CSCU Cheat Sheet 2026

The 30 highest-yield CSCU facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. Why should you lock your computer screen when stepping away, even briefly? → To prevent unauthorized access to your open files and applications
2. What does 'clean desk policy' mean in a workplace security context? → Ensuring no sensitive documents or devices are left unattended or visible when not in use
3. What is full disk encryption (FDE)? → Encrypting all data on a storage drive, including the OS and user files
4. Which of the following is an example of a 'something you have' authentication factor? → A one-time code sent to your phone
5. When sending a newsletter to a large group of external contacts, what is the primary privacy benefit of using the Blind Carbon Copy (Bcc) field? → It prevents recipients from seeing each other's email addresses.
6. What is the main purpose of encryption? → To protect data by converting it into a secure format
7. What primary security service does a digital signature provide for an email message, ensuring that the sender cannot later deny having sent the message? → Non-repudiation
8. Which password storage method is considered LEAST secure? → Writing in a plain text file on your desktop
9. What type of cloud attack involves intercepting data transmitted between the user and the cloud service? → Man-in-the-middle attack
10. What step should you take before donating or disposing of an old computer? → Perform a secure wipe or destroy the hard drive to prevent data recovery
11. What is the primary purpose of data backup? → To create copies of data to prevent data loss
12. Which type of email attack uses a fabricated sense of urgency to trick recipients into taking immediate action? → Social engineering through urgency-based phishing
13. What is a password manager primarily used for? → Securely storing and generating unique passwords for each account
14. What is the risk of leaving a computer unattended and logged in at work? → An unauthorized person can access your files, email, and applications using your identity
15. Which type of encryption uses the same key for both encryption and decryption? → Symmetric encryption
16. What is a BIOS/UEFI password used for? → Preventing unauthorized users from booting the computer or changing firmware settings
17. What is the minimum recommended length for a strong password according to CSCU guidelines? → 12 characters
18. What is the key difference between encoding and encryption? → Encoding is reversible without a key; encryption requires a secret key to reverse
19. What should you do with sensitive documents you no longer need? → Shred them with a cross-cut shredder before disposal
20. Which storage medium is known for its durability and long-term storage capabilities? → Magnetic Tapes
21. What is 'dumpster diving' in the context of information security? → Searching through discarded materials to find sensitive information
22. What should you do if you receive a suspicious email attachment? → Delete the email immediately without opening the attachment
23. What is email header analysis and why is it useful for security? → Examining the technical metadata of an email to trace its origin and verify authenticity
24. What is 'password reuse' and why is it dangerous? → Using the same password across multiple accounts; a breach on one site exposes all others
25. In case of a ransomware attack, why is having an offline backup important? → Offline backups are immune to network-based attacks
26. What is the purpose of a 'salt' added to a hashed password? → To add a random value that prevents two identical passwords from producing the same hash
27. Which of the following best describes 'tailgating' in physical security? → An unauthorized person following an authorized employee through a secured entry
28. What is the CSCU-recommended approach when using a USB drive found in a parking lot? → Turn it in to IT security or discard it — never plug it into your computer
29. What is a Kensington lock used for? → Physically securing a laptop to a desk or fixed object to prevent theft
30. What is a cipher in the context of cryptography? → An algorithm used to encrypt and decrypt data