CYBER AWARENESS CHALLENGE 2024
Afterareadingaanaonlineastoryaaboutaaanewasecurityaprojectabeingadevelopedaonatheamilitar
yainstallationawhereayouawork,ayouraneighboraasksayouatoacommentaaboutatheaarticle.aYou
aknowathatathisaprojectaisaclassified.aHowashouldayouarespond?a-aans--
Attemptatoachangeatheasubjectatoasomethinganon-
workarelated,abutaneitheraconfirmanoradenyatheaarticle'saauthenticity
Whichaofatheafollowingamayahelpatoapreventaspillage?a-aans--
Labelaallafiles,aremovableamedia,aandasubjectaheadersawithaappropriateaclassificationamar
kings.
AauserawritesadownadetailsamarkedaasaSecretafromaaareportastoredaonaaaclassifiedasystem
aandausesathoseadetailsatoadraftaaabriefingaonaanaunclassifiedasystemawithoutaauthorizatio
n.aWhataisatheabestachoiceatoadescribeawhatahasaoccurred?a-aans--
Spillageabecauseaclassifiedadataawasamovedatoaaaloweraclassificationalevelasystemawitho
utaauthorization.
Whatashouldayouadoawhenayouaareaworkingaonaanaunclassifiedasystemaandareceiveaanae
mailawithaaaclassifiedaattachment?a-aans--Callayourasecurityapointaofacontactaimmediately
Whatashouldayouadoaifaaareporteraasksayouaaboutapotentiallyaclassifiedainformationaonathea
web?a-aans--Askaforainformationaaboutatheawebsite,aincludingatheaURL.
Whatashouldayouadoaifaaareporteraasksayouaaboutapotentiallyaclassifiedainformationaonathea
web?a-aans--Referatheareporteratoayouraorganization'sapublicaaffairsaoffice.
Whatashouldayouadoaifayouasuspectaspillageahasaoccurred?a-aans--
Immediatelyanotifyayourasecurityapointaofacontact
Whichaofatheafollowingaisaaagoodapracticeatoapreventaspillage?a-aans--
Beaawareaofaclassificationamarkingsaandaallahandlingacaveats.
WhichaofatheafollowingaactionsaisaappropriateaafterafindingaclassifiedainformationaonatheaIn
ternet?a-aans--
Noteaanyaidentifyingainformationaandatheawebsite'saUniformaResourceaLocatora(URL)
, Whichaofatheafollowingamayahelpatoapreventaspillage?
-
Verifyathataanyagovernmentaequipmentausedaforaprocessingaclassifiedainformationahasaval
idaanti-virusasoftwareabeforeaconnectingaitatoatheainternet
-Followaproceduresaforatransferringadataatoaandafromaoutsideaagencyaandanon-
Governmentanetworks
-
Purgeatheamemoryaofaanyadevicearemovedafromaaaclassifiedanetworkabeforeaconnectingait
atoaanaunclassifiedanetwork
-
Processaalladataaatatheahighestaclassificationaoraprotectionalevelaavailable,aincludingauncla
ssifiedadataa-aans--
~Verifyathataanyagovernmentaequipmentausedaforaprocessingaclassifiedainformationahasav
alidaanti-virusasoftwareabeforeaconnectingaitatoatheainterneta(wrong)
~Followaproceduresaforatransferringadataatoaandafromaoutsideaagencyaandanon-
Governmentanetworks
YouafindainformationathatayouaknowatoabeaclassifiedaonatheaInternet.aWhatashouldayouado?
a-aans--~Noteatheawebsite'saURLaandareportatheasituationatoayourasecurityapointaofacontact
Whenaclassifiedadataaisanotainause,ahowacanayouaprotectait?a-aans--
StoreaclassifiedadataaappropriatelyainaaaGSA-approvedavault/container.
Whataisarequiredaforaanaindividualatoaaccessaclassifiedadata?a-aans--
Appropriateaclearance,aaasignedaandaapprovedanon-disclosureaagreement,aandaneed-to-
know
Whichaclassificationalevelaisagivenatoainformationathatacouldareasonablyabeaexpectedatoac
auseaseriousadamageatoanationalasecurity?a-aans--Secret
Whichaofatheafollowingaisaaagoodapracticeatoaprotectaclassifiedainformation?a-aans--
Ensureaproperalabelingabyaappropriatelyamarkingaallaclassifiedamaterialaand,awhenarequir
ed,asensitiveamaterial
Whichaofatheafollowingaisatrueaofaprotectingaclassifiedadata?a-aans--
Classifiedamaterialamustabeaappropriatelyamarked.
WhatalevelaofadamageacanatheaunauthorizedadisclosureaofainformationaclassifiedaasaConfi
dentialareasonablyabeaexpectedatoacause?a-aans--Damageatoanationalasecurity
Whichaofatheafollowingaisatrueaofatelework?a-aans--
Youamustahaveapermissionafromayouraorganization.
Afterareadingaanaonlineastoryaaboutaaanewasecurityaprojectabeingadevelopedaonatheamilitar
yainstallationawhereayouawork,ayouraneighboraasksayouatoacommentaaboutatheaarticle.aYou
aknowathatathisaprojectaisaclassified.aHowashouldayouarespond?a-aans--
Attemptatoachangeatheasubjectatoasomethinganon-
workarelated,abutaneitheraconfirmanoradenyatheaarticle'saauthenticity
Whichaofatheafollowingamayahelpatoapreventaspillage?a-aans--
Labelaallafiles,aremovableamedia,aandasubjectaheadersawithaappropriateaclassificationamar
kings.
AauserawritesadownadetailsamarkedaasaSecretafromaaareportastoredaonaaaclassifiedasystem
aandausesathoseadetailsatoadraftaaabriefingaonaanaunclassifiedasystemawithoutaauthorizatio
n.aWhataisatheabestachoiceatoadescribeawhatahasaoccurred?a-aans--
Spillageabecauseaclassifiedadataawasamovedatoaaaloweraclassificationalevelasystemawitho
utaauthorization.
Whatashouldayouadoawhenayouaareaworkingaonaanaunclassifiedasystemaandareceiveaanae
mailawithaaaclassifiedaattachment?a-aans--Callayourasecurityapointaofacontactaimmediately
Whatashouldayouadoaifaaareporteraasksayouaaboutapotentiallyaclassifiedainformationaonathea
web?a-aans--Askaforainformationaaboutatheawebsite,aincludingatheaURL.
Whatashouldayouadoaifaaareporteraasksayouaaboutapotentiallyaclassifiedainformationaonathea
web?a-aans--Referatheareporteratoayouraorganization'sapublicaaffairsaoffice.
Whatashouldayouadoaifayouasuspectaspillageahasaoccurred?a-aans--
Immediatelyanotifyayourasecurityapointaofacontact
Whichaofatheafollowingaisaaagoodapracticeatoapreventaspillage?a-aans--
Beaawareaofaclassificationamarkingsaandaallahandlingacaveats.
WhichaofatheafollowingaactionsaisaappropriateaafterafindingaclassifiedainformationaonatheaIn
ternet?a-aans--
Noteaanyaidentifyingainformationaandatheawebsite'saUniformaResourceaLocatora(URL)
, Whichaofatheafollowingamayahelpatoapreventaspillage?
-
Verifyathataanyagovernmentaequipmentausedaforaprocessingaclassifiedainformationahasaval
idaanti-virusasoftwareabeforeaconnectingaitatoatheainternet
-Followaproceduresaforatransferringadataatoaandafromaoutsideaagencyaandanon-
Governmentanetworks
-
Purgeatheamemoryaofaanyadevicearemovedafromaaaclassifiedanetworkabeforeaconnectingait
atoaanaunclassifiedanetwork
-
Processaalladataaatatheahighestaclassificationaoraprotectionalevelaavailable,aincludingauncla
ssifiedadataa-aans--
~Verifyathataanyagovernmentaequipmentausedaforaprocessingaclassifiedainformationahasav
alidaanti-virusasoftwareabeforeaconnectingaitatoatheainterneta(wrong)
~Followaproceduresaforatransferringadataatoaandafromaoutsideaagencyaandanon-
Governmentanetworks
YouafindainformationathatayouaknowatoabeaclassifiedaonatheaInternet.aWhatashouldayouado?
a-aans--~Noteatheawebsite'saURLaandareportatheasituationatoayourasecurityapointaofacontact
Whenaclassifiedadataaisanotainause,ahowacanayouaprotectait?a-aans--
StoreaclassifiedadataaappropriatelyainaaaGSA-approvedavault/container.
Whataisarequiredaforaanaindividualatoaaccessaclassifiedadata?a-aans--
Appropriateaclearance,aaasignedaandaapprovedanon-disclosureaagreement,aandaneed-to-
know
Whichaclassificationalevelaisagivenatoainformationathatacouldareasonablyabeaexpectedatoac
auseaseriousadamageatoanationalasecurity?a-aans--Secret
Whichaofatheafollowingaisaaagoodapracticeatoaprotectaclassifiedainformation?a-aans--
Ensureaproperalabelingabyaappropriatelyamarkingaallaclassifiedamaterialaand,awhenarequir
ed,asensitiveamaterial
Whichaofatheafollowingaisatrueaofaprotectingaclassifiedadata?a-aans--
Classifiedamaterialamustabeaappropriatelyamarked.
WhatalevelaofadamageacanatheaunauthorizedadisclosureaofainformationaclassifiedaasaConfi
dentialareasonablyabeaexpectedatoacause?a-aans--Damageatoanationalasecurity
Whichaofatheafollowingaisatrueaofatelework?a-aans--
Youamustahaveapermissionafromayouraorganization.