Practice Test GeeksDOD - Department of Defense Certified Practice Test
← All DOD Flashcard Decks

DOD Information Assurance & Data Protection Flashcards

6 cards from real DOD practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 DOD Information Assurance & Data Protection flashcards as text

  1. Under DoD 8570.01-M (now superseded by DoD 8140.01), what was the primary purpose of the Information Assurance Workforce Improvement Program?

    Answer: To establish baseline IA certification requirements for personnel performing information assurance functions

    DoD 8570.01-M established mandatory baseline certification requirements (e.g., CompTIA Security+, CISSP) for all personnel performing IA roles on DoD networks.

  2. What does the term 'Controlled Unclassified Information (CUI)' mean under the DoD CUI Program?

    Answer: Information that requires safeguarding per law, regulation, or government policy but is not classified

    CUI is government-created or -possessed unclassified information that requires safeguarding under law, regulation, or policy — it is distinct from classified information.

  3. Which regulation requires DoD contractors who handle CUI to implement specific cybersecurity controls?

    Answer: DFARS 252.204-7012 and NIST SP 800-171

    DFARS 252.204-7012 requires DoD contractors handling CUI to implement the 110 security controls in NIST SP 800-171 and report cyber incidents within 72 hours.

  4. What is the maximum classification level that may be processed on a system accredited for 'Secret' under the DoD Risk Management Framework?

    Answer: Secret

    A system accredited to process Secret information may only handle up to and including Secret data; Top Secret or SCI requires a separately accredited system.

  5. Under DoD policy, how long must audit logs be retained for systems processing classified information?

    Answer: At least 1 year (with 90 days online)

    DoD requires audit logs for classified systems to be retained for at least one year, with the most recent 90 days kept online and accessible for review.

  6. What is 'data at rest' in the context of DoD information protection?

    Answer: Data stored on a device or media that is not actively being transmitted

    Data at rest refers to inactive data stored on hard drives, SSDs, removable media, or databases — as opposed to data in transit or data in use.