Cyber Awareness Knowledge Check - 2024
1. 0 indicators: How many potential insider threat indicators does a person who is married
with two children, vacations at the beach every year, is pleasant to work with, but
sometimes has poor work quality display?
2. Note any identifying information, such as the website's URL, and report the
situation to your security POC.: What is the best response if you find classified
government data on the internet?
3. Attempt to change the subject to something non-work related, but neither confirm
nor deny the article's authenticity.: After reading an online story about a new security
project being developed on the military installation where you work, your neighbor asks
you to comment about the article. You know this project is classified. What should be your
response?
4. Immediately notify your security POC.: What is a proper response if spillage
occurs?
5. Ask for information about the website, including the URL.: What should you do if a
reporter asks you about potentially classified information on the web?
6. Spillage because classified data was moved to a lower classification level system
without authorization.: A user writes down details from a report stored on a classified
system marked as Secret and uses those details to draft an unclassified briefing on an
unclassified system without authorization. What is the best choice to describe what has
occurred?
7. 3 or more indicators: How many potential insider threat indicators does a coworker
who often makes others uneasy by being persistent in trying to obtain information about
classified projects to which he has no access, is boisterous about his wife putting them in
credit card debt, and often complains about anxiety and exhaustion display?
8. Damage to national security: Which of the following can an unauthorized dis- closure
of information classified as Confidential reasonably be expected to cause?
9. Secret: Which classification level is given to information that could reasonably be
expected to cause serious damage to national security?
10. Store classified data appropriately in a GSA-approved vault/container when
not in use.: When classified data is not in use, how can you protect it?
11. Ensure proper labeling by appropriately marking all classified material and, when
required, sensitive material.
-OR-
Don't assume open storage in a secure facility is authorized.: Which is a good practice
to protect classified information?
12. Be aware of classification markings and all handling caveats.: Which of the
following is a good practice to aid in preventing spillage?
1/9
, Cyber Awareness Knowledge Check - 2024
13. Appropriate clearance; signed and approved non-disclosure agreement; and
need-to-know.: What is required for an individual to access classified data?
14. Coworker making consistent statements indicative of hostility or anger toward
the United States and its policies.: What type of activity or behavior should be reported as a
potential insider threat?
15. Don't talk about work outside your workspace unless it is a specifically
designated public meeting environment and is controlled by the event plan- ners.:
Which of the following practices reduces the chance of becoming a target by adversaries
seeking insider information?
16. A coworker is observed using a personal electronic device in an area where their use
is prohibited.: Which scenario might indicate a reportable insider threat security incident?
17. Insiders are given a level of trust and have authorized access to Govern- ment
information systems.: Why might "insiders" be able to cause damage to their organizations
more easily than others?
18. Use only personal contact information when establishing personal social
networking accounts, never use Government contact information.: Which of the
following is a best practice to protect information about you and your organization on social
networking sites and applications?
19. Don't allow her access into secure areas and report suspicious activity.: - What
should you do if an individual asks you to let her follow you into your controlled space,
stating that she left her security badge at her desk?
20. Understanding and using available privacy settings.: Which represents a security
best practice when using social networking?
21. Use a common password for all system and application logons.: Which is NOT
sufficient to protect your identity?
22. Any time you participate in or condone misconduct, whether offline or online.:
Under which circumstances may you be subject to criminal, disciplinary, and/or
administrative action due to online misconduct?
23. Inform your security POC of all non-professional or non-routine contacts with
foreign nations, including, but not limited to, joining each other's social media sites.:
As someone who works with classified information, what should you do if you are
contacted by a foreign national seeking information on a research project?
24. When unclassified data is aggregated, its classification level may rise.: -
Which of the following is true about unclassified data?
25. Difficult life circumstances such as substance abuse; divided loyalty or allegiance
to the U.S.; or extreme, persistent interpersonal difficulties.: What are some potential
insider threat indicators?
2/9
1. 0 indicators: How many potential insider threat indicators does a person who is married
with two children, vacations at the beach every year, is pleasant to work with, but
sometimes has poor work quality display?
2. Note any identifying information, such as the website's URL, and report the
situation to your security POC.: What is the best response if you find classified
government data on the internet?
3. Attempt to change the subject to something non-work related, but neither confirm
nor deny the article's authenticity.: After reading an online story about a new security
project being developed on the military installation where you work, your neighbor asks
you to comment about the article. You know this project is classified. What should be your
response?
4. Immediately notify your security POC.: What is a proper response if spillage
occurs?
5. Ask for information about the website, including the URL.: What should you do if a
reporter asks you about potentially classified information on the web?
6. Spillage because classified data was moved to a lower classification level system
without authorization.: A user writes down details from a report stored on a classified
system marked as Secret and uses those details to draft an unclassified briefing on an
unclassified system without authorization. What is the best choice to describe what has
occurred?
7. 3 or more indicators: How many potential insider threat indicators does a coworker
who often makes others uneasy by being persistent in trying to obtain information about
classified projects to which he has no access, is boisterous about his wife putting them in
credit card debt, and often complains about anxiety and exhaustion display?
8. Damage to national security: Which of the following can an unauthorized dis- closure
of information classified as Confidential reasonably be expected to cause?
9. Secret: Which classification level is given to information that could reasonably be
expected to cause serious damage to national security?
10. Store classified data appropriately in a GSA-approved vault/container when
not in use.: When classified data is not in use, how can you protect it?
11. Ensure proper labeling by appropriately marking all classified material and, when
required, sensitive material.
-OR-
Don't assume open storage in a secure facility is authorized.: Which is a good practice
to protect classified information?
12. Be aware of classification markings and all handling caveats.: Which of the
following is a good practice to aid in preventing spillage?
1/9
, Cyber Awareness Knowledge Check - 2024
13. Appropriate clearance; signed and approved non-disclosure agreement; and
need-to-know.: What is required for an individual to access classified data?
14. Coworker making consistent statements indicative of hostility or anger toward
the United States and its policies.: What type of activity or behavior should be reported as a
potential insider threat?
15. Don't talk about work outside your workspace unless it is a specifically
designated public meeting environment and is controlled by the event plan- ners.:
Which of the following practices reduces the chance of becoming a target by adversaries
seeking insider information?
16. A coworker is observed using a personal electronic device in an area where their use
is prohibited.: Which scenario might indicate a reportable insider threat security incident?
17. Insiders are given a level of trust and have authorized access to Govern- ment
information systems.: Why might "insiders" be able to cause damage to their organizations
more easily than others?
18. Use only personal contact information when establishing personal social
networking accounts, never use Government contact information.: Which of the
following is a best practice to protect information about you and your organization on social
networking sites and applications?
19. Don't allow her access into secure areas and report suspicious activity.: - What
should you do if an individual asks you to let her follow you into your controlled space,
stating that she left her security badge at her desk?
20. Understanding and using available privacy settings.: Which represents a security
best practice when using social networking?
21. Use a common password for all system and application logons.: Which is NOT
sufficient to protect your identity?
22. Any time you participate in or condone misconduct, whether offline or online.:
Under which circumstances may you be subject to criminal, disciplinary, and/or
administrative action due to online misconduct?
23. Inform your security POC of all non-professional or non-routine contacts with
foreign nations, including, but not limited to, joining each other's social media sites.:
As someone who works with classified information, what should you do if you are
contacted by a foreign national seeking information on a research project?
24. When unclassified data is aggregated, its classification level may rise.: -
Which of the following is true about unclassified data?
25. Difficult life circumstances such as substance abuse; divided loyalty or allegiance
to the U.S.; or extreme, persistent interpersonal difficulties.: What are some potential
insider threat indicators?
2/9
