CYBER AWARENESS CHALLENGE 2024 STANDARD CHALLENGE ANSWERS (Questions with 100% correct answers)

CYBER AWARENESS CHALLENGE 2024 KNOWLEDGE CHECK ANSWERS (Questions with 100% correct answers) 1. Which of the following is true of spillage? The correct answer is:  It can be either inadvertent or intentional. Spillage refers to transferring classified or sensitive information to individuals, systems, or networks that are not authorized to access such information. This transfer can occur either inadvertently or intentionally, making t his statement true regarding spillage. 2. Which of the following statements about Protected Health Information (PHI) is false? The correct answer is:  It requires more protection than Personally Identifiable Information (PII). It might be considered false depe nding on the specific context and regulatory environment. Both Protected Health Information (PHI) and Personally Identifiable Information (PII) require strong protection measures, and the level of protection required may vary based on the nature of the inf ormation, the regulatory environment, and the potential impact of unauthorized disclosure. While PHI is a subset of PII focused specifically on health -related information, saying it requires more protection might not always be accurate as PII can also cont ain highly sensitive information that requires stringent protection measures. 3. On your home computer, how can you best establish passwords when creating separate user accounts? The best practice among the provided options for establishing passwords when cre ating separate user accounts on your home computer is:  Have each user create their own, strong password. This approach promotes good security hygiene by ensuring that each user has a unique, strong password, which can help prevent unauthorized access and p rotect the privacy and data of each user. Strong passwords typically include a mix of uppercase and lowercase letters, numbers, and special characters, and are of a sufficient length, usually at least 12 characters. 4. Which of the following statements is true of DoD Unclassified data? Among the provided options, the following statement is true regarding Department of Defense (DoD) Unclassified data:  It may require access and distribution controls. Even though the data is unclassified, there might still be acc ess and distribution controls in place to manage who can access the data and how it is shared, especially when it falls under Controlled Unclassified Information (CUI) which might include sensitive but unclassified data. 5. You receive a text message from a package shipper notifying you that your package delivery is delayed due to needing updated delivery instructions from you. It provides a shortened link for you to provide the needed information. You are not expecting a package. What is the best course of action? The best course of action in this scenario would be to:  Delete the message. It’s advisable not to engage with suspicious messages or click on any links they provide, as doing so can expose you to various security risks including identity theft or malware infection. 6. When is the safest time to post on social media about your vacation plans? The safest time to post on social media about your vacation plans is:  After the trip. Posting about your vacation plans before or during the trip can expose you t o various risks such as burglary or stalking since it publicly announces that you are away from home. It’s advisable to share your vacation experiences on social media after you have returned, to maintain your personal safety and the security of your prope rty. 7. You receive a phone call offering you a $50 gift card if you participate in a survey. Which course of action should you take?