All questions

US Navy Cyber Awareness Challenge 2026 Practice Test

Browse all practice questions for the US Navy Cyber Awareness Challenge 2026 Practice Test. Search by topic, open any question and review its full explanation, then test yourself in the practice quiz.

Start practice test Flash cards

Access Control: Your First Line of Defense Against Data BreachesWhy is it critical to limit access to sensitive information?Avoiding Pitfalls: What to Not Do in Response to Cybersecurity IncidentsWhat should not be done in response to a cybersecurity incident?Best Practices for Physical Security: Cultivating a Culture of VigilanceWhich of the following is a best practice for physical security?Best Practices for Telework: Always Use Your Government VPN!Which of the following is a best practice for telework and remote work?Beware of Common Access Card Misuse in the NavyWhich of the following is NOT an appropriate use of your Common Access Card (CAC)?Change Your Passwords: A Critical Step to Cyber SecurityWhat's a key action to take if you suspect your information has been compromised?Choosing Safe Peripherals for Government Furnished EquipmentWhich type of peripheral is permissible to use with government furnished equipment (GFE)?Create Strong Passwords Like a ProWhat is a recommended practice for creating strong passwords?Creating User Profiles: A Smart Move for Your Home Computer SecurityIs it advisable to create a user profile on home computers to enhance security?Discover How to Shield Your Digital Life from VirusesHow can you effectively prevent viruses and malicious code?Disposing of Sensitive Documents: What You Need to KnowHow should sensitive documents be disposed of?Encryption: The Guardian of Your DataWhat does "encryption" accomplish?Essential Tips for Ensuring Your Mobile Device is SecureHow can you assess the security of a mobile device?Handling Removable Media in Government Facilities: A Cautionary TaleWhy should removable media be handled with caution in government facilities?Here's How to Handle Suspicious Emails Like a ProHow should you handle suspicious emails?Here’s How to Protect Yourself on Social Networking SitesHow can you protect yourself from social networking sites?Here's How to Safely Store Classified DataWhat is a recommended method for safeguarding classified data?Here's How to Secure Your Work Area When TeleworkingWhat step should be taken next to ensure secure teleworking?Here’s What You Need to Know About 'Data at Rest' in CybersecurityWhat does "data at rest" mean?Here’s What You Should Check Before Sharing News on Social MediaWhen considering sharing a news headline from social media, what should you check?How Cybersecurity Awareness Training Can Shield Us from Phishing AttacksWhat type of training can help employees identify phishing attempts?How Malicious Code Finds Its Way In: A Look at Cybersecurity HazardsWhich of the following is a common way that malicious code is introduced?How Often Should You Update Your Passwords for Optimal Security?How often should you update your passwords?How to Detect if Your Personal Information Has Been CompromisedHow can you detect if your personal information has been compromised?How to Filter Out Fake News on the InternetHow can you filter out fake news on the internet?How to Protect Sensitive Information When Sending a Personnel RosterWhen emailing a personnel roster, what should you include to ensure the information is protected?How to Safeguard Your Devices Against MalwareWhich of the following should you do to protect against malware on personal devices?How to Safeguard Your Home PC from Cyber ThreatsWhat is an effective way to protect your home computer from cyber threats?How to Secure Sensitive Data on Your Devices Using Strong PasswordsWhat is an effective way to secure sensitive data on your devices?How to Share Sensitive Data Securely in Your Government RoleWhat is the most appropriate method for a government employee to share sensitive data with a supervisor?How to Spot Phishing Emails: A Key Skill for Navy Cyber AwarenessWhat is a common indicator of a phishing email?How to Verify a Website's Legitimacy: A Simple GuideWhat is a method to help verify a website's legitimacy?How to Verify Website Authenticity to Stay Safe OnlineHow can you verify the authenticity of a website?How Two-Factor Authentication Secures Your Navy Cyber AccountHow does Alex secure his account?How Using Personal Devices for Remote Work Poses Security RisksWhen working remotely, does using personal equipment pose a security risk?Is Carrying Your Passport the Safest Option?True or false? The best way to keep your passport safe is to carry it with you.Know Your Cyber Threats: A Deeper Look at Credential StuffingWhat is "credential stuffing"?Let's Talk About Cyberspace Protection Conditions: What You Need to KnowUnder which Cyberspace Protection Condition (CPCON) is the priority focus limited to critical functions?Navigating Government Email Etiquette Like a ProWhich of the following is a best practice for using government e-mail?Navigating Social Media Moderation: A Must-Know for Engaging DiscussionsWhich of the following should you do before moderating a public discussion on social media?Password Security: What To Avoid When Creating Strong PasswordsWhat should be avoided when creating passwords?Protecting Sensitive Information: The Best Practices You Need to KnowWhat is the best practice when handling sensitive information?Protecting Your Mobile Data Like a ProHow can you best protect data on a mobile device?Protecting Your Mobile Device While Traveling: What You Need to KnowHow can you protect a mobile device while traveling?Recognizing Common Signs of Phishing AttemptsWhat is a common sign of phishing attempts?Safeguarding Your Online Presence: Smart Practices for Social MediaWhich of the following is a safe practice when using social media?Secure Browsing: Why HTTPS Matters in Cyber AwarenessWhat is a key feature of secure browsing?Stay Safe Online: The Importance of HTTPS in Internet BrowsingWhich practice is recommended for safe Internet browsing?The Essential Role of Encryption in Keeping Your Data SecureWhat is the role of encryption in data security?The Essentials of Secure Storage in a SCIF EnvironmentWhich practice is essential in maintaining the integrity of classified documents in a SCIF?The Key to Securely Handling Sensitive Data Like a ProWhat is the most secure way to handle sensitive data?Understanding Antivirus Software: Your Shield Against Cyber ThreatsWhat is the function of antivirus software?Understanding Critical Infrastructure in CybersecurityIn the context of cybersecurity, what does "critical infrastructure" refer to?Understanding Cybersecurity: The Core of Protection Against ThreatsWhat is one of the most critical components of cybersecurity?Understanding Data Breaches: What You Need to KnowWhat constitutes a "data breach"?Understanding DDoS Attacks: What You Need to KnowWhat is a DDoS attack?Understanding DoD Public Key Infrastructure (PKI) Tokens: Best PracticesWhich of the following is an appropriate use of a DoD Public Key Infrastructure (PKI) token?Understanding DoD Unclassified Data: What You Need to KnowWhich statement is true about DoD Unclassified data?Understanding Headset Usage in Classified Spaces: The Navy’s ProtocolsWhich of the following is permitted when using an unclassified laptop within a collateral classified space?Understanding Home Computer Use for Government WorkIs it acceptable to use home computers for official government work?Understanding How Effective Cybersecurity Strengthens National SecurityWhat is the outcome of effective cybersecurity on national security?Understanding How Malicious Code Spreads Through E-Mail AttachmentsWhich option is a method for malicious code to spread?Understanding How to Handle Connection Requests SafelyWhat is the appropriate response to a connection request from someone you do not know well?Understanding How to Safeguard Against Identity TheftHow can you effectively protect yourself from identity theft?Understanding Insider Threat Indicators in the US Navy Cyber Awareness ChallengeAccording to the description provided, how many insider threat indicators are present for Edward?Understanding Insider Threats: The Emotional Impact of LossWhich of the following is a potential insider threat indicator?Understanding Insider Threats: The Impact of Excessive OvertimeWhat indicates a potential insider threat?Understanding Malware: The Threats Lurking in Your SystemWhich best describes the function of malware?Understanding Multi-Factor Authentication: Why It's a Must-Have in CybersecurityWhat is the purpose of Multi-Factor Authentication (MFA)?Understanding National Security Data ClassificationsWhat type of data could reasonably be expected to cause damage to national security?Understanding Personally Identifiable Information (PII) in Cyber Awareness TrainingWhich of the following is considered personally identifiable information (PII)?Understanding Phishing: A Key Component of Cybersecurity AwarenessWhat does the acronym "PHISH" refer to in cybersecurity?Understanding Phishing: How to Recognize and Avoid ThreatsWhich of the following describes a phishing attempt?Understanding PII: What You Need to Know for the US Navy Cyber Awareness ChallengeWhich of the following is NOT an example of Personally Identifiable Information (PII)?Understanding Prerequisites for Sensitive Compartmented Information AccessWhat are the prerequisites for accessing Sensitive Compartmented Information (SCI)?Understanding Ransomware: The Cyber Threat You Need to KnowWhat is ransomware primarily designed to do?Understanding Removable Media in Cyber AwarenessWhich of the following options is considered removable media?Understanding Security Protocols for Unclassified Laptops in Classified EnvironmentsWhat must you do when using an unclassified laptop in a collateral classified environment?Understanding Security Risks of Unmarked Documents on Classified NetworksWhen storing an unmarked document on the classified network, does this behavior represent a security concern?Understanding Signs of a Potential Malware InfectionWhich of the following is an indicator of a potential malware infection?Understanding Social Engineering Indicators in Email NoticesHow many social engineering indicators are present in the "E-mail Storage Quota Exceeded" notice?Understanding Spillage: A Key Concept for Cyber AwarenessWhich statement about spillage is accurate?Understanding the Authority Behind Information ClassificationWho has the authority to designate whether information is classified?Understanding the Concept of 'Least Privilege' in CybersecurityWhat does the concept of "least privilege" entail?Understanding the Cost of Cybersecurity Breaches: What You Need to KnowWhat is a potential consequence of a cybersecurity breach?Understanding the Dangers of Malicious CodeHow can malicious code cause damage?Understanding the Goals of Cybersecurity: What You Need to KnowWhich of these is NOT a goal of cybersecurity?Understanding the Importance of an Incident Response Plan in Cyber SecurityWhat is the purpose of an incident response plan?Understanding the Importance of Cybersecurity Awareness TrainingWhat is the main goal of cybersecurity awareness training?Understanding the Importance of Securing Your Workspace When Working RemotelyWhy is it important to secure the area before working remotely?Understanding the Key Component of Physical Security in CybersecurityWhich of the following is a key component of physical security in cybersecurity?Understanding the Purpose of Security Updates in Cyber AwarenessWhat is the purpose of a security update?Understanding the Purpose of the US Navy Cyber Awareness ChallengeWhat is the primary purpose of the US Navy Cyber Awareness Challenge?Understanding the Right Places to Edit Reports with Classified InfoWhere is it appropriate to edit an electronic report that contains classified information?Understanding the Risks of Compressed URLs: What You Need to KnowWhich statement is true of compressed URLs (e.g., Tiny URL, goo.gl)?Understanding the Risks of Removable Media and Portable Electronic DevicesWhich of the following is true of removable media and portable electronic devices (PEDs)?Understanding the Risks of Using Outdated SoftwareWhat are the risks associated with using outdated software?Understanding the Risks of Using Unapproved Software in CybersecurityWhat is a risk of using unapproved software on work devices?Understanding the Role of the Security Classification Guide in National SecurityWhat does the Security Classification Guide help determine?Understanding the Rules: Which Removable Media is Allowed in the Navy?Which of the following uses of removable media is allowed?Understanding the Security Risks of Teleworking with IoT DevicesWhat poses a security risk while teleworking with Internet of Things (IoT) devices?Understanding the Security Risks of Using Your Smartwatch for PaymentsDoes it pose a security risk to tap your smartwatch to pay for a purchase at a store?Understanding Two-Factor Authentication in the Cyber Awareness ChallengeWhat does "two-factor authentication" (2FA) provide?Understanding Why a VPN is Essential for CybersecurityWhat is a VPN and why is it used?Understanding Why Simple Passwords Are a Cybersecurity NightmareWhat is a major risk associated with using simple passwords?Understanding Why Software Licenses Matter for Cyber AwarenessWhy are software licenses important?Voice-Activated Smart Devices: Your Personal Information at Risk?True or false? Voice-activated smart devices can collect and share your personal information.Watch Out for These Signs Your Device Might Be CompromisedWhat is a potential sign that your device may have been compromised?Watch Your Step: How One Wrong Move Could Compromise Sensitive InformationWhich individual demonstrated behavior that could lead to the compromise of sensitive compartmented information?What Action Keeps DoD Data Safest in Public Spaces?What action will keep DoD data the safest?What Clicking Links in Unverified Emails Can Really Cost YouWhat is the effect of clicking links in unverified emails?What Does Social Engineering Mean in Cybersecurity?What does the term "social engineering" refer to?What Happens After a Successful Cyber Attack?What can be a result of a successful cyber attack?What Happens When Sensitive Information is No Longer Needed?What should be done when sensitive information is no longer needed?What Happens When You Click on Phishing Links?What is the primary consequence of clicking on phishing links?What Poses a Physical Security Risk in Open Office Areas?What poses a physical security risk in an open office area?What Should Colleagues Do in Response to Bob's Actions?What should Bob's colleagues do in response to his actions?What Should You NOT Do with a Suspect Email Like John's?John receives an e-mail about a potential shutdown of a major social service unless a petition receives enough signatures. Which of the following actions should John NOT take with the e-mail?What to Do After Spotting a Policy ViolationWhat action is recommended after identifying a policy violation?What to Do First When You Spot a Security Policy ViolationWhat should be done first if a security policy is violated?What to Do if an Unknown Caller Requests Sensitive InformationWhat action is best if an unknown caller is asking for sensitive information?What to Do If Sensitive Compartmented Information is CompromisedWhat action should you take if Sensitive Compartmented Information (SCI) is compromised?What To Do If You Find an Unlabeled Thumb Drive: A Smart Move for Cyber SafetyIf you find an unlabeled thumb drive, what is the best action to take?What to Do If You Receive a Suspicious EmailWhat should you do if you receive a suspicious email?What to Do If You Receive a Suspicious Email?What action should you take if you receive a suspicious email?What to Do If You See a Coworker Handling Sensitive Information Without ClearanceIf Adam sees a coworker without the required clearance handling SCI, what should he do?What to Do If You Suspect Your Common Access Card is Compromised?What should you do if you suspect that your Common Access Card (CAC) has been compromised?What to Do If You Suspect Your Personal Data Has Been CompromisedWhat should you do if you suspect your personal data has been compromised?What To Do If Your Device Gets Lost or Stolen: Key Steps to Protect YourselfWhat should you do if your device gets lost or stolen?What to Do If Your Device Is Compromised: Key Steps to FollowWhat should you do if you suspect a device is compromised?What to Do When a Security Breach Happens: Your Essential GuideWhich of the following describes an appropriate response to a security breach?What to Do When Accessing Sensitive Work InformationWhat action should you take when accessing sensitive information from a work network?What to Do When an Employee Leaves Your OrganizationWhat should be done when an employee leaves the organization?What to Do When an Unknown Caller Asks About Your Government LaptopIf you receive a phone call from an unknown person requesting information about your government laptop, what should you do?What to Do When You Encounter Classified Information on Social MediaWhat should be your first action when encountering classified information on social media?What to Do When You Find a Security Vulnerability: A Navy PerspectiveIf you discover a security vulnerability, what should you do?What to Do When You Get a Suspicious EmailWhat should you do after receiving a suspicious email?What To Do When You Receive An Unexpected Package at Work?What action should be taken upon receiving an unexpected package at work?What to Do When You Spot Dubious Information OnlineWhat is the best course of action if you come across dubious information online?What to Do with Potentially Sensitive Information on Social MediaWhat should you do if a post contains potentially sensitive information?What to Look for When Scanning for Malicious SoftwareWhat could indicate a malicious code attack?What You Need to Do Before Plugging in Your Peripheral DeviceWhat should you do before connecting any peripheral devices to a government-furnished laptop?What You Need to Know About Acceptable Use of Government IT ResourcesWhat constitutes acceptable use of government IT resources?What You Need to Know About Email SpoofingWhat is email spoofing?What You Need to Know About Insider Threats in the US Navy Cyber Awareness Challenge 2025What is defined as an "insider threat"?What You Need to Know About Malware in CybersecurityIn cybersecurity, what is "malware"?What You Need to Know About Properly Disposing of Electronic DevicesWhat effect can improper disposal of electronic devices have?What You Need to Know About Securing Your Home Wi-Fi Network for Remote WorkWhich of the following is a best practice for protecting your home wireless network for telework or remote work?What You Need to Know About Using Personally-Owned Peripherals with Government EquipmentWhich type of personally-owned computer peripheral is allowed to be used with government-furnished equipment?What You Should Do After Using a Public ComputerWhat should you do after using a public computer?What's the Big Deal with Wireless Headsets in Classified Areas?What is the primary concern when using wireless headsets in classified areas?When Is the Safest Time to Post About Work-Related Travel?When is the safest time to post on social media about your work-related travel?Why Approved Mobile Hotspots Are Your Best Bet for Secure Internet AccessWhich method of getting online poses the least risk?Why Backups Are Key to Effective CybersecurityWhy are backups an essential part of cybersecurity?Why Cash is the Least Risky Payment MethodWhat payment method is considered the least risky?Why Continuous Training and Updates are Key to CybersecurityWhich aspect is crucial for maintaining cybersecurity?Why Cybersecurity Is Essential for National SecurityWhat is a primary role of cybersecurity regarding national security?Why Cybersecurity Matters for the EconomyHow does cybersecurity impact the economy?Why Disabling Cameras and Microphones is Key in Classified EnvironmentsWhat is one purpose of disabling the embedded camera and microphone when using devices in a classified environment?Why Encrypt Files Before Sharing Them?What is a good practice to follow when sharing files online?Why Every Home Computer Needs Virus and Threat ProtectionShould virus and threat protection be installed on home computers?Why Every Organization Needs a Solid Security PolicyWhat is the importance of a security policy in an organization?Why Following Procedures Matters After a Security ViolationWhy is it important to follow procedures after a security violation?Why Having a Backup Can Save Your Digital LifeWhy is it essential to maintain a backup of your data?Why Keeping an Updated IT Asset Inventory Matters for CybersecurityWhat is the significance of maintaining an updated inventory of IT assets?Why Keeping Software Updated is Crucial for Your Cyber SafetyWhy is it important to keep software updated?Why Physical Security is Vital for CybersecurityWhy is physical security a critical aspect of cybersecurity?Why Protecting Digital Data Matters in CybersecurityWhat is one focus area of cybersecurity measures?Why Regular Software Updates are Essential for CybersecurityWhat action should be taken for software updates?Why Regular Software Updates Are Your Best Defense in CybersecurityWhat is the purpose of regular software updates?Why Regular Updates to Security Protocols Are Crucial in CybersecurityWhich is an essential practice in cybersecurity?Why Reporting Suspicious Activity is Essential in Cyber AwarenessWhich of the following would NOT be a reason to report suspicious activity?Why Researching Apps Before Downloading Is Essential for Cyber AwarenessWhich action should you take before downloading any applications?Why Running Errands During Meetings on a Government Device Can be RiskyDoes Steve running errands during virtual meetings with an approved government device pose a security concern?Why Sending Personal Emails on GFE is a Bad IdeaIs using government-furnished equipment (GFE) to send personal emails considered appropriate?Why Social Media Awareness in Cybersecurity MattersWhat does social media awareness in cybersecurity help individuals to understand?Why Strong Passwords Matter More Than EverWhat is a strong password?Why Two-Factor Authentication is a Must for CybersecurityWhy is using two-factor authentication beneficial?Why Two-Factor Authentication is Vital for Your Online SecurityWhy is it important to use two-factor authentication?Why Unique Passwords are Essential for CybersecurityWhich practice helps in mitigating cybersecurity risks?Why User Training is Key in CybersecurityWhat is the primary role of user training in the context of cybersecurity?Why Using Government Email for Personal Sales is a No-GoWhy is it inappropriate to use government email for selling items?Why You Should Always Enable Firewall Protection on Your Home ComputerShould firewall protection be enabled on your home computer?Why You Should Always Monitor Your Credit Card StatementsTrue or false? You should monitor your credit card statements for unauthorized purchases.Why You Should Always Report Phishing AttemptsWhy is it important to report phishing attempts?Why You Should Always Use a VPN on Public Wi-FiWhich behavior is appropriate when using public Wi-Fi networks?Why You Should Change Shared Passwords When an Employee LeavesWhat is the significance of changing shared passwords when an employee leaves?Why You Should Make Password Changes Your New HabitWhy is it important to regularly change your passwords?Why You Should Never Reuse Passwords: Key Password Security TipsWhich of the following practices is NOT recommended for password security?Why You Should Think Twice Before Using Public Wi-Fi for Sensitive TransactionsWhat is a common consequence of using public Wi-Fi for sensitive transactions?You Know What? Always Verify Before Clicking Those Email Links!What is the first step you should take before clicking links in emails?You Suspect a Security Breach? Here’s What to Do Next!What should you do if you suspect a security breach?

More practice questions

These questions are part of the practice quiz. Start practicing

What is a possible method to protect your Common Access Card (CAC)?
In the "DoD Software" email about the "Approved Software List," how many social engineering indicators are present?
What type of identifier could be a risk if mishandled?
What provides precise guidance regarding elements of information that can be classified?
Which statement is true regarding Controlled Unclassified Information (CUI)?
How can you ensure your software is up to date?
What does it mean if your meeting notes are classified as unclassified?
What does the term 'insider threat' refer to?
Which password is considered weak and not recommended for use?
What is the primary goal of encrypting sensitive documents sent via email?
What is a consequence of failing to verify personnel with a need-to-know within a SCIF?
How can you protect yourself on social networking sites?
In a SCIF, if a conversation is held after verifying no one was nearby, does this behavior represent a security concern?
What should you use to create strong passwords?
Does printing a classified document and promptly retrieving it from the printer represent a security concern?
What type of information does a personnel roster represent?
What is required to transport Sensitive Compartmented Information (SCI)?
What is important when creating a strong password?
What is an allowed use of government furnished equipment (GFE)?
Who is identified as securely authenticating their identity?
What is the best practice regarding antivirus software on personal computers?
What is an important step to take when connecting to public Wi-Fi networks?
What is a requirement when working in a SCIF?
Which classification type prohibits the sharing of information without authorization?
What is the appropriate use of removable media when allowed?
What action is recommended to prevent unauthorized site access within physical facilities?
What action is Tessa prohibited from taking with payroll data while working remotely?
What must be ensured when discussing classified information with other authorized personnel?
What should you do if you suspect a security incident has occurred on your government laptop?
Receiving an e-mail from a personal address asking you to call a number you don’t recognize suggests what action?
Which of the following is a way to prevent downloading malicious code?

Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy