Department of Defense (DoD) Cyber
Awareness Challenge 2026 (1 hr)
Based on the description provided, how many insider threat indicators are present?
John frequently comes to work appearing to be hungover. While his access to classified
information is consistent with his clearance eligibility and need-to-know, his handling of
the information does not protect it from other without eligibility and a need-to-know in
accordance with security guidelines. Several coworkers have observed John bringing a
call phone into classified areas where devices are prohibited. - Answer--3+
Consider this social media post. Are there any security concerns in it? "Having a great
time at the beach with the fam! So sad to be going home in a couple of days" -
Answer--No. This is a personal post that in unrelated to Government business
Consider this social media post. Are there any security concerns in it? "I'm hosting a
family reunion for my mom's side of the family, the Smiths. Come by my place at 1234
Mockingbird Lane on the 8th...and grab a slice of birthday cake for me while you're
there!" - Answer--Yes. It contains several items of personally identifiable information
(PII), including the mother's maiden name, home address, and birthday.
Devon receives an e-mail on her Unclassified Computer. The e-mail has an unmarked
attachment that contains what she recognizes as classified information. What should
Devon do? - Answer--Immediately notify her security POC
Ed has authorized access to his agency's Sensitive Compartmented Information Facility
(SCIF) and plans to work on a project there today. Which of the following can't he take
into the SCIF? - Answer--All of these
Evelyn is a system administrator at her agency. As part of her duties, she occasionally
uses a thumb drive to perform necessary system tasks, as outlined in her agency's
procedures. The thumb drive is provided by the Government for this purpose. Is this an
, appropriate use of removable media? - Answer--Yes. Only use removable media when
operationally necessary. Government-owned, and approved in accordance with policy.
How can you identify the separation of Sensitive Compartmented Information (SCI)
classified material from collateral classified material? - Answer--Markings that identify
the compartment with which it is affiliated
How can you protect your home computer? - Answer--Turn on spyware protection
How do Insider Threat Programs defend against insider threats? - Answer--Intervening
early to help individuals with issues
How does an insider threat harm national security? - Answer--Exploiting their trusted
status and authorized access to government resources
In what level of system can you use a SIPRNet public key infrastructure (PKI) token? -
Answer--SIPRNet
Martha supervises a government unit. To improve morale, she frequently e-mails
inspirational stories and photos with inspirational quotes on them to her team. Is this an
appropriate use of government e-mail? - Answer--No. These email's generate
unnecessary e-mail traffic.
Oliver users his phone to look up information about a jacket he might want to purchase.
Later, he notices ads for the jacket appearing on the websites that he views using his
laptop. Why would he see this happen? - Answer--Oliver's apps and devices collect and
share information about him.
On a government-owned mobile device, what should you do before installing an
application? - Answer--Ensure that it is an approved and authorized application
Oscar is on official Government travel with Government-issued laptop. While at the
airport, he uses the laptop to work on a report containing controlled unclassified
information (CUI). For connectivity, he uses his personal phone as a mobile hotspot. Are
there any security concerns here? - Answer--Yes. He should be vigilant for "shoulder
surfing," where others may be able to view the information on his screen.
Paula is compiling statistics on healthcare provided to Service members over the last
fiscal year. Some of her source data includes Protected Health Information (PHI). How
Awareness Challenge 2026 (1 hr)
Based on the description provided, how many insider threat indicators are present?
John frequently comes to work appearing to be hungover. While his access to classified
information is consistent with his clearance eligibility and need-to-know, his handling of
the information does not protect it from other without eligibility and a need-to-know in
accordance with security guidelines. Several coworkers have observed John bringing a
call phone into classified areas where devices are prohibited. - Answer--3+
Consider this social media post. Are there any security concerns in it? "Having a great
time at the beach with the fam! So sad to be going home in a couple of days" -
Answer--No. This is a personal post that in unrelated to Government business
Consider this social media post. Are there any security concerns in it? "I'm hosting a
family reunion for my mom's side of the family, the Smiths. Come by my place at 1234
Mockingbird Lane on the 8th...and grab a slice of birthday cake for me while you're
there!" - Answer--Yes. It contains several items of personally identifiable information
(PII), including the mother's maiden name, home address, and birthday.
Devon receives an e-mail on her Unclassified Computer. The e-mail has an unmarked
attachment that contains what she recognizes as classified information. What should
Devon do? - Answer--Immediately notify her security POC
Ed has authorized access to his agency's Sensitive Compartmented Information Facility
(SCIF) and plans to work on a project there today. Which of the following can't he take
into the SCIF? - Answer--All of these
Evelyn is a system administrator at her agency. As part of her duties, she occasionally
uses a thumb drive to perform necessary system tasks, as outlined in her agency's
procedures. The thumb drive is provided by the Government for this purpose. Is this an
, appropriate use of removable media? - Answer--Yes. Only use removable media when
operationally necessary. Government-owned, and approved in accordance with policy.
How can you identify the separation of Sensitive Compartmented Information (SCI)
classified material from collateral classified material? - Answer--Markings that identify
the compartment with which it is affiliated
How can you protect your home computer? - Answer--Turn on spyware protection
How do Insider Threat Programs defend against insider threats? - Answer--Intervening
early to help individuals with issues
How does an insider threat harm national security? - Answer--Exploiting their trusted
status and authorized access to government resources
In what level of system can you use a SIPRNet public key infrastructure (PKI) token? -
Answer--SIPRNet
Martha supervises a government unit. To improve morale, she frequently e-mails
inspirational stories and photos with inspirational quotes on them to her team. Is this an
appropriate use of government e-mail? - Answer--No. These email's generate
unnecessary e-mail traffic.
Oliver users his phone to look up information about a jacket he might want to purchase.
Later, he notices ads for the jacket appearing on the websites that he views using his
laptop. Why would he see this happen? - Answer--Oliver's apps and devices collect and
share information about him.
On a government-owned mobile device, what should you do before installing an
application? - Answer--Ensure that it is an approved and authorized application
Oscar is on official Government travel with Government-issued laptop. While at the
airport, he uses the laptop to work on a report containing controlled unclassified
information (CUI). For connectivity, he uses his personal phone as a mobile hotspot. Are
there any security concerns here? - Answer--Yes. He should be vigilant for "shoulder
surfing," where others may be able to view the information on his screen.
Paula is compiling statistics on healthcare provided to Service members over the last
fiscal year. Some of her source data includes Protected Health Information (PHI). How
