What action should you take when using removable media in a Sensitive Compartmented Information Facility (SCIF)? 290 0 obj <> endobj **Insider ThreatBased on the description that follows, how many potential insider threat indicator(s) are displayed? Darryl is managing a project that requires access to classified information. *Classified DataWhich of the following individuals can access classified data?-Darryl is managing a project that requires access to classified information. *Use of GFEWhich of the following represents an ethical use of your Government-furnished equipment (GFE)? What action should you take if you receive a friend request on your social networking website from someone in Germany you met casually at a conference last year? Maintain possession of your laptop and other government-furnished equipment (GFE) at all times. **Social EngineeringWhich of the following is a way to protect against social engineering? Data format data can be either structured or unstructured. *Sensitive Compartmented InformationWhat must the dissemination of information regarding intelligence sources, methods, or activities follow? Is it ok to run it? **Insider ThreatBased on the description that follows, how many potential insider threat indicator(s) are displayed? Who can access classified information? - Answers A colleague often makes others uneasy with her persistent efforts to obtain information about classified project where she has no need-to-know, is vocal about her husband overspending on credit cards, and complains about anxiety and exhaustion. Report the crime to local law enforcement. A random sample of surgical procedures was selected each month for 30 consecutive months, and the number of procedures with postoperative complications was recorded. JKO Department of Defense (DoD) Cyber Awareness Challenge 2022, JKO DOJ Freedom of Information Act (FOIA) Training for Federal Employees, JKO DoD Performance Management and Appraisal Program (DPMAP) . includes a discussion of the competitive structure of the French wine industry. When classified data is not in use, how can you protect it? No, you should only allow mobile code to run from your organization or your organization's trusted sites. 290 33 **Classified DataHow should you protect a printed classified document when it is not in use? Key characteristics of each are cited in Table 12.6. Upon connecting your government-issued laptop to a public wireless connection, what should you immediately do? Senior government personnel, military or civilian. Ask for information about the website, including the URL. Protecting CUI . *Insider Threat Which type of behavior should you report as a potential insider threat? Web(a) No person may be given access to classified information or material originated by, in the custody, or under the control of the Department, unless the person - (1) Has been determined to be eligible for access in accordance with sections 3.1-3.3 of Executive Order 12968; (2) Has a demonstrated need-to-know; and (3) Has signed an approved nondisclosure Which of the following is the best description of two-factor authentication? Store it in a General Services Administration (GSA)-approved vault or container. It appears that participants in the French wine industry must **Social EngineeringHow can you protect yourself from internet hoaxes? Mark SCI documents, appropriately and use an approved SCI fax machine. Label all files, removable media, and subject headers with appropriate classification markings. A colleague complains about anxiety and exhaustion, makes coworkers uncomfortable by asking excessive questions about classified projects, and complain about the credit card bills that his wife runs up. Winery as a stuck-in-the-middle firm. Data classification is the process of analyzing structured or unstructured data and organizing it into categories based on file type, contents, and other metadata. The email provides a website and a toll-free number where you can make a payment. Insiders are given a level of trust and have authorized access to Government information systems. Damage to national security It is permissible to release unclassified information to the public prior to being cleared. How should you respond? Which of the following is the best example of Personally Identifiable Information (PII)? internet-quiz. What are some examples of removable media? The additional sales revenue and expenses from the advertising program are projected to increase by 101010 percent each year. WebWhat is required for an individual to access classified data? Webasked in Internet by voice (265k points) Question : Which of the following is true about unclassified data? *Home Computer SecurityWhich of the following statements is true of using Internet of Things (IoT) devices in your home? (notify security POC, analysis of media for virus and malicious code, and analyze other workstations in the scif). 0000001676 00000 n FoundingdateGenericcompetitivestrategyMajorcustomermarket(morethan80%concentration)ProductionsiteSouthWinery1750? Which of the following should you NOT do if you find classified information on the internet?-Download the information. %PDF-1.4 % WebOnly persons with appropriate clearance, a non-disclosure agreement, and need-to-know can access classified data. **Identity managementWhich of the following is an example of two-factor authentication? WebClassified Information can only be accessed by individuals with All of the above Which of the following definitions is true about disclosure of confidential information? What should you do? Something you possess, like a CAC, and something you know, like a PIN or password. Which of the following is NOT considered a potential insider threat indicator? Since the URL does not start with "https," do not provide you credit card information. VanDriesen tells her that he is a wine connoisseur himself and often makes purchases How many potential insider threat indicators does a coworker who often makes others uneasy by being persistent in trying to obtain information about classified projects to which he has no access, is boisterous about his wife putting them in credit card debt, and often complains about anxiety and exhaustion display? *Sensitive Compartmented InformationWhen should documents be marked within a Sensitive Compartmented Information Facility (SCIF). Don't talk about work outside your workspace unless it is a specifically designated public meeting environment and is controlled by the event planners. Attempting to access sensitive information without a need-to-know. Which of the following Annual DoD Cyber Awareness Challenge Exam **Use of GFEWhat is a critical consideration on using cloud-based file sharing and storage applications on your Government-furnished equipment (GFE)? Classified information is that which a government or agency deems sensitive enough to national security that access to it must be controlled and restricted. It may expose the connected device to malware. Which of the following individuals can access classified data? data. Data classification is the process of analyzing structured or unstructured data and organizing it into categories based on file type, contents, and other metadata. In which situation below are you permitted to use your PKI token? Retrieve classified documents promptly from printers. WebTheodore is seeking access to classified information that he does not need to know to perform his job duties. What is the best example of Protected Health Information (PHI)? Which Of The Following Individuals Can Access Classified Data 0000041351 00000 n A man you do not know is trying to look at your Government-issued phone and has asked to use it. A program that segregates various types of classified information into distinct compartments for added protection and dissemination or distribution control. It displays a label showing maximum classification, date of creation, point of contact, and Change Management (CM Control Number. Jarden Company has credit sales of $3,600,000 for year 2017. Explain. What should you do if you receive a game application request that includes permission to access your friends, profile information, cookies, and sites visited? true traveling overseas mobile phone cyber awareness. Which of the following is NOT true of traveling overseas with a mobile phone? Call your security point of contact immediately. He has the appropriate clearance and a signed, approved non-disclosure agreement. Contact the IRS using their publicly available, official contact information. An individual can be granted access to classified information provided the following criteria are satisfied? Access to classified information **Insider ThreatHow many potential insider threat indicators does a coworker who often makes others uneasy by being persistent in trying to obtain information about classified projects to which he has no access, is boisterous about his wife putting them in credit card debt, and often complains about anxiety and exhaustion display? Label all files, removable media, and subject headers with appropriate classification markings. Which of the following individuals can access classified data ~All documents should be appropriately marked, regardless of format, sensitivity, or classification.Unclassified documents do not need to be marked as a SCIF.Only paper documents that are in open storage need to be marked. **Classified DataWhich of the following is true of protecting classified data? Avoid using non-Bluetooth-paired or unencrypted wireless computer peripherals. Mary Smith, a Level II CFA candidate, was recently hired for an analyst position at the Bank of Ireland. When is conducting a private money-making venture using your Government-furnished computer permitted? *Insider ThreatWhat threat do insiders with authorized access to information or information systems pose?-They may wittingly or unwittingly use their authorized access to perform actions that result in the loss or degradation of resources or capabilities. %%EOF 0000004057 00000 n He has the appropriate clearance and a signed approved non-disclosure agreement. Which of the following individuals can access classified data? Lock your device screen when not in use and require a password to reactivate. What is a good practice for physical security? Land where the soil is fertile enough to grow grapes necessary for the wine production Phishing can be an email with a hyperlink as bait. Analysis Component He has the appropriate clearance and a signed, approved, non-disclosure agreement. A colleague has won 10 high-performance awards, can be playful and charming, is not currently in a relationship, and is occasionally aggressive in trying to access sensitive information. A colleague complains about anxiety and exhaustion, makes coworkers uncomfortable by asking excessive questions about classified projects, and complain about the credit card bills that his wife runs up. In order to access this information, these individuals must have security clearance from the appropriate government agency. internet. **Social NetworkingWhich of the following best describes the sources that contribute to your online identity? Data What should you do? Protecting CUI . Follow instructions given only by verified personnel. What is a proper response if spillage occurs. by producing wine in bottles with curved necks, which increases its cost structure. What should you do? -Darryl is managing a project that requires access to classified information. *SpillageWhich of the following actions is appropriate after finding classified information on the Internet? Ensure proper labeling by appropriately marking all classified material and, when required, sensitive material. Use online sites to confirm or expose potential hoaxes. Which of the following is NOT considered a potential insider threat indicator? **Insider ThreatWhich scenario might indicate a reportable insider threat? *Classified Data Which of the following individuals can access classified data? **Website UseHow should you respond to the theft of your identity? WebPotential Impact on Organizations and Individuals . What type of activity or behavior should be reported as a potential insider threat? How many potential insider threat indicators does a person who is playful and charming, consistently win performance awards, but is occasionally aggressive in trying to access sensitive information? WebAccess is only permitted to individuals after determining they have a need to know. Estimate the required balance of the Allowance for Doubtful Accounts at December 31, 2017, using the aging of accounts receivable method. WebClassified data: Must be handled and stored properly based on classification markings and handling caveats Can only be accessed by individuals with all of the following: o Appropriate clearance o Signed and approved non- disclosure agreement o Need-to-know . Only use you agency trusted websites. Data classification is the process of analyzing structured or unstructured data and organizing it into categories based on file type, contents, and other metadata. Which of the following individuals can access classified data 2022? Be aware of classification markings and all handling caveats. **Website UseWhich of the following statements is true of cookies? He has the appropriate clearance and a signed approved non-disclosure agreement. What should you do? Data states data exists in one of three statesat rest, in process, or in transit. Smiths report identifies four wineries that are the major players in the French wine What are some examples of malicious code? *Social NetworkingWhich of the following is a security best practice when using social networking sites? After clicking on a link on a website, a box pops up and asks if you want to run an application. Which of the following is a god practice to protect classified information? cyber. **Physical SecurityAt which Cyberspace Protection Condition (CPCON) is the priority focus on critical functions only? Which of the following true-statement. *Identity ManagementWhat is the best way to protect your Common Access Card (CAC) or Personal Identity Verification (PIV) card? **Identity managementWhich of the following is an example of a strong password? 2. classified-document. DOD Cyber Awareness 2021 Knowledge Check Appropriate clearance; signed and approved non-disclosure agreement; and need-to-know. -Darryl is managing a project that requires access to classified information. WebClassified information that should be unclassified and is downgraded. Which of the following is a reportable insider threat activity? **Use of GFEWhen can you check personal e-mail on your Government-furnished equipment (GFE)? Which of the following practices may reduce your appeal as a target for adversaries seeking to exploit you insider status?-Remove your security badge after leaving your controlled area or office building. Use a common password for all your system and application logons. **Social NetworkingWhen may you be subject to criminal, disciplinary, and/or administrative action due to online misconduct? He has the appropriate clearance and a signed approved non-disclosure agreement. 0000001509 00000 n Use online sites to confirm or expose potential hoaxes, social engineering that is targeted at individuals, groups or organizations, Which of the following is a concern when using your government-issued laptop in public. \text { (more than 80\% concentration) } & \text { France } & \text { France } & \text { England } & \text { U.S. } \\ Which of the following terms refers to someone who harms national security through authorized access to information system? He has the appropriate clearance and a signed approved non-disclosure agreement. A user writes down details from a report stored on a classified system Sensitive Information: Protecting CUI . False Which of the following is NOT sensitive information? Only persons with appropriate clearance, a non-disclosure agreement, and need-to-know can access classified data. **TravelWhat security risk does a public Wi-Fi connection pose? Classified information is that which a government or agency deems sensitive enough to national security that access to it must be controlled and restricted. Unusual interest in classified information. Data Classification read opinions from other customers, and identify which producers have the best prices. In setting up your personal social networking service account, what email address should you use? 0000008555 00000 n A person who does not have the required clearance or assess caveats comes into possession of SCI in any manner. When having a conversation involving SCI, what must you do before verbally discussing things aloud? How dotraditional orientations contrast withchange? Only persons with appropriate clearance, a non-disclosure agreement, and need-to-know can access classified data. Users must adhere to the rules of behavior defined in applicable Systems Security Plans, DOL and agency guidance. He has the appropriate clearance and a signed, approved non-disclosure agreement. An unsecured IoT device can become an attack vector to any other device on your home network, including your Government laptop.