permitted uses of government furnished equipment

what should be your response be? Thats the only way we can improve. You check your bank statement and see several debits you did not authorize. **Mobile Devices Which of the following helps protect data on your personal mobile devices? Do not access website links, buttons, or graphics in e-mail. Social Networking: Select all sections of the profile that contain an issue. Controlled Unclassified Information: (Victim) Select the information on the data sheet that is personally identifiable information (PII) but not protected health information (PHI). To: All Oregon/Washington Bureau of Land Management Employees. You have accepted additional cookies. Quizzma is a free online database of educational quizzes and test answers. How can you protect yourself on social networking sites? What action is recommended when somebody calls you to inquire about your work environment or specific account information? Secure it to the same level as Government-issued systems. Website Use (Incident): Select all security issues. *Sensitive Compartmented Information When is it appropriate to have your security badge visible? John submits CUI to his organizations security office to transmit it on his behalf. The email has an attachment whose name contains the word secret. How many potential insider threat indicators does this employee display? **Website Use Which of the following statements is true of cookies? !vk\I* 2ziCB&9pFX[SdW'9$v 0P0 E 572 /P)FP#?:6A,$yB$jut42>]|5Q:|%C}F|::r=5GrI!y+fO)MJ)a*'os}OzAPTTHHfu When unclassified data is aggregated, its classification level may rise. Not the websites URL. In addition to avoiding the temptation of greed to betray his country, what should Alex do differently? If you are concerned your project falls in to one of these categories and are unsure if you should submit a full proposal for a competition please submit a Contact DASA Form which will be checked by a member of our team. Controlled Unclassified Information: (Victim) Select the information on the data sheet that is protected health information (PHI). The site is available via registered access. It is permissible to release unclassified information to the public prior to being cleared. What type of attack might this be? What should you do if a reporter asks you about potentially classified information on the web? Is it permitted to share an unclassified draft document with a non-DoD professional discussion group? Government Furnished Resources (GFR) is personnel, most commonly Service Personnel on long-term loan or secondment. Ec-YBjAzR-~Q`0`=bA_NwMqD!sH{R- h+ Q ,?RK We wont pre-fund any expenditure, so interim payment claims mustnt include costs not yet incurred. A smartphone that transmits credit card payment information when held in proximity to a credit card reader. **Identity management Which of the following is NOT a best practice to preserve the authenticity of your identity? relates to reporting of gross mismanagement and/or abuse of authority. Use online sites to confirm or expose potential hoaxes, Follow instructions given only by verified personnel, Investigate the links actual destination using the preview feature, Determine if the software or service is authorized. 7500 Security Boulevard, Baltimore, MD 21244, Use of Government Furnished Equipment (GFE) During Foreign Travel, An official website of the United States government, Back to Information Security and Privacy Library. **Mobile Devices What should you do when going through an airport security checkpoint with a Government-issued mobile device? What should you do? Linda encrypts all of the sensitive data on her government-issued mobile devices. DASA recognises the value of your intellectual property (IP). What is the danger of using public Wi-Fi connections? Report the crime to local law enforcement. Which of the following should you do immediately? (Malicious Code) Which are examples of portable electronic devices (PEDs)? Ask the individual to see an identification badge. Which of the following may help to prevent spillage? They can be part of a distributed denial-of-service (DDoS) attack. Do not use any personally owned/non-organizational removable media on your organizations systems. Exception. What should you do after you have ended a call from a reporter asking you to confirm potentially classified info found on the web? Which is NOT a way to protect removable media? What should you do? SP4 0JQ, Urgent DASA enquiries - Telephone +44 (0)1980 950000 option 3 (open 09:00am 12:00pm Monday-Friday), In the section 'What DASA does not fund' the 'Innovation Outline' has been replaced with the 'Contact DASA Form'. Calculate the margin of safety in terms of sales revenue. Contracting officers shall provide property to contractors only when it is clearly demonstrated: That the overall benefit to the acquisition significantly outweighs the increased cost of administration, including ultimate property disposal; That providing the property does not substantially increase the Governments assumption of risk; and. Correct. Always check to make sure you are using the correct network for the level of data. If aggregated, the information could become classified. The MOD commercial toolkit is accessible on the MOD internet site and contains details on MOD contract conditions. Spillage: Which of the following is a good practice to prevent spillage? Which Cyber Protection Condition (CPCON) establishes a protection priority focus on critical functions only? No federal endorsement of sponsors intended. For Government-owned devices, use approved and authorized applications only. Which of the following is an example of malicious code? not correct. Store classified data appropriately in a GSA-approved vault/container. How many potential insider threat indicators does this employee display? b. Which of the following is an example of two-factor authentication? HTKo1[05R4I)RJU=,erh"swJ-k{fo^f^``rf@g]8/u W} @;%m[=jo#UzAk/^)-weH+fX*miP\h6x~0%Agmzw@ 8p2=x"?|ON(K\4n#ikux>mKN|7+>e{yd( 3*aH l+m,t~$ =gP}HN)/xO?y^m\.G!$;\tOE :Q **Insider Threat Based on the description that follows, how many potential insider threat indicator(s) are displayed? Which of the following is true about telework? Note any identifying information and the websites Uniform Resource Locator (URL). Where any deliverable is subject to third party intellectual property rights (IPR) you must also describe this in your proposal. Mobile Devices (Incident): When is it okay to charge a personal mobile device using government-furnished equipment (GFE)? Classified material must be appropriately marked. ~All documents should be appropriately marked, regardless of format, sensitivity, or classification. What is an indication that malicious code is running on your system? Mark SCI documents appropriately and use an approved SCI fax machine. Classified information that should be unclassified and is downgraded. Personally-owned external monitors may be connected to DoD-issued computers in telework environments via VGA or DVI, but not via USB. Research the source to evaluate its credibility and reliability. Classified information that should be unclassified and is downgraded. Use the government email system so you can encrypt the information and open the email on your government issued laptop. (Physical Security) which Cyberspace Protection Condition (CPCON) establishes a protection priority focus on critical and essential functions only? **Physical Security What is a good practice for physical security? sole traders) and Public Sector Research Establishments (PSREs). Which of the following is a best practice to protect information about you and your organization on social networking sites and applications? (Sensitive Information) What must the dissemination of information regarding intelligence sources, methods, or activities follow? In addition to the guidance on this page you must refer to the relevant competition document for the competition specific terms and conditions, including the specific contract. A Coworker has asked if you want to download a programmers game to play at work. a. Which of the following is NOT a type of malicious code? Based on the description that follows, how many potential insider threat indicator(s) are displayed? Describe the major components of the strategic management process. (Malicious Code) A coworker has asked if you want to download a programmers game to play at work. What certificates are contained on the Common Access Card (CAC)? Depending on the specifics of any proposed change of use, including any building work . c. Do not access website links in e-mail messages. a. Classified material must be appropriately marked. When considering Government contracts, there are two approaches that are used for providing the equipment necessary to execute the contract. _I`vm `V k\Up k[t]I*+oDa,~v0j:g5wVoLQ:@n-62.Sm-"z.Z~-C-K8Yt_@}aVa{]ppwB6#fR4,r\+ l-sZO15 This directive provides FSIS Federal and non-Federal employees (e.g., contractors) with instructions regarding the acceptable and unacceptable use of FSIS government-furnished equipment (GFE) (e.g., telecommunications resources, computers, laptops, and smartphones) and Government-issued e-mail addresses when conducting government business both 1068 0 obj <> endobj You must have your organizations permission to telework. Dont include personal or financial information like your National Insurance number or credit card details. GFE consists of: b. Unusual interest in classified information. Which is NOT a method of protecting classified data? where there would be significant financial or quality benefits to the work as a result of using GFA). Limited Rights Versions contain both Foreground Information and Background Information, the latter being information not generated under the work we contract with you e.g. The following guidance will help you to understand what these terms and conditions mean. **Home Computer Security How can you protect your information when using wireless technology? Which of the following is NOT Protected Health Information (PHI)? used in telework environments in accordance with reference (b). Government furnished property can be designated as either equipment or material. Only expressly authorized government-owned PEDs. Attachments contained in a digitally signed email from someone known. It does not require markings or distribution controls. Store it in a locked desk drawer after working hours. Your password and the second commonly includes a text with a code sent to your phone. It includes a threat of dire circumstances. (social networking) Which of the following is a security best practice when using social networking sites? NOT permitted uses of government-furnished equip (GFE) -viewing or downloading pornography -conducting a private gambling online -using unauthorized software -illegal downloading copyrighted materials -making unauthorized configuration changes When is it okay to charge a personal mobile device using government-furnished equipment (GFE) a. Only use Government-furnished or Government-approved equipment to process CUI, including PII. The long-run aggregate supply curve (LRAS) curve is ______ with a real output level that _____, a) Upward sloping; varies positively with the price level *Controlled Unclassified Information Which of the following is NOT an example of CUI? Prevalence How should you protect a printed classified document when it is not in use? You are misusing a Government vehicle when you use it for your personal benefit as opposed to using it for the benefit of the Government. You many only transmit SCI via certified mail. Article Text. After you have returned home following the vacation. Coworker making consistent statements indicative of hostility or anger toward the United States and its policies. Which of the following is true about telework? Correct. **Removable Media in a SCIF What action should you take when using removable media in a Sensitive Compartmented Information Facility (SCIF)? What type of security is part of your responsibility and placed above all else?, If your wireless device is improperly configured someone could gain control of the device? Store it in a locked desk drawer after working hours. DASA reserves the right to disclose on a confidential basis any information it receives from you during the procurement process to any third party engaged by DASA for the specific purpose of evaluating or assisting DASA in the evaluation of your proposal. What is the best example of Protected Health Information (PHI)? Check in location via GPS: Off. How do you respond? What is the response to an incident such as opening an uncontrolled DVD on a computer in a SCIF. **Insider Threat What function do Insider Threat Programs aim to fulfill? What action should you take? We also use cookies set by other sites to help us deliver content from their services. Looking for https in the URL. (Spillage) What level of damage can the unauthorized disclosure of information classified as confidential reasonably be expected to cause? Which of the following is a practice that helps to protect you from identity theft? How many insider threat indicators does Alex demonstrate? Decline to let the person in and redirect her to security. Which of the following is true of Unclassified information? Which of the following is NOT true of traveling overseas with a mobile phone? Leaked classified or controlled information is still classified/controlled even if it has already been compromised. Which of the following is an example of malicious code? GFAE: Government-Furnished Aeronautical Equipment. Verify the identity of all individuals.??? <> b) Upward sloping; vary negatively with the price level Tell us about it through the REPORT button at the bottom of the page. **Social Networking When is the safest time to post details of your vacation activities on your social networking profile? Permitted Uses of Government-Furnished Equipment (GFE). !qB I }h\;3. 6ggq~|:s]kZ]G QXW+"?REz0@z:Zg3>xCi3/Jr[/e,jVIW~7"{?Q3 Beware of sudden flashing pop-ups that warn your computer is infected with a virus. This bag contains your government-issued laptop. The Government relies on and requires its contractors to provide effective and efficient stewardship of the . There are many travel tips for mobile computing. information generated under previous private venture funding. Which of the following may help to prevent spillage? ~All documents should be appropriately marked, regardless of format, sensitivity, or classification. Correct. Appropriate clearance; signed and approved non-disclosure agreement; and need-to-know. Immediately notify your security point of contact. What is the basis for the handling and storage of classified data? **Social Networking Which piece if information is safest to include on your social media profile? If you participate in or condone it at any time. HHS published the HHS Memorandum: the Use of Government Furnished Equipment during Foreign Travel. **Insider Threat Based on the description that follows, how many potential insider threat indicator(s) are displayed? Calculate the margin of safety in terms of the number of units. Appropriate confidentiality agreements will be put in place. \text{Retained Earnings}&&&\text{Credit}\\ Unusual interest in classified information. The guidance below will help you to understand who can apply for funding, the sort of projects the Defence and Security Accelerator (DASA) funds, and the terms and conditions of DASA contracts. Have your permissions from your organization, follow your organization guideline, use authorized equipment and software, employ cyber security best practice, perform telework in dedicated when home. In return, the funding Authority obtains a set of rights to use the delivered technical information and associated intellectual property for specified purposes. GU,}+ Follow procedures for transferring data to and from outside agency and non-government networks. Cyber Awareness Challenge 2022 Knowledge Check, DoD Mandatory Controlled Unclassified Informa, Headlight 4 Unit 4 p. 222,3 theme 3,story, Cyber Awareness Challenge 2023 (Incomplete). A coworker brings a personal electronic device into prohibited areas. Phishing can be an email with a hyperlink as bait. What should you do? A colleague often makes others uneasy with her persistent efforts to obtain information about classified project where she has no need-to-know, is vocal about her husband overspending on credit cards, and complains about anxiety and exhaustion. economics. Note That The Integers Should Be Type Cast To Doubles. Update now? **Social Networking Which of the following is a security best practice when using social networking sites? Photos of your pet Correct. How can you protect yourself from social engineering? CUI must be handled using safeguarding or dissemination controls. or Note the websites URL and report the situation to your security point of contact. Any additions will be mutually agreed with you before a contract is awarded. Which of the following may help to prevent inadvertent spillage? Report the suspicious behave in accordance with their organization's threat policy. No, you should only allow mobile code to run from your organization or your organizations trusted sites. It may prohibit the use of a virtual private network (VPN). He let his colleague know where he was going, and he was coming right back. On a NIPRNet system while using it for a PKI-required taskC. Physically assess that everyone within listening distance is cleared and has a need-to-know for the information being discussed. Hes on the clock after all! 1 0 obj Do not download it. (Spillage) Which type of information could reasonably be expected to cause serious damage to national security if disclosed without authorization? What action should you take? What type of social engineering targets senior officials? Dont allow other access or to piggyback into secure areas. Hold the conversation over e-mail or instant messenger to avoid being overheard. CUI may be stored on any password-protected system. Remove your security badge after leaving your controlled area or office building. What should you do? Share sensitive information only on official, secure websites. (Sensitive Information) Which of the following is NOT an example of sensitive information? *Sensitive Compartmented Information When should documents be marked within a Sensitive Compartmented Information Facility (SCIF). Ensure proper labeling by appropriately marking all classified material and, when required, sensitive material. Nothing. Unauthorized Disclosure of Classified Information for DoD, Security Awareness: Derivative Classification Answers, CITI Ethics, Responsible Conduct, RCR, Law, HTH And IRB Answers, Level 1 Antiterrorism Awareness Training Pretest And Post Test Answers, EVERFI Achieve Consumer Financial Education Answers, Security Pro: Chapter 3 (3.1.8) & 4.1 Security Policies Answers, CITI Module #3 Research in Public Elementary and Secondary Schools, Answers to CTS Unit 7 Lab 7-2: Protocols and Services SNMP, Google Analytics Individual Qualification Exam Answers, Everfi Module 4 Credit Scores Quiz Answers, Which Of The Following Is Not Considered A Potential Insider Threat Indicator. Which of the following is an example of two-factor authentication? Which of the following is NOT an example of CUI? Under the PHE, the federal government implemented a range of modifications and waivers impacting Medicare, Medicaid and private insurance requirements, as well as numerous other programs, to provide relief to healthcare . Which of the following should you NOT do if you find classified information on the internet? When using mobile computing devices, including laptops and cell phones, in public: Be careful of information visible on your mobile computing device; consider screen protection Maintain possession of laptop and other government-furnished equipment (GFE) at all times and be extra vigilant in protecting it Protect your mobile computing device Physical Security: (Incident #1): What should the employee do differently? endobj Then select Save. Examples are: Patient names, Social Security numbers, Drivers license numbers, insurance details, and birth dates. P2P (Peer-to-Peer) software can do the following except: Allow attackers physical access to network assets. Only use Government-approved equipment to process PII. Which of the following is NOT a best practice to protect data on your mobile computing device? Which of the following statements is true of cookies? Then select Submit. *Sensitive Compartmented Information Which of the following best describes the compromise of Sensitive Compartmented Information (SCI)? *Sensitive Information Which of the following is the best example of Personally Identifiable Information (PII)? *Spillage What is a proper response if spillage occurs? In which situation below are you permitted to use your PKI token?A. Which may be a security issue with compressed urls? Ask for information about the website, including the URL. Paul verifies that the information is CUI, includes a CUI marking in the subject header, and digitally signs an e-mail containing CUI. correct. (Spillage) What is required for an individual to access classified data? Write your password down on a device that only you access. Select all security issues. Use TinyURLs preview feature to investigate where the link leads. not correct be wary of suspicious e-mails that use your name and/or appear to come from inside your organization. The Contractor shall use Standard Form 1428 for Inventory Disposal. Turn on automatic downloading b. endstream endobj 1075 0 obj <>stream Avoid inserting removable media with unknown content into your computer. What information sources do you think students on your campus use when acquiring dress clothes? What actions should you take with a compressed Uniform Resource Locator (URL) on a website known to you? What security device is used in email to verify the identity of sender? Ask them to verify their name and office number. You will also be required to provide a longer and more detailed abstract that will remain confidential. Youll need to register and then activate your account before you can browse the toolkit. Avoid talking about work outside of the workplace or with people without need-to-know. Which of the following is a concern when using your Government-issued laptop in public? Updated DASA Terms and Conditions - including new contract and intellectual property guidance. Which of the following is NOT a social engineering tip? Explain why. Which may be a security issue with compressed Uniform Resource Locators (URLs)? No. Select Yes or No for each item. \hline From: State Director, Oregon/Washington. What should the employee do differently? A total of 200 units were produced in Job 413. Use of Government Furnished Equipment (GFE) During Foreign Travel. Classified information that should be unclassified and is downgraded. Which of the following is NOT an appropriate way to protect against inadvertent spillage? A Form 388 will be sent to you if youre successful under a DASA competition. The general policy is to have the contractor furnish the equipment needed. The CAC/PIV is a controlled item and contains certificates for: An individual who has attempted to access sensitive information without need-to-know and has made unusual requests for sensitive information is displaying indicators of what? CUI may be stored on any password-protected system. Never allow sensitive data on non-Government-issued mobile devices.

Panthers Curling Club, Articles P