DOD CYBER AWARENESS CHALLENGE
2025 KNOWLEDGE CHECK EXAM
QUESTIONS AND ANSWERS. VERIFIED
2026.
Which of the following is true of compressed URLs (e.g., TinyURL, goo.gl)? - ANS They may be
used to mask malicious intent
What is a best practice for creating user accounts for your home computer? - ANS Create
separate accounts for each user and have each user create their own password.
Which of the following is a best practice to protect your identity? - ANS Ask how information
will be used before giving it out. (Correct)
Ref: Cyber Awareness Challenge 2025 / Identity Protection
John receives an e-mail about a potential shutdown of a major social service unless a petition
receives enough signatures. Which of the following actions should John NOT take with the e-
mail? - ANS Forward it (Correct)
Ref: Cyber Awareness Challenge 2025 / Phishing
1 @COPYRIGHT 2025/2026 ALLRIGHTS RESERVED.
, Which of the following is an appropriate use of government e-mail? - ANS Using a digital
signature when sending hyperlinks
Steve occasionally runs errands during virtual meetings. He joins the meetings using his
approved government device. Does this pose a security concern? - ANS Yes. Eavesdroppers
may be listening to Steve's conversation
How can you prevent viruses and malicious code? - ANS Scan all e-mail attachments (Correct)
Ref: Cyber Awareness Challenge 2025 / Protecting Against Malicious Code
Matt is a government employee who needs to share a document containing source selection
data with his supervisor. Which of the following describes the most appropriate way for Matt to
do this? - ANS Encrypt it and send it via digitally signed Government e-mail. (Correct)
Ref: Cyber Awareness Challenge 2025 / Protecting PII/PHI
You receive an e-mail with a link to run an anti-virus scan. Your IT department has not sent links
like this in the past. The e-mail is not digitally signed. What action should you take? -
ANS Report the e-mail to your security POC or help desk. (Correct)
Ref: Cyber Awareness Challenge 2025 / Phishing
Which of the following is a way to protect classified data? - ANS Store it in a GSA-approved
container
How can you protect yourself from identity theft? - ANS Review your credit report annually
2 @COPYRIGHT 2025/2026 ALLRIGHTS RESERVED.
2025 KNOWLEDGE CHECK EXAM
QUESTIONS AND ANSWERS. VERIFIED
2026.
Which of the following is true of compressed URLs (e.g., TinyURL, goo.gl)? - ANS They may be
used to mask malicious intent
What is a best practice for creating user accounts for your home computer? - ANS Create
separate accounts for each user and have each user create their own password.
Which of the following is a best practice to protect your identity? - ANS Ask how information
will be used before giving it out. (Correct)
Ref: Cyber Awareness Challenge 2025 / Identity Protection
John receives an e-mail about a potential shutdown of a major social service unless a petition
receives enough signatures. Which of the following actions should John NOT take with the e-
mail? - ANS Forward it (Correct)
Ref: Cyber Awareness Challenge 2025 / Phishing
1 @COPYRIGHT 2025/2026 ALLRIGHTS RESERVED.
, Which of the following is an appropriate use of government e-mail? - ANS Using a digital
signature when sending hyperlinks
Steve occasionally runs errands during virtual meetings. He joins the meetings using his
approved government device. Does this pose a security concern? - ANS Yes. Eavesdroppers
may be listening to Steve's conversation
How can you prevent viruses and malicious code? - ANS Scan all e-mail attachments (Correct)
Ref: Cyber Awareness Challenge 2025 / Protecting Against Malicious Code
Matt is a government employee who needs to share a document containing source selection
data with his supervisor. Which of the following describes the most appropriate way for Matt to
do this? - ANS Encrypt it and send it via digitally signed Government e-mail. (Correct)
Ref: Cyber Awareness Challenge 2025 / Protecting PII/PHI
You receive an e-mail with a link to run an anti-virus scan. Your IT department has not sent links
like this in the past. The e-mail is not digitally signed. What action should you take? -
ANS Report the e-mail to your security POC or help desk. (Correct)
Ref: Cyber Awareness Challenge 2025 / Phishing
Which of the following is a way to protect classified data? - ANS Store it in a GSA-approved
container
How can you protect yourself from identity theft? - ANS Review your credit report annually
2 @COPYRIGHT 2025/2026 ALLRIGHTS RESERVED.
