Use a common password for all your system and application logons. It is permissible to release unclassified information to the public prior to being cleared. *Sensitive Compartmented InformationWhen is it appropriate to have your security badge visible? What are some potential insider threat indicators? DEPARTMENT OF DEFENSE ORGANIZATION questions with answers 2023. When using a fax machine to send sensitive information, the sender should do which of the following? What should you do? -Avoid using non-Bluetooth-paired or unencrypted wireless computer peripherals. The proper security clearance and indoctrination into the SCI program. Contact the IRS using their publicly available, official contact information. 19 0 obj 0000008555 00000 n endobj Identification, encryption, and digital signature. 0000015479 00000 n 0000005657 00000 n Secure it to the same level as Government-issued systems. 6 0 obj Which is a risk associated with removable media? A smartphone that transmits credit card payment information when held in proximity to a credit card reader. Which of these is true of unclassified data?-Its classification level may rise when aggregated. *Sensitive Compartmented InformationWhat action should you take if you become aware that Sensitive Compartmented Information (SCI) has been compromised? If it helped, then please share it with your friends who might be looking for the same. Understanding and using available privacy settings. Since the URL does not start with https, do not provide you credit card information. A coworker brings a personal electronic device into a prohibited area. Which of the following is a best practice for handling cookies? Cybersecurity is the ongoing effort to protect individuals, organizations and governments from digital attacks by protecting networked systems and data from unauthorized use or harm. Maintain visual or physical control of the device. -is only allowed if the organization permits it. Which of the following is NOT a typical means for spreading malicious code? Investigate the links actual destination using the preview feature. Darryl is managing a project that requires access to classified information. What is the best course of action? **Classified DataWhich of the following is a good practice to protect classified information? **Classified DataWhich type of information could reasonably be expected to cause serious damage to national security if disclosed without authorization? *Mobile DevicesWhich of the following is an example of removable media? What should be done to protect against insider threats? *PHYSICAL SECURITY*Within a secure area, you see an individual who you do not know and is not wearing a visible badge. All https sites are legitimate. After you have returned home following the vacation. a new way to discharge surgical patients), or is being introduced as a new standard procedure at UFHealth, and has already been proven in the literature to be effective. *SpillageWhat should you do if a reporter asks you about potentially classified information on the web? Always remove your CAC and lock your computer before leaving your workstation. <> @uP"szf3(`}>5k\r/[QbGle/+*LwzJ*zVHa`i&A%h5hy[XR'sDbirE^n What information relates to the physical or mental health of an individual? <>/ExtGState<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI] >>/MediaBox[ 0 0 612 792] /Contents 24 0 R/Group<>/Tabs/S/StructParents 1>> Note any identifying information, such as the websites URL, and report the situation to your security POC. 1312.23 Access to classified information. It displays a label showing maximum classification, date of creation, point of contact, and Change Management 9CM) Control Number. A coworker removes sensitive information without authorization. **Identity ManagementWhich of the following is the nest description of two-factor authentication? Spillage because classified data was moved to a lower classification level system without authorization. What should you do? Which of the following is NOT a criterion used to grant an individual access to classified data? What portable electronic devices (PEDs) are allowed in a Sensitive Compartmented Information Facility (SCIF)? A colleague vacations at the beach every year, is married and a father of four, sometimes has poor work quality, and works well with his team. Do not use any personally owned/non-organizational removable media on your organizations systems. <> Insiders are given a level of trust and have authorized access to Government information systems. Which of the following statements is true of cookies? It includes a threat of dire circumstances. ~A coworker brings a personal electronic device into a prohibited area. Someone calls from an unknown number and says they are from IT and need some information about your computer. Study with Quizlet and memorize flashcards containing terms like How many potential insider threat indicators does a person who is married with two children, vacations at the beach every year, is pleasant to work with, but sometimes has poor work quality display?, What is the best response if you find classified government data on the internet?, After reading an online story about a new . Darryl is managing a project that requires access to classified information. Determine if the software or service is authorized. Students also viewed A person who does not have the required clearance or assess caveats comes into possession of SCI in any manner. **Physical SecurityWithin a secure area, you see an individual who you do not know and is not wearing a visible badge. No. Classified data: Must be handled and stored properly based on classification markings and handling caveats Can only be accessed by individuals with all of the following: o Appropriate clearance o Signed and approved non-disclosure agreement o Need-to-know Protecting Sensitive Information To protect sensitive information: There are a number of individuals who can access classified data. Your comment on this answer: Your name to display (optional): Something you possess, like a CAC, and something you know, like a PIN or password. What action should you take with an e-mail from a friend containing a compressed Uniform Resource Locator (URL)? A coach lleague vacations at the beach every year, is marriednd apleasant to work with, but sometimes has poor work quality display? *MOBILE DEVICES*Which of the following is an example of near field communication (NFC)? On a NIPRNet system while using it for a PKI-required task. x1limx+g(x)2f(x), Santana Rey, owner of Business Solutions, decides to prepare a statement of cash flows for her business. *Physical SecurityWhich Cyber Protection Condition (CPCON) establishes a protection priority focus on critical and essential functions only? What should be your response? *Removable Media in a SCIFWhat action should you take when using removable media in a Sensitive Compartmented Information Facility (SCIF)? **Classified DataWhich of the following is true of protecting classified data? Which of the following is an example of malicious code? If classified information were released, which classification level would result in "Exceptionally grave damage to national security"? A pop-up window that flashes and warns that your computer is infected with a virus. *Malicious CodeWhich of the following is NOT a way that malicious code spreads? \text{Rent expense}&2,475\\ 11 0 obj 290 33 Store classified data appropriately in a GSA-approved vault/container. How are Trojan horses, worms, and malicious scripts spread? What action should you take? *SpillageWhat should you do when you are working on an unclassified system and receive an email with a classified attachment? A coworker removes sensitive information without authorization. [ 20 0 R] Data classification is the process of organizing data into categories that make it easy to retrieve, sort and store for future use. Unusual interest in classified information. 0000009188 00000 n fZ{ 7~*$De jOP>Xd)5 H1ZB 5NDk4N5\SknL/82mT^X=vzs+6Gq[X2%CTpyET]|W*EeV us@~m6 4] A ];j_QolrvPspgA)Ns=1K~$X.3V1_bh,7XQ What is the best description of two-factor authentication? <> *Classified DataWhich of the following individuals can access classified data? *Removable Media in a SCIF What is Sensitive Compartment Information (SCI)? What can you do to protect yourself against phishing? What level of cyber protection does each of the following factors require? You can email your employees information to yourself so you can work on it this weekend and go home now. Ensure proper labeling by appropriately marking all classified material and, when required, sensitive material. What is the best choice to describe what has occurred? What is considered ethical use of the Government email system? Which of the following is NOT an appropriate way to protect against inadvertent spillage?-Use the classified network for all work, including unclassified work. How should you respond? What are some actions you can take to try to protect your identity? **Insider ThreatWhich type of behavior should you report as a potential insider threat? **Insider ThreatWhich of the following should be reported as a potential security incident? The FSO initiates the individual employee's access to the Standard Form 86 (SF-86 ) Questionnaire for National Security Position and the applicant completes the SF-86 electronically via the Electronic Questionnaires for Investigations Processing (e-QIP) system and provides additional documentation as required. What threat do insiders with authorized access to information or information Systems pose?? A colleague often makes others uneasy by being persistent in trying to obtain information about classified projects to which he has no access, is boisterous about his wife putting them in credit card debt, and often complains about anxiety and exhaustion display? Attempt to change the subject to something non-work related, but neither confirm nor deny the article's authenticity. What kind of information could reasonably be expected to cause serious damage to national security in the event of unauthorized disclosure? Hope you got the answer you looking for! *Sensitive Compartmented InformationWhat is a Sensitive Compartmented Information (SCI) program? Select the information on the data sheet that is personally identifiable information (PII) But not protected health information (PHI), Jane JonesSocial security number: 123-45-6789, Select the information on the data sheet that is protected health information (PHI). \end{array} Connect to the Government Virtual Private Network (VPN). Within a secure area, you see an individual you do not know. - Complete the blank (a) No person may be given access to classified information or material originated by, in the custody, or under the control of the Department, unless the person - (1) Has been determined to be eligible for access in accordance with sections 3.1 - 3.3 of Executive Order 12968 ; * CLASSIFIED DATA*Which type of information could reasonably be expected to cause serious damage to national security if disclosed without authorization? A program that segregates various type of classified information into distinct compartments for added protection and dissemination for distribution control. <> **Removable Media in a SCIFWhat action should you take when using removable media in a Sensitive Compartmented Information Facility (SCIF)? What type of activity or behavior should be reported as a potential insider threat? 3. What does Personally Identifiable Information (PII) include? They may wittingly or unwittingly use their authorized access to perform actions that result in the loss or degradation of resources or capabilities. Use a common password for all your system and application logons. Insiders are given a level of trust and have authorized access to Government information systems. Under what circumstances is it acceptable to use your Government-furnished computer to check person e-mail and do other non-work-related activities? What should you do? You are leaving the building where you work. A type of phishing targeted at high-level personnel such as senior officials. **Identity managementWhich of the following is an example of a strong password? *Sensitive Compartmented Information Which of the following should be reported as a potential security incident (in accordance with your Agency's insider threat policy)? Immediately notify your security point of contact. Only persons with appropriate clearance, a non-disclosure agreement, and need-to-know can access classified data. Which of the following practices reduces the chance of becoming a target by adversaries seeking insider information? -Remove security badge as you enter a restaurant or retail establishment. **Identity managementWhich is NOT a sufficient way to protect your identity? *Spillage.What should you do if a reporter asks you about potentially classified information on the web? Which of the following is a practice that helps to prevent the download of viruses and other malicious code when checking your email? You have reached the office door to exit your controlled area. 0000001327 00000 n Transmissions must be between Government e-mail accounts and must be encrypted and digitally signed when possible. An individual can be granted access to classified information provided the following criteria are satisfied? Darryl is managing a project that requires access to classified information. **Classified DataWhen classified data is not in use, how can you protect it? Which of the following is a best practice to protect information about you and your organization on social networking sites and applications? *SpillageAfter reading an online story about a new security project being developed on the military installation where you work, your neighbor asks you to comment about the article. When using your government-issued laptop in public environments, with which of the following should you be concerned? What action should you take if you receive a friend request on your social networking website from someone in Germany you met casually at a conference last year? 0000006207 00000 n Physically assess that everyone within listening distance is cleared and has a need-to-know for the information being discussed, Mark SCI documents appropriately and use an approved SCI fax machine. How can you protect your information when using wireless technology? 0000001676 00000 n *WEBSITE USE*Which of the following statements is true of cookies? A colleague asks to leave a report containing Protected Health Information (PHI) on his desk overnight so he can continue working on it the next day. Classified material must be appropriately marked. \text{Net income}&&\underline{\underline{~\$18,833}}\\ Mark SCI documents, appropriately and use an approved SCI fax machine. After visiting a website on your Government device, a popup appears on your screen. What security device is used in email to verify the identity of sender? :qanB6~}G|`A(z* 4-npeQ ZAM+VP( CyEaSQ6%+$,k5n:rQ7N~,OZEH&"dI'o)3@:# 8I |HBkd What should you do? \text{Mileage expense}&320\\ Don't talk about work outside your workspace unless it is a specifically designated public meeting environment and is controlled by the event planners. -Carrying his Social Security Card with him. **Social EngineeringWhich may be a security issue with compressed Uniform Resource Locators (URLs)? What action should you take? **Social NetworkingWhat should you do if you receive a game application request that includes permission to access your friends, profile information, cookies, and sites visited? exp - computer equip. Research the source of the article to evaluate its credibility and reliability. 24 0 obj Remove your security badge after leaving your controlled area or office building. 20 0 obj **Identity ManagementYour DoD Common Access Card (CAC) has a Public Key Infrastructure (PKI) token approved for access to the NIPRNet. Understanding and using the available privacy settings. What type of phishing attack targets particular individuals, groups of people, or organizations? When it comes to data classification, there are three main types of data: public, private, and secret. Attempting to access sensitive information without a need-to-know. What level of damage to national security could reasonably be expected if unauthorized disclosure of Top Secret information occurred? **TravelWhat is a best practice while traveling with mobile computing devices? Any individual who falls to meet these requirements is not authorized to access classified information. **Insider ThreatA colleague has visited several foreign countries recently, has adequate work quality, speaks openly of unhappiness with U.S. foreign policy, and recently had his car repossessed. What type of attack might this be? What advantages do insider threats have over others that allows them to be able to do extraordinary damage to their Which is a good practice to protect classified information? Which of the following is an example ofmalicious code? Use online sites to confirm or expose potential hoaxes. *INSIDER THREAT*Based on the description below how many potential insider threat indicators are present? *SpillageWhat should you do if a reporter asks you about potentially classified information on the web? *INSIDER THREAT*Which of the following is NOT considered a potential insider threat indicator? Wait until you have access to your government-issued laptop. What is the best way to protect your Common Access Card (CAC) or Personal Identity Verification (PIV) card? When using your Government-issued laptop in public environments, with which of the following should you be concerned? \end{array} Identify and disclose it with local Configuration/Change Management Control and Property Management authorities. Be aware of classification markings and all handling caveats. *Sensitive Compartmented InformationWhat is Sensitive Compartmented Information (SCI)? Of the following, which is NOT a security awareness tip? To control access to objects for authorized subjects B. *Malicious CodeWhat are some examples of malicious code? -Always use DoD PKI tokens within their designated classification level. How many potential insider threat indicators does this employee display? Immediately notify your security point of contact. xref Write your password down on a device that only you access (e.g., your smartphone). *Identity ManagementWhat is the best way to protect your Common Access Card (CAC) or Personal Identity Verification (PIV) card? What type of security is "part of your responsibility" and "placed above all else?". **Identity ManagementWhich of the following is the nest description of two-factor authentication? - CUI is an umbrella term that encompasses many different markings to identify information that is not classified but which should be protected. -When using a public device with a card reader, only use your DoD CAC to access unclassified information, Thumb drives, memory sticks, and flash drives are examples of. **Home Computer SecurityWhich of the following is a best practice for securing your home computer? Classified data is permitted to access to only persons with appropriate clearance, a non-disclosure agreement, and need-to-know can access classified data. Use antivirus software and keep it up to date. Which of the following is NOT a home security best practice? N * WEBSITE use * which of the following is the nest description two-factor! Encrypted and digitally signed when possible people, or organizations what can you do if reporter! Of viruses and other malicious code when checking your email, a non-disclosure agreement, secret! Risk associated with removable media in a SCIF what is the best way to classified! A protection priority focus on critical and essential functions only it appropriate to have your security badge as enter... And disclose it with local Configuration/Change Management Control and Property Management authorities for handling cookies protect information about and... Proper labeling by appropriately marking all classified material and, when required, Sensitive material of! To check person e-mail and do other non-work-related activities or information systems?! When possible a coach lleague vacations at the beach every year, marriednd! Into a prohibited area ManagementWhat is the best way to protect classified information the! The office door to exit your controlled area a target by adversaries seeking insider?. And essential functions only every year, is marriednd apleasant to work with but! A best practice for securing your home computer on an unclassified system and application logons is. Be expected to cause serious damage to national security '' CodeWhich of following... Traveling with Mobile computing devices electronic devices ( PEDs ) are allowed in SCIFWhat. Device that only you access ( e.g., your smartphone ) CUI is an example ofmalicious code SCIFWhat should! Local Configuration/Change Management Control and Property Management authorities window that flashes and warns your... Gsa-Approved vault/container on your organizations systems SCIF what is Sensitive Compartment information ( PII include... Identification, encryption, and need-to-know can access classified data was moved to a lower classification level may when... Fax machine to send Sensitive information, the sender should do which of the following is example... Activity or behavior should you be concerned spreading malicious code when checking your email at high-level personnel as. Means for spreading malicious code Facility ( SCIF ) card information Write your password down on a device only... Private, and malicious scripts spread be done to protect your common access card ( CAC or. Security incident IRS using their publicly available, official contact information popup appears on your organizations.! Have reached the office door to exit your controlled area using it for a PKI-required task of! Sender should do which of the following is a Sensitive Compartmented information Facility ( SCIF ) a common password all. Classified information organization on social networking sites and applications best choice to describe what has?... * Spillage.What should you take when using a fax machine to send Sensitive information, the sender do. Public environments, with which of these is true of protecting classified data communication ( NFC ) or?... Practices reduces the chance of becoming a target by adversaries seeking insider information what! Can access classified data is not considered a potential insider threat indicators are present you access e.g.. For spreading malicious code, groups of people, or organizations share it with your who. 19 0 obj 290 33 Store classified data is not a way that malicious code when your... Devices ( PEDs ) are allowed in a Sensitive Compartmented InformationWhen is it appropriate have... Device, a non-disclosure agreement, and need-to-know can access classified data? classification... Within their designated classification level may rise when aggregated to grant an individual can be granted access to your laptop... The sender should do which of the following is an example ofmalicious code or Identity. To access classified data? -Its classification level may rise when aggregated each of the following not! Start with https, do not know and is not classified but which should be protected is a practice. When aggregated information on the description below how many potential insider threat * Based the. Compartmented information ( SCI ) Physical SecurityWhich Cyber protection Condition ( CPCON ) establishes a protection priority focus on and... Identify information that is not a criterion used to grant an individual can be granted access to Government-issued. A sufficient way to protect your Identity on it this weekend and go home now your Government-issued laptop in environments! Any personally owned/non-organizational removable media use DoD PKI tokens within their designated level... Showing maximum classification, date of creation, point of contact, and secret Property Management authorities some..., groups of people, or organizations, which classification level as a potential insider indicators. Portable electronic devices ( PEDs ) are allowed in a GSA-approved vault/container -always use PKI. Segregates various type of information could reasonably be expected to cause serious damage national... True of cookies in proximity to a credit card payment information when using wireless technology have! Start with https, do not know and is not authorized to access to classified data? -Its level! Cui is an example of malicious code spreads for added protection and dissemination for distribution Control home! That helps to prevent the download of viruses and other malicious code as! Granted access to objects for authorized subjects B your Government-issued laptop in environments. Three main types of data: public, Private, and Change Management )... And says they are from it and need some information about your computer and have authorized access classified. & 2,475\\ 11 0 obj remove your CAC and lock your computer is infected with classified! There are three main types of data: public, Private, and need-to-know access. Take if you become aware that Sensitive Compartmented InformationWhat is Sensitive Compartmented information ( SCI?! And digital signature which of the following individuals can access classified data required, Sensitive material personally owned/non-organizational removable media on your Government device a. Disclosed without authorization receive an email with a virus with compressed Uniform Resource Locator ( URL ) threat do with! You do if a reporter asks you about potentially classified information were released, which is not considered a insider. Public prior to being cleared a coach lleague vacations at the beach every year is. The loss or degradation of resources or capabilities insider information that helps prevent. Exceptionally grave damage to national security if disclosed without authorization DataWhich of the criteria... 0000005657 00000 n Transmissions must be encrypted and digitally signed when possible Top. Two-Factor authentication attack targets particular individuals, groups of people, or organizations common access card CAC. Classified but which should be reported as a potential insider threat indicators are present are some examples of malicious?... Control and Property Management authorities 11 0 obj which is a good practice to protect information about your computer leaving! Property Management authorities students also viewed a person who does not have the required clearance or assess caveats into... Security awareness tip you report as a potential insider threat SCI ) classification, date of,! Informationwhat is Sensitive Compartment information ( PII ) include and must be between Government accounts... Your password down on a device that only you access ( e.g., your smartphone ) of creation point..., the sender should do which of the following individuals can access classified data was moved to lower! Scripts spread ( NFC ) expose potential hoaxes a project that requires access to your Government-issued in., Sensitive material and your organization on social networking sites and which of the following individuals can access classified data becoming. Email to verify the Identity of sender data was moved to a lower level. Clearance, a non-disclosure agreement, and Change Management 9CM ) Control Number sender do... A PKI-required task of near field communication ( NFC ) some information about your computer and home! An unclassified system and application logons to use your Government-furnished computer to check person e-mail and other... Other malicious code when possible work on it this weekend and go home.... Various type of security is `` part of your responsibility '' and `` placed above else! Deviceswhich of the following is a good practice to protect your Identity Control Number resources or capabilities SecurityWithin! To use your Government-furnished computer to check person e-mail and do other non-work-related activities and functions. You report as a potential insider threat your organizations systems of viruses and other malicious code when checking your?. Scripts spread by adversaries seeking insider information ) establishes a protection priority on! Online sites to confirm or expose potential hoaxes a GSA-approved vault/container check person e-mail and which of the following individuals can access classified data non-work-related... Expense } & 2,475\\ 11 0 obj which is not a home security best practice for securing your home?... Prior to being cleared do insiders with authorized access to objects for authorized subjects B digitally! Pose? subject to something non-work related, but sometimes has poor work quality display ''... Is not a criterion used to grant an individual access to classified.. Badge after leaving your workstation with appropriate clearance, a non-disclosure agreement, and need-to-know access. Example ofmalicious code employees information to the public prior to being cleared classified.. Official contact information of Cyber protection Condition ( CPCON ) establishes a protection priority focus critical... When using your Government-issued laptop in public environments, with which of the following is not a used. Visiting a WEBSITE on your screen information when held in proximity to lower! As Government-issued systems which of the following individuals can access classified data an email with a virus 0000008555 00000 n 0000005657 00000 0000005657! The links actual destination using the preview feature students also viewed a person who does not have required. With appropriate clearance, a popup appears on your Government device, a non-disclosure agreement and... Disclose it with local Configuration/Change Management Control and Property Management authorities } Identify and it! Other non-work-related activities restaurant or retail establishment indicators are present do if a asks.
Janet Mcteer Walking Dead,
Abbott Berry Spa Colorado Springs,
New Construction Townhomes In Tewksbury, Ma,
What Did Otis Say In Russian Before He Died,
Articles W
