networking sites to disseminate fake news. A trusted friend in your social network posts vaccine information on a website unknown to you. What action should you take? some of yall mfs need to read this twice- RESEARCH THE SOURCE TO EVALUATE ITS CREDIBILITY AND RELIABILITY Which of the following best describes a way to safely transmit CUI Debra ensures all recipients have requires clearance and need to know before sending via encrypted email Which of the following is true of PHI? It is created of received by a healthcare provider, health plan, or employer What designation includes PII and PHI? CUI Which is a best practice for protecting CUI? Store in locked drawer after working hours Which of the following is true of CUI? CUI must be handled using safeguarding or dissemination controls Which of the following is NOT PII? High school attended Which of the following describes good physical security Lionel stops an individual in his secure area who's not wearing a badge Which Cyber Protection Condition establishes protection priority focus on critical functions only? CPCON 1 Which of the following is an example of a strong password? password12345, dummy. Which of the following is true of using a DoD PKI token? It should only be in a system when actively using it for a PKI-required task. Which of the following is true of the CAC or PIV card You should remove and take your CAC/PIV when you leave your station. Which of the following is an example of two-factor authentication? CAC and PIN Which of the following is true of sharing information in a SCIF? Individuals must avoid referencing derivatively ...... A compromise of SCI occurs when a person who doesn't have required clearance or access caveats comes into possession of SCI in any manner Which of the following is true of transmitting SCI? You may only transport SCI if you have been courier briefed for SCI Which of the following is NOT a potential consequence of using removable media unsafely in a SCIF? Damage to the removable media How should you label removable media used in a SCIF? With the maximum classification, date of creation, POC, and CM Control Number Which of the following is true of downloading apps? For Government-owned devices, use approved and authorized applications only Which of the following statements is true of cookies? You should confirm that a site that wants to store a cookie uses an encrypted link How should you respond to the theft of your identity? THE ANSWER IS NOT notify your security POC. "to respond to identity theft if it occurs: contact credit reporting agencies, contact financial institutions to cancel accounts, monitor credit card statements for unauthorized purchases, report the crime to local law enforcement" Which of the following is true of internet hoaxes? They can be part of a DDoS attack. How can you protect yourself from social engineering? Verify the identity of all individuals. What type of social engineering targets senior officials? Whaling Which of the following is true? Digitally signed emails are more secure. What action should you take with a compressed URL on a website known to you? Search for instructions on how to preview where the link actually leads Which of the following is a concern when using your Government issued laptop in public? The physical security of the device What security risk does a public Wi-Fi connection pose? It may expose the information sent to theft Which of the following is NOT a permitted way to connect a personally-owned monitor to your GFE? USB Which of the following is a best practice for using removable media? Avoid inserting removable media with unknown content into your computer Which of the following is NOT a risk associated with NFC? Additional data charges How can you protect data on your mobile computing and portable electronic devices (PEDs) Enable automatic screen locking after a period of inactivity Which of the following best describes the conditions under which mobile devices and apps can track your location? It may occur at any time without your knowledge or consent. Which of the following is true of Internet of Things (IoT) devices? They can become an attack vector to other devices on your home network How should you secure your home wireless network for teleworking? Implement Wi-Fi Protected Access 2 (WPA2) Personal encryption at a minimum