Introduction to Information Security Exam

What are the authorized places for storing classified information? Select all that apply. -In information technology systems authorized for classified information -In a GSA-approved security container -In an authorized individual's head or hands If an individual fails to secure the Sensitive Compartmented Information Facility (SCIF) at the end of the day and, subsequently, unescorted cleaning personnel access the SCIF and see classified information, what type of security incident is this? Security Violation The unauthorized disclosure of Top Secret information could reasonably be expected to cause _______________ to our national security. Exceptionally grave damage If an individual inserts a thumb drive containing classified information on a computer in the office that is not part of the classified information system, what type of security incident is this? Spillage Whose guidelines should you follow for the destruction of storage media as thumb drives, zip drives, and computers? National Security Agency What is the first step an Original Classification Authority (OCA) must take when originally classifying information? Determine if the information is official government information. ____________________occurs in some circumstances when information that is individually unclassified, or classified at a lower level, may be classified, or classified at a higher level, only if the combined information reveals an additional association or relationship. Compilation When information, in the interest of national security, no longer requires protection at any level, it should be: Declassified When classified information is in an authorized individual's hands, why should the individual use a classified document cover sheet? Select all that apply. -To prevent inadvertent viewing of classified information by unauthorized personnel -To alert holders to the presence of classified information What information do security classification guides (SCG) provide about systems, plans, programs, projects, or missions? All of the above What are the steps of the information security program lifecycle? Classification, safeguarding, dissemination, declassification and destruction What type of declassification process is a way for members of the public to request the review of specific classified information? Mandatory Declassification Review