DOD DOD Information Assurance & Data Protection

Question 1

Under DoD 8570.01-M (now superseded by DoD 8140.01), what was the primary purpose of the Information Assurance Workforce Improvement Program?

Accepted Answer

To establish baseline IA certification requirements for personnel performing information assurance functions

Answer

To manage military personnel promotions in IT roles

Answer

To license commercial software used on DoD networks

Answer

To certify DoD contractors for physical security roles

Question 2

What does the term 'Controlled Unclassified Information (CUI)' mean under the DoD CUI Program?

Accepted Answer

Information that requires safeguarding per law, regulation, or government policy but is not classified

Answer

Information classified at the Secret level

Answer

Any information stored on a government computer

Answer

Publicly releasable DoD information

Question 3

Which regulation requires DoD contractors who handle CUI to implement specific cybersecurity controls?

Accepted Answer

DFARS 252.204-7012 and NIST SP 800-171

Answer

FAR 52.204-21 only

Answer

ITAR Part 120

Answer

DoD Instruction 5000.02

Question 4

What is the maximum classification level that may be processed on a system accredited for 'Secret' under the DoD Risk Management Framework?

Accepted Answer

Secret

Answer

Top Secret

Answer

Confidential

Answer

Top Secret/SCI

Question 5

Under DoD policy, how long must audit logs be retained for systems processing classified information?

Accepted Answer

At least 1 year (with 90 days online)

Answer

30 days total

Answer

5 years total

Answer

Indefinitely without deletion

Question 6

What is 'data at rest' in the context of DoD information protection?

Accepted Answer

Data stored on a device or media that is not actively being transmitted

Answer

Data that has been declassified and archived

Answer

Data currently being processed by a running application

Answer

Data transmitted over an encrypted VPN