Question: *Spillage

After reading an online story about a new security project being developed on the military installation where you work, your neighbor asks you to comment about the article. You know that this project is classified. How should you respond?

Answer: Attempt to change the subject to something non-work related, but neither confirm nor deny the article’s authenticity

Question: *Spillage

Which of the following may help to prevent spillage?

Answer: Label all files, removable media, and subject headers with appropriate classification markings.

Question: *Spillage

A user writes down details marked as Secret from a report stored on a classified system and uses those details to draft a briefing on an unclassified system without authorization. What is the best choice to describe what has occurred?

Answer: Spillage because classified data was moved to a lower classification level system without authorization.

Question: *Spillage

What should you do when you are working on an unclassified system and receive an email with a classified attachment?

Answer: Call your security point of contact immediately

Question: *Spillage

What should you do if a reporter asks you about potentially classified information on the web?

Answer: Ask for information about the website, including the URL.

Question: *Spillage

.What should you do if a reporter asks you about potentially classified information on the web?

Answer: Refer the reporter to your organization’s public affairs office.

Question: *Spillage

What should you do if you suspect spillage has occurred?

Answer: Immediately notify your security point of contact

Question: *Spillage

Which of the following is a good practice to prevent spillage?

Answer: Be aware of classification markings and all handling caveats.

Question: *Spillage

Which of the following actions is appropriate after finding classified information on the Internet?

Answer: Note any identifying information and the website’s Uniform Resource Locator (URL)

Question:

Answer: ~Verify that any government equipment used for processing classified information has valid anti-virus software before connecting it to the internet (wrong)

~Follow procedures for transferring data to and from outside agency and non-Government networks