Phishing or Fishing?
This type of phishing targets a specific person using personalized info
What is spear phishing?
Minimum character length required for DODEA accounts.
What is 15?
This DoD policy governs cyber workforce qualifications.
What is DoDI 8140?
This company’s 2013 breach exposed over 3 billion accounts.
What is Yahoo?
In 2025, this federal agency released updated AI cybersecurity guidance.
What is CISA?
A fake “urgent” email from your “boss” asking for gift cards is an example of this
What is business email compromise?
Using a phrase like “GoNavyBeatArmy2025!” is an example of this
What is a passphrase?
This DON Cyber Strategy Line of Effort emphasizes supporting the workforce.
What is Line of Effort 1: Improve and Support the Cyber Workforce?
This 2021 cyberattack shut down a major fuel pipeline on the East Coast.
What is the Colonial Pipeline attack?
In 2023, this major social media company (now called “X”) faced scrutiny after a breach exposed user data and raised concerns about platform security.
What is Twitter?
True or False: NAVAIR IT will never email you asking for your DODEA password.
True
This type of authentication requires two or more factors, like CAC + PIN.
What is multi-factor authentication?
NAVAIR uses this system to track and assign official taskers and correspondence
What is ETMS2?
In 2015, this breach compromised millions of security clearance records.
What is the OPM data breach?
In 2023, the U.S. banned this app from government devices due to concerns it could expose data to foreign governments.
What is TikTok?
The most common type of malicious attachment in phishing emails.
What is a PDF or Word doc with macros?
You can reuse your DODEA password on your personal Netflix account.
False
RMF stands for this.
What is Risk Management Framework?
This 2017 ransomware attack disrupted hospitals worldwide.
What is WannaCry?
This popular video conferencing platform saw a huge surge during the pandemic and has also been a target for hackers trying to “bomb” meetings.
What is Zoom?
Clicking a link that takes you to a fake login site is known as this type of attack.
What is credential harvesting?
A password manager helps reduce this risk
What is password reuse?
In 2020, this supply chain attack infiltrated government and defense networks.
What is SolarWinds?
In 2022, Russia’s invasion of Ukraine included this type of cyberattack, which disrupts services by overwhelming systems with traffic.
What is a Distributed Denial of Service (DDoS) attack?