Data Protection & Privacy Flashcards
7 cards from real FSO practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Data Protection & Privacy flashcards as text
Which regulation establishes the government-wide Controlled Unclassified Information (CUI) program requirements for agencies?
Answer: 32 CFR Part 2002
32 CFR Part 2002 implements Executive Order 13556 and the CUI program.
Which agency serves as the Executive Agent for the CUI program?
Answer: National Archives and Records Administration (NARA)
NARA's Information Security Oversight Office oversees the CUI program.
What is the minimum banner marking required on a document containing CUI?
Answer: CUI
The banner marking must at least read CUI; FOUO is a legacy marking.
Which NIST publication provides security requirements for protecting CUI on nonfederal systems?
Answer: NIST SP 800-171
SP 800-171 covers CUI in nonfederal systems and organizations.
What distinguishes CUI Specified from CUI Basic?
Answer: Its authority sets specific handling controls that differ from the baseline
CUI Specified has law, regulation, or policy requiring controls beyond the basic standard.
Who has the authority to decontrol CUI?
Answer: The designating agency, or per its policy
Only the designating agency (or its policy) decides when CUI is decontrolled.
When is it acceptable to share CUI with someone outside your organization?
Answer: When there is a lawful government purpose and the recipient is authorized
CUI may be disseminated only for a lawful government purpose consistent with its controls.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. We have not yet matched this exam's facts to an official source, so confirm fees, dates and rules with the exam body. Not reviewed by a subject-matter expert. Editorial policy