Annual DoD Cyber Awareness
Challenge Exam. Questions with
Correct Verified Answers 2025-2026.
Graded A
"Spillage" occurs when - ANSPersonal information is inadvertently posted
at a website
A coworker has left an unknown CD on your desk. What should you do? -
ANSPut the CD in the trash
A medium secure password has at least 15 characters and one of the
following. - ANSSpecial character
ActiveX is a type of this? - ANSMobile code
All https sites are legitimate and there is no risk to entering your personal
info online. - ANSFALSE
An individual who has attempted to access sensitive information without
need-to-know and has made unusual requests for sensitive information is
displaying indicators of what? - ANSPotential Insider Threat
1
, Bob, a coworker, has been going through a divorce, has financial difficulties
and is displaying hostile behavior. How many potential insider threat
indicators is Bob displaying? - ANS3
Classified Information can only be accessed by individuals with - ANSAll of
the above
Classified Information is - ANSAssigned a classification level by a
supervisor
DoD employees are prohibited from using a DoD CAC in card-reader-
enabled public device - ANSTRUE
How are Trojan horses, worms, and malicious scripts spread? - ANSBy
email attachments
How can you guard yourself against Identity theft? - ANSAll of the above
How should you securely transport company information on a removable
media? - ANSEncrypt the removable media
If authorized, what can be done on a work computer? - ANSCheck
personal email
If classified information were released, which classification level would
result in "Exceptionally grave damage to national security"? - ANSTop
Secret
2
Challenge Exam. Questions with
Correct Verified Answers 2025-2026.
Graded A
"Spillage" occurs when - ANSPersonal information is inadvertently posted
at a website
A coworker has left an unknown CD on your desk. What should you do? -
ANSPut the CD in the trash
A medium secure password has at least 15 characters and one of the
following. - ANSSpecial character
ActiveX is a type of this? - ANSMobile code
All https sites are legitimate and there is no risk to entering your personal
info online. - ANSFALSE
An individual who has attempted to access sensitive information without
need-to-know and has made unusual requests for sensitive information is
displaying indicators of what? - ANSPotential Insider Threat
1
, Bob, a coworker, has been going through a divorce, has financial difficulties
and is displaying hostile behavior. How many potential insider threat
indicators is Bob displaying? - ANS3
Classified Information can only be accessed by individuals with - ANSAll of
the above
Classified Information is - ANSAssigned a classification level by a
supervisor
DoD employees are prohibited from using a DoD CAC in card-reader-
enabled public device - ANSTRUE
How are Trojan horses, worms, and malicious scripts spread? - ANSBy
email attachments
How can you guard yourself against Identity theft? - ANSAll of the above
How should you securely transport company information on a removable
media? - ANSEncrypt the removable media
If authorized, what can be done on a work computer? - ANSCheck
personal email
If classified information were released, which classification level would
result in "Exceptionally grave damage to national security"? - ANSTop
Secret
2
