Insiders are given a level of trust and have authorized access to Government information systems. -Store it in a shielded sleeve to avoid chip cloning. You are reviewing your employees annual self evaluation. 0000011226 00000 n **Mobile DevicesWhich of the following helps protect data on your personal mobile devices? A coworker uses a personal electronic device in a secure area where their use is prohibited. How can you protect yourself from social engineering?-Follow instructions given only by verified personnel. limx12f(x)x+g(x)\lim\limits_{x\rightarrow1}\frac{2-f(x)}{x+g(x)} Sensitive information may be stored on any password-protected system. There is no way to know where the link actually leads. What threat do insiders with authorized access to information or information Systems pose?? *SpillageWhich of the following may help to prevent spillage? A coworker wants to send you a sensitive document to review while you are at lunch and you only have your personal tablet. Which of the following is NOT a typical means for spreading malicious code? endobj <> . **Insider ThreatWhat type of activity or behavior should be reported as a potential insider threat? **Social EngineeringWhich of the following is a way to protect against social engineering? **TravelWhat is a best practice while traveling with mobile computing devices? **Insider ThreatWhich of the following is NOT considered a potential insider threat indicator? **Social EngineeringWhich may be a security issue with compressed Uniform Resource Locators (URLs)? What is NOT Personally Identifiable Information (PII)? This course provides an overview of current cybersecurity threats and best practices to keep information and information systems secure at home and at work. Which of the following statements is NOT true about protecting your virtual identity? A person who does not have the required clearance or assess caveats comes into possession of SCI in any manner. What should you do if a commercial entity, such as a hotel reception desk, asks for Government identification so that they can make a photocopy? What is the best response if you find classified government data on the internet? Ive tried all the answers and it still tells me off. A type of phishing targeted at high-level personnel such as senior officials. Of the following, which is NOT a security awareness tip? Research the source of the article to evaluate its credibility and reliability. **Identity ManagementYour DoD Common Access Card (CAC) has a Public Key Infrastructure (PKI) token approved for access to the NIPRNet. Is it permitted to share an unclassified draft document with a non-DoD professional discussion group? Coworker making consistent statements indicative of hostility or anger toward the United States in its policies. Immediately notify your security point of contact. <> Which of the following is true of protecting classified data? What action should you take? What certificates does the Common Access Card (CAC) or Personal Identity Verification (PIV) card contain? **Identity managementWhich of the following is an example of a strong password? }&400\\ You receive a call on your work phone and you're asked to participate in a phone survey. What information posted publicly on your personal social networking profile represents a security risk? *USE OF GFE*What is a critical consideration on using cloud-based file sharing and storage applications on your Government-furnished equipment (GFE)? -Look for a digital signature on the email. Only persons with appropriate clearance, a non-disclosure agreement, and need-to-know can access classified data. Coworker making consistent statements indicative of hostility or anger toward the United States and its policies. How should you respond to the theft of your identity? **Social EngineeringWhat is TRUE of a phishing attack? fZ{ 7~*$De jOP>Xd)5 H1ZB 5NDk4N5\SknL/82mT^X=vzs+6Gq[X2%CTpyET]|W*EeV us@~m6 4] A ];j_QolrvPspgA)Ns=1K~$X.3V1_bh,7XQ **Identity managementWhich of the following is NOT a best practice to preserve the authenticity of your identity? Determine if the software or service is authorized. SSN, date and place of birth, mothers maiden name, biometric records, PHI, passport number, Subset of PII, health information that identifies the individual, relates to physical or mental health of an individual, provision of health care to an individual, or payment of healthcare for individual. As a security best practice, what should you do before exiting? Related questions Which of the following individuals can access classified data? Of the following, which is NOT an intelligence community mandate for passwords? **Insider ThreatHow many potential insider threat indicators does a coworker who often makes others uneasy by being persistent in trying to obtain information about classified projects to which he has no access, is boisterous about his wife putting them in credit card debt, and often complains about anxiety and exhaustion display? When leaving your work area, what is the first thing you should do? *SPILLAGE*Which of the following may be helpful to prevent spillage? How many indicators does this employee display? Attempt to change the subject to something non-work related, but neither confirm nor deny the articles authenticity. While you are registering for a conference, you arrive at the website http://www.dcsecurityconference.org/registration/. Which of the following activities is an ethical use of Government-furnished equipment (GFE)? Immediately notify your security point of contact. -It is inherently not a secure technology. Determine if the software or service is authorized. -Directing you to a website that looks real. Which type of information includes personal, payroll, medical, and operational information? All documents should be appropriately marked, regardless of format, sensitivity, or classification. \text{Net Sales}&&\underline{18,693}\\ Classified data is permitted to access to only persons with appropriate clearance, a non-disclosure agreement, and need-to-know can access classified data. *Sensitive Compartmented Information -Remove and take it with you whenever you leave your workstation. Appropriate clearance; signed and approved non-disclosure agreement; and need-to-know. Attempt to change the subject to something non-work related, but neither confirm nor deny the article's authenticity. endobj **Classified DataWhat level of damage can the unauthorized disclosure of information classified as Confidential reasonably be expected to cause? What organization issues the directives concerning the dissemination of information regarding intelligence sources, methods, or activities? Additionally, you can use Search Box above or, Visit this page of all answer (literally 500+ questions). Which of the following is NOT a requirement for telework? *SOCIAL ENGINEERING*What action should you take with an e-mail from a friend containing a compressed Uniform Resource Locator (URL)? **Classified DataWhich of the following is true of protecting classified data? Understanding and using the available privacy settings. Who can be permitted access to classified data? Avoid using the same password between systems or applications. 0000008555 00000 n Thumb drives, memory sticks, and optical disks. Don't talk about work outside your workspace unless it is a specifically designated public meeting environment and is controlled by the event planners. A. The following practices help prevent viruses and the downloading of malicious code except. *Sensitive Compartmented InformationWhat is a Sensitive Compartmented Information (SCI) program? Avoid using non-Bluetooth-paired or unencrypted wireless computer peripherals. Of the following, which is NOT a characteristic of a phishing attempt? Software that install itself without the user's knowledge. What is considered a mobile computing device and therefore shouldn't be plugged in to your Government computer? Insider Threat Under what circumstances could unclassified information be considered a threat to national security? What is a proper response if spillage occurs? 11 0 obj *Insider ThreatWhich of the following practices may reduce your appeal as a target for adversaries seeking to exploit your insider status? *SpillageA user writes down details marked as Secret from a report stored on a classified system and uses those details to draft a briefing on an unclassified system without authorization. When faxing Sensitive Compartmented Information (SCI), what actions should you take? 1 0 obj exp-computerequip.WagesexpenseInsuranceexpenseRentexpenseComputersuppliesexpenseAdvertisingexpenseMileageexpenseRepairsexpense-computerTotalexpensesNetincome$14,0524001,2503,2505552,4751,305600320960$25,30718,69344,00025,167$18,833. Approved Security Classification Guide (SCG). **Social EngineeringWhich is a best practice that can prevent viruses and other malicious code from being downloaded when checking your e-mail? \text{Dep. What action should you take? Hope you got the answer you looking for! When should documents be marked within a Sensitive Compartmented Information Facility (SCIF)? The CAC/PIV is a controlled item and contains certificates for: Classified Information can only be accessed by individuals with, -Assigned a classification level by a supervisor. Classified material must be appropriately marked. What security risk does a public Wi-Fi connection pose? *Malicious CodeWhat are some examples of malicious code? *Malicious CodeAfter visiting a website on your Government device, a popup appears on your screen. **Insider ThreatWhat advantages do insider threats have over others that allows them to cause damage to their organizations more easily? -Use the government email system so you can encrypt the information and open the email on your government issued laptop. }&1,250\\ Media containing Privacy Act information, PII, and PHI is not required to be labeled. **Insider ThreatWhich type of behavior should you report as a potential insider threat? Identify and disclose it with local Configuration/Change Management Control and Property Management authorities. Darryl is managing a project that requires access to classified information. ->qJA8Xi9^CG#-4ND_S[}6e`[W'V+W;9oSUgNq2nb'mi! It includes a threat of dire circumstances. Wait until you have access to your government-issued laptop. Only allow mobile code to run from your organization or your organizations trusted sites. ~All documents should be appropriately marked, regardless of format, sensitivity, or classification.Unclassified documents do not need to be marked as a SCIF.Only paper documents that are in open storage need to be marked. A medium secure password has at least 15 characters and one of the following. **Insider ThreatBased on the description that follows, how many potential insider threat indicator(s) are displayed? What type of activity or behavior should be reported as a potential insider threat? To formalize and stratify the process of securing data based on assigned labels of importance and sensitivity C. To establish a transaction trail for auditing accountability D. To manipulate access controls to provide for the most efficient means to grant or restrict functionality *Sensitive Compartmented InformationWhen faxing Sensitive Compartmented Information (SCI), what actions should you take? Maintain possession of your laptop and other government-furnished equipment (GFE) at all times. *SENSITIVE COMPARTMENTED INFORMATION*When faxing Sensitive Compartmented Information (SCI), what actions should you take? x\[o8~G{(EELMT[N-5s/-rbtv0qm9$s'uzjxOf *Sensitive Compartmented InformationWhen is it appropriate to have your security badge visible within a Sensitive Compartmented Information Facility (SCIF)? *PHYSICAL SECURITY*At which Cyberspace Protection Condition (CPCON) is the priority focus on critical and essential functions? Only persons with appropriate clearance, a non-disclosure agreement, and need-to-know can access classified data. What action should you take first? Attempt to change the subject to something non-work related, but neither confirm nor deny the article's authenticity. If your wireless device is improperly configured someone could gain control of the device? What action should you take? No, you should only allow mobile code to run from your organization or your organization's trusted sites. P2P (Peer-to-Peer) software can do the following except: Allow attackers physical access to network assets. Ensure proper labeling by appropriately marking all classified material and, when required, sensitive material. Which may be a security issue with compressed URLs? Only persons with appropriate clearance, a non-disclosure agreement, and need-to-know can access classified data. Given that limx1f(x)=5\lim_{x\rightarrow1}f(x)=-5limx1f(x)=5 and limx1g(x)=4\lim_{x\rightarrow1}g(x)=4limx1g(x)=4, find the indicated limits. Senior government personnel, military or civilian. **Social NetworkingWhen is the safest time to post details of your vacation activities on your social networking website? exp-officeequip.Dep. -Darryl is managing a project that requires access to classified information. Which must be approved and signed by a cognizant Original Classification Authority (OCA)? What is a best practice to protect data on your mobile computing device? How many potential insiders threat indicators does this employee display? What information posted publicly on your personal social networking profile represents a security risk? Your comment on this answer: Your name to display (optional): When using your government-issued laptop in public environments, with which of the following should you be concerned? \end{array} endobj **Insider ThreatWhat type of activity or behavior should be reported as a potential insider threat? Upon connecting your Government-issued laptop to a public wireless connection, what should you immediately do? Evaluate the causes of the compromiseE-mail detailed information about the incident to your security point of contact (Wrong)Assess the amount of damage that could be caused by the compromise~Contact your security point of contact to report the incident. How many potential insiders threat indicators does this employee display. <> E-mailing your co-workers to let them know you are taking a sick day. Which of the following is NOT an example of sensitive information? Which of the following is NOT a home security best practice? Something you possess, like a CAC, and something you know, like a PIN or password. Based on the description that follows, how many potential insider threat indicator(s) are displayed? A type of phishing targeted at high-level personnel such as senior officials. He has the appropriate clearance and a signed, approved non-disclosure agreement. On a NIPRNet system while using it for a PKI-required task. You can email your employees information to yourself so you can work on it this weekend and go home now. What action should you take? Retrieve classified documents promptly from printers. Insiders are given a level of trust and have authorized access to Government information systems. Which of the following is a practice that helps to prevent the download of viruses and other malicious code when checking your email? What portable electronic devices (PEDs) are allowed in a Secure Compartmented Information Facility (SCIF)? -Make note of any identifying information and the website URL and report it to your security office. Use only your personal contact information when establishing your account, *Controlled Unclassified InformationSelect the information on the data sheet that is personally identifiable information (PII) but not protected health information (PHI), Jane JonesSocial Security Number: 123-45-6789, *Controlled Unclassified InformationSelect the information on the data sheet that is protected health information (PHI), Interview: Dr. Nora BakerDr. *Social EngineeringWhat is a common indicator of a phishing attempt? Ask for information about the website, including the URL. In this short Post, I hope you get the answer to your question. What is a common method used in social engineering? It may be compromised as soon as you exit the plane. Social Security Number; date and place of birth; mother's maiden name. Call your security point of contact immediately. A coach lleague vacations at the beach every year, is marriednd apleasant to work with, but sometimes has poor work quality display? *REMOVABLE MEDIA IN A SCIF*What action should you take when using removable media in a Sensitive Compartmented Information Facility (SCIF)? CUI may be stored on any password-protected system. **Use of GFEUnder what circumstances is it acceptable to use your Government-furnished computer to check personal e-mail and do other non-work-related activities? The email states your account has been compromised and you are invited to click on the link in order to reset your password. endobj Remove your security badge after leaving your controlled area or office building. The website requires a credit card for registration. <>/Metadata 326 0 R/ViewerPreferences 327 0 R>> 0000004057 00000 n ~A coworker brings a personal electronic device into a prohibited area. How many potential insider threat indicators does a coworker who often makes others uneasy by being persistent in trying to obtain information about classified projects to which he has no access, is boisterous about his wife putting them in credit card debt, and often complains about anxiety and exhaustion display? *Home Computer Security This includes government officials, military personnel, and intelligence analysts. Research the source of the article to evaluate its credibility and reliability. Maintain possession of your laptop and other government-furnished equipment (GFE) at all times. Jane Jones -Senior government personnel, military or civilian. 0000005958 00000 n 0000015053 00000 n true traveling overseas mobile phone cyber awareness. **Social EngineeringHow can you protect yourself from internet hoaxes? What should you do? Attempting to access sensitive information without a need-to-know. Which type of information could reasonably be expected to cause serious damage to national security if disclosed without authorization? You are leaving the building where you work. What is the best way to protect your Common Access Card (CAC) or Personal Identity Verification (PIV) card? Store classified data appropriately in a GSA-approved vault/container. **Insider ThreatWhich of the following is NOT considered a potential insider threat indicator? Which cyber protection condition (CPCON) establishes a protection priority focus on critical and essential functions only? When classified data is not in use, how can you protect it? What is a way to prevent the download of viruses and other malicious code when checking your e-mail? What is the best choice to describe what has occurred? Which of the following is a good practice to aid in preventing spillage? **Website UseWhich of the following statements is true of cookies? Cyber Awareness Challenge 2023 - Answer. Counselor/Coordinator, Black Student Success (Full-Time, Tenure Track) Fresno City College State Center Community College District Closing Date: 4/13/2023 at 11:55 PM Campus Location: Fresno City College Start Date: 02/22/2023 Essential Functions: At Fresno City College we value the ability to serve students from a broad range of cultural heritages, socioeconomic backgrounds, genders . Note any identifying information, such as the website's URL, and report the situation to your security POC. Which of the following individuals can access classified data? Store classified data appropriately in a GSA-approved vault/container. In which situation below are you permitted to use your PKI token? *SpillageWhich of the following is a good practice to prevent spillage? *Controlled Unclassified InformationWhich of the following is NOT an example of CUI? Which is NOT a way to protect removable media? identify the correct and incorrect statements about executive orders. Which of the following is a reportable insider threat activity? Which of the following can an unauthorized disclosure of information classified as Confidential reasonably be expected to cause? *SpillageWhich of the following does NOT constitute spillage?-Classified information that should be unclassified and is downgraded. What is the best example of Personally Identifiable Information (PII)? **Mobile DevicesWhat can help to protect the data on your personal mobile device? Be aware of classification markings and all handling caveats. What should be done to protect against insider threats? Spear Phishing attacks commonly attempt to impersonate email from trusted entities. The Maybe Pay Life Insurance Co. is trying to sell you an investment policy that will pay you and your heirs $40,000 per year forever. Decline So That You Maintain Physical Control of Your Government-Issued Laptop. **Identity managementWhat is the best way to protect your Common Access Card (CAC)? Shred personal documents; never share passwords, and order a credit report annually. **Identity managementWhich is NOT a sufficient way to protect your identity? 0000000016 00000 n x[SHN|@hUY6l}XeD_wC%TtO?3:P|_>4}fg7jz:_gO}c;/.sXQ2;>/8>9>:s}Q,~?>k 0000002934 00000 n *Sensitive InformationUnder what circumstances could classified information be considered a threat to national security? \text{Total expenses}&&\underline{~~~25,167}\\ Which of the following makes Alex's personal information vulnerable to attacks by identity thieves? Which of the following statements is true of using Internet of Things (IoT) devices in your home? [ 20 0 R] A coworker is observed using a personal electronic device in an area where their use is prohibited. Based on the description that follows, how many potential insider threat indicator(s) are displayed? exp - office equip. *MOBILE DEVICES*Which of the following is an example of removable media? a.) Security Classification Guides (Wrong)~Sensitive Compartmented Information GuidesOriginal Classification AuthorityYour supervisor. Mark SCI documents appropriately and use an approved SCI fax machine. **Identity ManagementWhich of the following is the nest description of two-factor authentication? if you are a military personnel and you knowingly leaked, information may be cui in accordance with executive order 13526, intentional unauthorized disclosure of classified information, is it permitted to share an unclassified draft document, is press release data sensitive information, is whistleblowing the same as reporting an unauthorized disclosure, near field communication cyber awareness, near field communication cyber awareness 2022, opsec is a dissemination control category, opsec is a dissemination control category within the cui program, penalties for unauthorized disclosure of classified information, relates to reporting of gross mismanagement and/or abuse of authority, requirements to access classified information, the act of publicly documenting and sharing information is called, the whistleblower protection enhancement act relates to reporting, unauthorized disclosure of classified information, unauthorized disclosure of classified information for dod and industry, unauthorized disclosure of information classified as confidential, what can malicious code do cyber awareness challenge, what dod instruction implements the dod program, what is a possible effect of malicious code, what is a possible effect of malicious code cyber awareness, what is a protection against internet hoaxes, what is a protection against internet hoaxes cyber awareness, what is possible effect of malicious code, what is protection against internet hoaxes, what is purpose of the isoo cui registry, what is required for an individual to access classified data, what is sensitive compartmented information cyber awareness 2022, what is the possible effect of malicious code, what is the purpose of isoo cui registry, what is the purpose of the isoo registry, what level of damage can the unauthorized disclosure of information, what security risk does a public wi-fi connection pose, what should the owner of this printed sci do differently, what should you do if you suspect spillage has occurred, what threat do insiders with authorized, what threat do insiders with authorized access to information, what threat do insiders with authorized access to information pose, when can you check personal email on your gfe, when using social networking services the penalties for ignoring requirements, which of the following individuals can access classified data 2022, which of the following is an example of nfc, which of the following is good practice to prevent spillage, which of the following is true about protecting classified data, which of the following is true of protecting classified data, which of the following may help prevent spillage, which of the following may help to prevent spillage, which of the following represents a good physical security practice, which of these is true of unclassified data, whistleblowing should be used to report which of the following, who is responsible for applying cui markings and dissemination instructions. They may wittingly or unwittingly use their authorized access to perform actions that result in the loss or degradation of resources or capabilities. -Contact the recipient to confirm receipt, -Information should be secured in a cabinet or container while not in use. -Monitor credit card statements for unauthorized purchases. *TravelWhat security risk does a public Wi-Fi connection pose?-It may expose the connected device to malware. Connect to the Government Virtual Private Network (VPN). Examples are: Patient names, Social Security numbers, Drivers license numbers, insurance details, and birth dates. When checking in at the airline counter for a business trip, you are asked if you would like to check your laptop bag. What security device is used in email to verify the identity of sender? *SpillageWhat should you do when you are working on an unclassified system and receive an email with a classified attachment? **Insider ThreatWhich of the following should be reported as a potential security incident? Note any identifying information and the website's Uniform Resource Locator (URL). **Social EngineeringWhat is TRUE of a phishing attack? is a program that segregates various types of classified information into distinct compartments for added protection and dissemination or distribution control. CUI may be stored on any password-protected system. Which of the following is NOT a typical result from running malicious code? *SOCIAL ENGINEERING*How can you protect yourself from social engineering? Dr. Baker reports that the sessions addressed Ms. Jones's depression, which poses no national security risk. OPSEC Awareness for Military Members, DoD Employees and Contractors (2020) Your cousin posted a link to an article with an incendiary headline on social media. Classified data: Must be handled and stored properly based on classification markings and handling caveats Can only be accessed by individuals with all of the following: o Appropriate clearance o Signed and approved non-disclosure agreement o Need-to-know Protecting Sensitive Information To protect sensitive information: You know this project is classified. What should be your response? How do you respond? *Mobile DevicesWhat can help to protect the data on your personal mobile device? Which of the following terms refers to someone who harms national security through authorized access to information system? Any individual who falls to meet these requirements is not authorized to access classified information. As part of the survey the caller asks for birth date and address. What type of security is "part of your responsibility" and "placed above all else?". A coworker removes sensitive information without authorization. It displays a label showing maximum classification, date of creation, point of contact, and Change Management 9CM) Control Number. What type of attack might this be? 0000009188 00000 n If the online misconduct also occurs offline~If you participate in or condone it at any timeIf you participate in it while using DoD information systems onlyIf you participate in or condone it during work hours only. !LL"k)BSlC ^^Bd(^e2k@8alAYCz2QHcts:R+w1F"{V0.UM^2$ITy?cXFdMx Y8> GCL!$7~Bq|J\> V2 Y=n.h! All https sites are legitimate and there is no risk to entering your personal info online. endstream endobj 291 0 obj <.
Houses For Rent In Pensacola, Florida By Private Owners,
Ozempic Para Adelgazar Testimonios,
Sam Logan Siesta Key Parents Net Worth,
Articles W
which of the following individuals can access classified datahalimbawa ng halamang ornamental na may kasamang ibang halaman