Cyber Awareness Challenge 2025/2026 Study Guide
1. Classified Data and Data Handling
1. What is the core principle of "Need-to-Know"?
ANSWER ✓ An individual must require access to classified information to perform their
official duties, regardless of their security clearance level.
2. How should you handle a potential spill of classified information?
ANSWER ✓ Immediately secure the material, notify your security POC or supervisor, and
follow your organization's incident response procedures.
3. What is a "Classified Update" or "Classified Transfer"?
ANSWER ✓ A scheduled period where systems are cut off from external networks to
allow for the safe processing of classified data up to a specific level.
4. What is the primary purpose of classification markings like "CONFIDENTIAL,"
"SECRET," and "TOP SECRET"?
ANSWER ✓ To inform holders of the sensitivity of the information and the required
protective measures.
5. Where is the classification level of a document least likely to be found?
ANSWER ✓ In the footer only. It should be prominently placed at the top and bottom,
and on the cover.
6. What is the proper way to destroy classified material?
ANSWER ✓ Only using authorized destruction methods specified by your security office,
such as approved cross-cut shredders or burn bags.
7. What is a "Forgotten Secret"?
ANSWER ✓ Classified information discovered in an unsecured environment, such as a
file or drawer that is not properly protected.
8. What should you do if you find a forgotten secret?
, ANSWER ✓ Secure the information immediately and report the incident through the
proper security channels.
9. What does "Control Custodian" refer to?
ANSWER ✓ An individual formally designated to manage and safeguard classified
material within a controlled area.
10. What is the difference between a "Classified" and "Controlled Unclassified
Information (CUI)"?
ANSWER ✓ Classified information requires protection against national security threats,
while CUI is unclassified but requires safeguarding due to privacy, law, or policy.
2. Physical and Environmental Security
11. What is "Tailgating" or "Piggybacking"?
ANSWER ✓ When an unauthorized person follows an authorized person into a secure
area without providing their own credentials.
12. What is the correct action if someone you don't recognize attempts to tailgate
you into a secure area?
ANSWER ✓ Politely ask them to use their own access credentials. If they cannot, do not
allow them entry and report the incident to security.
13. What is a "Secure Enclave"?
ANSWER ✓ A controlled, physical space with additional layers of security where sensitive
compartmented information (SCI) is processed.
14. What is the purpose of a "Two-Person Rule"?
ANSWER ✓ To ensure that no single individual has unescorted access to certain highly
sensitive materials or areas.
15. Before discarding, what should you do with any documents containing
sensitive information in your workspace?
ANSWER ✓ Properly dispose of them in a designated classified waste or shredding
receptacle.
1. Classified Data and Data Handling
1. What is the core principle of "Need-to-Know"?
ANSWER ✓ An individual must require access to classified information to perform their
official duties, regardless of their security clearance level.
2. How should you handle a potential spill of classified information?
ANSWER ✓ Immediately secure the material, notify your security POC or supervisor, and
follow your organization's incident response procedures.
3. What is a "Classified Update" or "Classified Transfer"?
ANSWER ✓ A scheduled period where systems are cut off from external networks to
allow for the safe processing of classified data up to a specific level.
4. What is the primary purpose of classification markings like "CONFIDENTIAL,"
"SECRET," and "TOP SECRET"?
ANSWER ✓ To inform holders of the sensitivity of the information and the required
protective measures.
5. Where is the classification level of a document least likely to be found?
ANSWER ✓ In the footer only. It should be prominently placed at the top and bottom,
and on the cover.
6. What is the proper way to destroy classified material?
ANSWER ✓ Only using authorized destruction methods specified by your security office,
such as approved cross-cut shredders or burn bags.
7. What is a "Forgotten Secret"?
ANSWER ✓ Classified information discovered in an unsecured environment, such as a
file or drawer that is not properly protected.
8. What should you do if you find a forgotten secret?
, ANSWER ✓ Secure the information immediately and report the incident through the
proper security channels.
9. What does "Control Custodian" refer to?
ANSWER ✓ An individual formally designated to manage and safeguard classified
material within a controlled area.
10. What is the difference between a "Classified" and "Controlled Unclassified
Information (CUI)"?
ANSWER ✓ Classified information requires protection against national security threats,
while CUI is unclassified but requires safeguarding due to privacy, law, or policy.
2. Physical and Environmental Security
11. What is "Tailgating" or "Piggybacking"?
ANSWER ✓ When an unauthorized person follows an authorized person into a secure
area without providing their own credentials.
12. What is the correct action if someone you don't recognize attempts to tailgate
you into a secure area?
ANSWER ✓ Politely ask them to use their own access credentials. If they cannot, do not
allow them entry and report the incident to security.
13. What is a "Secure Enclave"?
ANSWER ✓ A controlled, physical space with additional layers of security where sensitive
compartmented information (SCI) is processed.
14. What is the purpose of a "Two-Person Rule"?
ANSWER ✓ To ensure that no single individual has unescorted access to certain highly
sensitive materials or areas.
15. Before discarding, what should you do with any documents containing
sensitive information in your workspace?
ANSWER ✓ Properly dispose of them in a designated classified waste or shredding
receptacle.
