Lauren discovered that her coworker, Andrea, was providing Secret information to a journalist. She reports the potential unauthorized disclosure to her Security Manager. What sanctions could Lauren be subjected to?
None; Lauren reported the issue.
Jonathan is writing a speech for a local group. He sends his speech through his Security Manager and the Defense Office of Prepublication and Security Review (DOPSR). The speech is also reviewed by the Public Affairs Office (PAO). What information is the PAO looking for in their review? Select all that apply.
– Information that could discredit the military or federal government
– Political views being portrayed
Ray, who works in an office accessible by uncleared personnel, has access to Top Secret information. For his current project, he has to work with a printed copy of the information. At the end of his duty day, Ray locks the document containing Top Secret information in his desk with a cover sheet indicating that it is classified. What type of unauthorized disclosure has occurred?
Improper safeguarding
Sheryl just transferred into the DOD from another Federal agency outside the DOD. One day, Sheryl’s former coworker, Angela, needed to message her Controlled Unclassified Information (CUI) content about an old project they had worked on together at the previous agency. Angela is unable to send the message via encrypted email. Angela and Sheryl have communicated over multiple social media apps in the past mostly about their families. Angela picks the Signal App and communicates the CUI since it is the most secure of all the apps. In this instance, which misconceptions about unauthorized disclosure might Angela believe? Select all that apply.
– Signal is an approved government app for communicating CUI.
– It is okay to discuss Unclassified DOD information on a “secure” messaging app
Lily, who works remotely from home, is working on a project that requires her to review Controlled Unclassified Information (CUI). She needs to send project files containing CUI to her manager for a review. How can she safely transmit CUI to her manager? Select all that apply.
– Send it using DOD SAFE
– Send it as an encrypted email via her government email
Corinne works in a continuously monitored DOD facility. She is working with printed Controlled Unclassified Information (CUI) for a project. At the end of her work day, she leaves the CUI in her unlocked desk drawer. Is this an approved storage method for CUI?
Yes; since Corinne works in a continuously monitored facility, she can store CUI in her unlocked desk.
Natalie works for a cleared DOD contractor. She discovers that she is the victim of a phishing scam that blackmailed her into giving money and exposing Top Secret information. She immediately notifies her Security Officer of the potential unauthorized disclosure. What type of damage can this information cause?
Exceptionally grave damage
Jack, a DOD employee, is writing an op-ed piece about an article that contained declassified information regarding a communications system. In the piece, he references the declassified information to discredit the article. Does Jack’s op-ed piece need to undergo a prepublication review?
Yes; since it contains DOD information, it needs to undergo a prepublication review.
Chris is a manager for an office responsible for Top Secret information. He regularly schedules reviews of records of permanent historical value to determine if any pieces of information should be declassified. He determines that a record should be declassified. What type of declassification has occurred?
Systematic declassification
Teresa is tasked with creating a derivative report for an upcoming briefing. To create the report, she needs to review and incorporate information from authorized source documents. She paraphrases information from both Confidential and Secret source documents. She properly marks all portions of the report with authorized portion markings. What other markings are required to ensure she protects this report from unauthorized disclosure (UD)? Select all that apply.
– Highest classification marking in the banner lines
– “Derived from” information in the Classification Authority Block
Bradley, a DOD employee, is working on a project that requires eligibility and access to Top Secret information. While working on the project, he learns about the lethality of a new weapons system and believes it is a substantial risk to the public. What can he do to notify the public of the potential danger, while avoiding unauthorized disclosure?
Report the issue to the DOD Inspector General through the whistleblower hotline.
Kelsey, a DOD employee, has a government phone. Sometimes, she accesses and browses social media apps on it. Which app is Kelsey prohibited from using on her government device?
TikTok
Tracy is in possession of printed Top Secret information for a project she is working on for the next two months. How can she store the information when she is not working with it, or at the end of her work day? Select all that apply.
– Use a General Services Administration (GSA)-approved security container
– Store in an approved open storage area
– Use a GSA-approved vault
Beth is in possession of printed Secret information for a briefing she is planning. She does not work in an open storage facility. What does she need to do to protect the Secret information from unauthorized disclosure while walking from her office to the briefing room?
Use a standard form SF 704 cover sheet to protect the information
Jude is an accountant for the DOD. He oversees the budget for multiple Top Secret projects, and he notices that an employee working on one of the projects is billing too many hours based on reports provided. He decides to report the information. What does he need to do to ensure that he avoids unauthorized disclosure? Select all that apply.
– Report the right information to the right people
– Protect national security information by following required procedures.
Darren is an employee of a cleared DOD contractor. He regularly works with Secret information. His Unclassified work computer, on the Non-Classified Internet Protocol Router (NIPR), sits right next to his classified work computer, on the SECRET Internet Protocol Router (SIPR), and he unintentionally typed and saved Secret information in a document on the NIPR computer thinking he was typing on the SIPR computer. What type of damage can occur as a result of this unauthorized disclosure?
Serious damage
Stanley, a DOD employee, regularly plays poker with several local journalists. During their most recent poker game, Stanley hears the journalists talking about a story that they are working on together regarding a Top Secret DOD program. How should Stanley react in this case? Select all that apply.
– Report the incident to his Security Manager.
– Follow Component-specific guidance.
Peter, an employee at a cleared DOD contractor, is an avid user of social media. He posts at least two times a day. Review Peter’s drafts and select all of those which are authorized to post.
– Loving the weather on my vacation in California. Beach week for me and the fam.
– The coffee in my new office tastes amazing! Can you believe they got us five different flavors of creamers?
Teresa is tasked with creating a derivative report for an upcoming briefing. To create the report, she needs to review and incorporate information from authorized source documents. She paraphrases information from both Confidential and Secret source documents. She properly marks all portions of the report with authorized portion markings. What other markings are required to ensure she protects this report from unauthorized disclosure (UD)? Select all that apply.
– “Derived from” information in the Classification Authority Block
– Highest classification marking in the banner lines
Sally is in possession of a printed copy of Controlled Unclassified Information (CUI) that she was authorized to use for a specific program. She just found out the information was recently decontrolled. She knows that this information is not authorized for public release, but she does not need to use her copy of the information any longer. What should Sally do?
Destroy her copy of the information in accordance with regulatory guidance.
Justin, a former member of the military, is in the process of looking for a new job. He writes a resume that includes all the duties he fulfilled in his time with the military. Does Justin need to send his resume to Defense Office of Prepublication and Security Review (DOPSR) for review?
No; DOPSR does not review resumes, but Justin should send his resume to his last command for review.
Sara is in possession of Secret information for a project. She is approached by Samantha, a coworker, who requires access to the Secret information Sara possesses for a different project. She asks Sara to share the Secret information with her. What does Samantha need to receive the information from Sara? Select all that apply.
– Favorable determination of eligibility at the Secret level
– A need-to-know
Daniel regularly works with Secret information and is working with three coworkers to complete a project using the Secret information he has access to. One day, he sees that one of the coworkers has locked a printed copy of the Secret information in his desk drawer in an area that is not approved for open storage. What should Daniel do as soon as he discovers the information has been improperly safeguarded? Select all that apply.
– Safeguard
– Report
Jonathan is writing a speech for a local group. He sends his speech through his Security Manager and the Defense Office of Prepublication and Security Review (DOPSR). The speech is also reviewed by the Public Affairs Office (PAO). What information is the PAO looking for in their review? Select all that apply.
– Promotion of offensive views
– Political views being portrayed
– Information that could discredit the military or federal government
Gil works for a DOD agency. He created a document that was originally designated as Controlled Unclassified Information (CUI). Recently, the information was determined to no longer require safeguarding. What should Gil do with this document?
Ensure the document is decontrolled in accordance with DOD regulatory guidance
Adam works with Top Secret information. He regularly collaborates with a foreign partner on specific projects and wants to know if he can disseminate the information to that partner. Where can he look to determine whether this information can be disseminated? Select all that apply.
– On the SF 703 cover sheet
– In the banner line markings
Cy is an employee of a cleared DOD contractor who works with Controlled Unclassified Information (CUI). He regularly posts about the work he does on his social media accounts. One day, Cy posts about new automated entry controls at the base where he works. What are the potential consequences of Cy posting this CUI on his social media accounts? Select all that apply.
– Damage to DOD assets
– Significantly reduce or negatively impact DOD mission capabilities
Sydney works for a cleared defense contractor and has access to classified information. She goes on a podcast to discuss her job and references some of the classified information with which she works. What type of unauthorized disclosure has occurred?
Public domain
Joseph has a group chat with his coworkers on a secure messaging app. Occasionally, he shares what he believes are the Unclassified aspects of information about the classified projects he’s working on with his coworkers via the messaging app. Confident that it is all Unclassified, he posts it without reviewing the material with a subject matter expert. Does this count as unauthorized disclosure? Why or why not?
Yes; DOD information not cleared for public release should not be discussed on messaging apps not controlled by the DOD.
John is working with Top Secret information for a project and wants to confirm that the document he created is properly marked before he sends it for higher level review. He pulled most of the information from properly marked source documents, but some came from his own knowledge. Therefore, he also consulted the Security Classification Guide (SCG) for the project. What must he confirm is in his new document so that it meets marking requirements derived by using the SCG and the properly marked source documents? Select all that apply.
– Classification markings in the banner lines
– The Classification Authority Block (CAB)
– Portion markings throughout the document
Susan, a manager for the DOD, is approached by a journalist requesting information about a new security protocol that impacts military bases. How should she handle this request? Select all that apply.
– Follow Component-specific guidance.
– Report the incident to her Security Manager.
Cheryl is planning to hold a press conference about a recent leak that impacted the DOD. Who does she need to work with to ensure information is presented appropriately and won’t negatively impact the DOD?
Public Affairs Office (PAO)
Bradley, a DOD employee, is working on a project that requires eligibility and access to Top Secret information. While working on the project, he learns about the lethality of a new weapons system and believes it is a substantial risk to the public. What can he do to notify the public of the potential danger, while avoiding unauthorized disclosure?
Report the issue to the DOD Inspector General through the whistleblower hotline.
Dirk, a security analyst for the National Security Agency (NSA), was found to have provided information about a Top Secret surveillance system to a journalist, believing the information was dangerous to national security. What types of discipline could he be subject to? Select all that apply.
– Civil sanctions
– Criminal sanctions
– Administrative sanctions
– Forfeiture of pay
Beau is in possession of Secret information. He is working on a project with Ellie, who has the appropriate eligibility and a need-to-know for the information Beau possesses. Does Ellie meet all the requirements to receive this information? Why or why not?
No, Ellie must sign the appropriate non-disclosure agreement (NDA) in addition to possessing eligibility and having a need-to-know.
Derek is creating a document that contains Controlled Unclassified Information (CUI). He includes the acronym CUI in the banner and has chosen not to include portion markings in his document. What else is required for this document to be properly marked in accordance with DOD regulatory guidance? Select all that apply.
– A properly marked Designation Indicator block
– CUI in the footer
Jean is writing a manuscript for a memoir about her time with the DOD now that she is retired. During her time with the DOD, she worked with a variety of classified, Controlled Unclassified, and Unclassified information. While writing the book, Jean replicates classified information that has been released into the public domain. After finishing the draft of her book, she sends it to her editor for review. Given this information, which categories of misconceptions about unauthorized disclosure might Jean have? Select all that apply.
– Non-Disclosure Agreements (NDAs)
– Public Domain
Waylon works for a cleared DOD contractor. He is working with printed Controlled Unclassified Information (CUI) in an office that does not have continuous monitoring. How can he ensure that he is protecting the CUI from unauthorized disclosure? Select all that apply.
– Maintain physical and visual control of the CUI
– Use a standard form SF 901 cover sheet when carrying it
Jerry is in possession of Controlled Unclassified Information (CUI) and works with members of a foreign government. He wants to know if the information he possesses can be disseminated to these foreign government officials. Where can he look to determine if the document has any dissemination controls?
In the Designation Indicator block
Jack, a DOD employee, is writing an op-ed piece about an article that contained declassified information regarding a communications system. In the piece, he references the declassified information to discredit the article. Does Jack’s op-ed piece need to undergo a prepublication review?
Yes; since it contains DOD information, it needs to undergo a prepublication review.
Darren is in possession of printed Confidential information for a project. Once he finishes the project, he needs to destroy the printed information. What method should he use to destroy the document?
Shred the document using equipment listed on an evaluated products list (EPL) issued by National Security Agency (NSA).
Maren was recently hired by the Public Affairs Office (PAO). She works to mitigate risk before information is released to the public. In what ways does Maren’s review with the PAO help mitigate risk? Select all that apply.
– Ensure information supports agency goals
– Promote public trust in the agency
Mackenzie works for a cleared DOD contractor. She discovers that her boss, Michael, is billing the DOD for additional hours that were not worked. She shares this information with a journalist under the condition that she is anonymous. She emails the journalist reports that contain Controlled Unclassified Information (CUI) to demonstrate the extent of the fraud. Is Mackenzie protected under the Whistleblower Protection Enforcement Act (WPEA)? Why or why not?
No; Mackenzie should have reported the appropriate information to authorities, rather than a journalist.
Alessandra is a Security Officer for a DOD agency. She receives a report of potential unauthorized disclosure from an employee in her location. Following the reporting steps, what should happen next?
Initiate an inquiry
Aaron, a DOD employee, is approached by a journalist while leaving the office one day. The journalist asks Aaron about several items of Unclassified information that have not been made public. What must he do in this case?
Report the incident to his Security Manager.
Bruce works for an office within the DOD, and he wants to set up an official social media account for his office. What does the official social media account need to provide to be approved? Select all that apply.
– A specific communications objective that is not being met otherwise
– Timely and accurate information to the public and the media
Lucas works from home for a cleared defense contractor. He is traveling to visit a friend and is planning to work remotely from his friend’s house. Rather than bringing his work laptop with him, he decides it is easier to email several work-related documents to his own personal email account so that he can access them from his friend’s personal computer. One of the documents Lucas emails to his personal email account and then accesses to complete a task for work on his friend’s personal computer is Controlled Unclassified Information. What type of unauthorized disclosure has occurred?
Spillage
Stanley works for a cleared defense contractor. He posted information on social media about a project he is working on that included Controlled Unclassified Information (CUI). What penalties could be imposed on Stanley? Select all that apply.
– Losing his job
– Losing security clearance
– Jail time
– Fines
