What is a proper response if spillage occurs?
Immediately notify your security POC
. A user writes down details from a report stored on a classified system marked as Secret and uses those details to draft an unclassified briefing on an unclassified system without authorization.
Which is a good practice to protect classified information?
Which is a good practice to protect classified information?
Ensure proper labeling by appropriately marking all classified material and, when required, sensitive material
.
Which of the following is a good practice to aid in preventing spillage?
Which of the following is a good practice to aid in preventing spillage?
Be aware of classification markings and all handling caveats
. What is required for an individual to access classified data? Appropriate clearance; signed and approved non-disclosure agreement; and need-to-know.
What should you do if a reporter asks about potentially classified information on the Web?
Immediately notify your security point of contact. What should you do if a reporter asks you about potentially classified information on the web?
Neither confirm nor deny the information is classified
.
What should you do when you are working on an unclassified?
What should you do when you are working on an unclassified system and receive an email with a classified attachment?
Call your security point of contact immediately
.
Which of the following is the best example of PII?
Personally identifiable information, or PII, is any data that could potentially be used to identify a particular person. Examples include a full name,
Social Security number, driver’s license number, bank account number, passport number
, and email address.
What is spillage cyber awareness?
Spillage of classified information is
a contamination of lower level systems with material of a higher classification
.
What is the best practice while traveling with mobile computing devices?
What is a best practice while traveling with mobile computing devices?
Maintain possession of your laptop and other government-furnished equipment (GFE) at all times
.
The most common form of social engineering attack is
phishing
. Phishing attacks exploit human error to harvest credentials or spread malware, usually via infected email attachments or links to malicious websites.
How many Cpcon conditions are there?
There
are five Force Protection
Conditions
: Normal, Alpha, Bravo, Charlie, and Delta. For each
condition
,
there
are several security measures stipulated.
Which is a rule for removable media?
What is a rule for removable media, other portable electronic devices (PEDs), and mobile computing devices to protect Government systems?
Do not use any personally owned/non-organizational removable media on your organization’s systems
.
When should a security badge be visible?
When is it appropriate to have your securing badge visible with a sensitive compartmented information facility?
At all time when is the facility
.
What is a good practice for physical security?
What is a good practice for physical security?
Challenge people without proper badges
.
What is the best way to protect your common access card?
How should you protect your Common Access Card (CAC) or Personal Identity Verification (PIV) card?
Store it in a shielded sleeve to avoid chip cloning
.
What can malicious code do?
Malicious code includes viruses, trojan horses, worms, macros, and scripts. They can
damage or compromise digital files
, erase your hard drive and/or allow hackers access to your PC or mobile from a remote location.
What is an indication that malicious is running on your system?
Examples of basic functions that are symptomatic of a malware infection include having a
system that won’t boot up
, won’t connect to the internet (or connects with a whole bunch of windows open to sites you didn’t go to), won’t perform basic functions, randomly shuts down, or does other weird things.
