








































Study with the several resources on Docsity
Earn points by helping other students or get them with a premium plan
Prepare for your exams
Study with the several resources on Docsity
Earn points to download
Earn points by helping other students or get them with a premium plan
The Derivative Classification STEPP Ultimate Exam is a comprehensive training preparation guide aligned with Security Training Education and Professionalization Portal STEPP requirements. This exam focuses on derivative classification standards, classification markings, handling of national security information, safeguarding procedures, security violations, insider threat awareness, and proper use of classification guidance. Learners will improve their understanding of protecting classified information and fulfilling federal security responsibilities effectively.
Typology: Exams
1 / 48
This page cannot be seen from the preview
Don't miss anything!









































Question 1. What executive order provides the overarching legal framework for derivative classification? A) EO 12333 B) EO 13526 C) EO 12667 D) EO 13167 Answer: B Explanation: Executive Order 13526 establishes the classification system, defines Original Classification Authority (OCA), and sets the rules for derivative classification. Question 2. Which DoD manual specifically details the procedures for derivative classification? A) DoD 5200. B) DoD 6055. C) DoD 5105. D) DoD 8500. Answer: A Explanation: DoD 5200.01, “DoD Information Security Program,” contains the guidance for original and derivative classification. Question 3. The term “Original Classification Authority” (OCA) refers to: A) Anyone who can mark a document as classified. B) A person designated to classify information for the first time. C) The agency that creates the classification guide. D) The individual who declassifies a document. Answer: B Explanation: An OCA is a person who has been granted the authority to make an original classification determination. Question 4. A derivative classifier must ensure that the classification level of the new document is at least:
A) The lowest level found in any source. B) The same as the highest level in the source material. C) The level required by the classification guide for the topic. D) Unclassified if the source is unmarked. Answer: B Explanation: Derivative classification requires carrying over the highest classification level present in the source material. **Question 5. Which of the following is NOT a responsibility of a derivative classifier? ** A) Protecting the integrity of classified information. B) Creating new classification authority. C) Avoiding over-classification. D) Accurately marking the document. Answer: B Explanation: Only an OCA can create original classification authority; derivative classifiers cannot. Question 6. When multiple classification sources conflict, the default action is to: A) Use the lower classification level. B) Use the higher classification level until clarified. C) Disregard both sources and seek new guidance. D) Declassify the information immediately. Answer: B Explanation: In case of conflicting guidance, the more restrictive (higher) classification must be applied until the OCA resolves the conflict. Question 7. The most authoritative source for derivative classification is: A) A verbal briefing. B) A Security Classification Guide (SCG).
Answer: B Explanation: Paraphrasing does not change the classification; the same level must be applied because the meaning remains classified. Question 11. “Contained In” classification applies when: A) The new document merely references the source. B) The information is explicitly stated in the source. C) The new document reveals a secret method. D) The source is unclassified. Answer: B Explanation: “Contained In” indicates that the classified fact appears verbatim or directly in the source material. Question 12. “Revealed By” classification is required when: A) The source document is unmarked. B) The new document allows deduction of classified facts. C) The information is already public. D) The document only contains open-source data. Answer: B Explanation: “Revealed By” applies when the new document’s content, though not verbatim, enables a reader to infer classified information. Question 13. Classification by compilation occurs when: A) A single classified paragraph is copied. B) Unclassified data points are combined to produce a classified conclusion. C) A document is printed on classified paper. D) The document is stored in a locked safe. Answer: B Explanation: Compiling multiple unclassified pieces can create a classified whole, requiring classification.
Question 14. The banner line of a classified document must be placed: A) Only on the first page. B) At the top and bottom of every page. C) In the footer of the last page only. D) In the header of the cover page only. Answer: B Explanation: Banner lines showing the overall classification must appear on both the top and bottom of each page. Question 15. Portion markings are used to: A) Indicate the document’s overall classification. B) Mark individual paragraphs, headings, or sections with their specific level. C) Identify the author’s name. D) Show the declassification date. Answer: B Explanation: Portion markings (e.g., (TS), (S), (C), (U)) designate the classification of specific parts within a document. Question 16. The “Classified By” line must contain: A) The name of the original author. B) The name or personal identifier of the derivative classifier. C) The title of the source document. D) The date the document was printed. Answer: B Explanation: The “Classified By” line records who performed the derivative classification. Question 17. The “Derived From” line should include: A) The classification level of the new document.
D. The document is classified as Top Secret. Answer: A Explanation: ORCON requires the originator’s written permission before the document can be shared beyond the immediate recipients. Question 21. Which of the following is a prohibited use of classification? A) Protecting sources and methods. B) Concealing criminal activity. C) Guarding national security information. D) Controlling access to weapons data. Answer: B Explanation: Classification cannot be used to hide illegal conduct, personal embarrassment, or inefficiency. Question 22. A “Security Infraction” differs from a “Security Violation” in that: A) An infraction is less serious and may be inadvertent. B) A violation is only punishable by civil penalties. C) An infraction always results in imprisonment. D) A violation does not require any investigation. Answer: A Explanation: Infractions are minor, often unintentional breaches; violations are willful or gross breaches. Question 23. Which of the following penalties may be imposed under the UCMJ for mishandling classified material? A) Fine only. B) Dishonorable discharge. C) Community service. D) Mandatory training. Answer: B
Explanation: The Uniform Code of Military Justice can impose severe punishments, including dismissal (dishonorable discharge) for classified information mishandling. Question 24. The “need-to-know” principle requires: A) Everyone with a clearance gets access. B) Only individuals with both a clearance and a specific requirement may access. C) Documents be shared with the public after 30 days. D) No one may view the document unless they are the author. Answer: B Explanation: Clearance alone is insufficient; a valid need-to-know is also required. Question 25. Which storage container meets GSA standards for classified material? A) A cardboard box. B) A metal filing cabinet with a combination lock. C) A standard office drawer. D) A plastic tote without a lock. Answer: B Explanation: GSA-approved containers are metal, have a combination lock, and meet specific security specifications. Question 26. When transmitting classified information electronically, the sender must use: A) Unencrypted email. B) A secure line or approved encrypted system. C) A public instant-messaging app. D) A fax machine without a cover sheet. Answer: B Explanation: Classified data must be sent over approved, secure, encrypted channels.
A) Classifying information at a higher level than required. B) Failing to apply any classification. C. Using the correct level but missing the “Derived From” line. D) Marking a document as Unclassified when it is classified. Answer: A Explanation: Over-classification occurs when information is assigned a higher level than mandated, potentially restricting unnecessary access. Question 31. The “Derived From” line must be updated when: A) The document is printed on new paper. B) The source material is revised and the classification changes. C. The author changes their name. D. The document is stored in a new location. Answer: B Explanation: If the source’s classification changes, the “Derived From” line must reflect the updated source. Question 32. Which of the following is an example of a “Security Classification Guide” (SCG)? A) A public press release. B) A DoD-issued document that assigns classification levels to specific weapons systems. C) A contractor’s invoice. D) A personal diary. Answer: B Explanation: SCGs are official guides that detail classification levels for specific subjects, such as weapons systems. Question 33. A derivative classifier discovers that a paragraph should be declassified earlier than the date on the banner line. The correct action is to: A) Leave the banner unchanged.
B) Update the declassification date on the paragraph and the banner line. C. Delete the paragraph entirely. D. Mark the paragraph as Unclassified without changing the banner. Answer: B Explanation: Both the paragraph and the overall banner must reflect the correct, earlier declassification date. Question 34. Which of the following is NOT a valid reason to challenge a classification? A) The information is already public. B) The classification level is higher than required. C) The document contains a typographical error. D) The classification conflicts with an SCG. Answer: C Explanation: Typographical errors do not constitute a basis for challenging classification; they are corrected separately. Question 35. The “Compartmented” marking (e.g., SCI) indicates: A) The document is unclassified. B) Access is restricted to individuals with a specific clearance and a need-to-know for that compartment. C) The document can be freely shared with allies. D) The document is automatically declassified after 5 years. Answer: B Explanation: Compartmented information requires both the appropriate clearance and a specific need-to-know for that compartment. Question 36. Which of the following statements about “Derived From” citations is correct? A) They are optional if the banner line is present. B) They must include the exact title, date, and classification level of the source.
D) Irrelevant if the information seems harmless. Answer: B Explanation: The classifier must ensure the source’s classification is still valid and not overridden by newer guidance. Question 40. Which of the following actions would be considered a “Security Violation”? A) Accidentally leaving a classified laptop in a public coffee shop. B) Forgetting to mark a document as classified. C. Deliberately transmitting Top Secret data to a foreign national. D) Using a non-approved pen to write on a classified document. Answer: C Explanation: Intentional transmission of classified material to an unauthorized party is a serious security violation. Question 41. The term “declassification instruction” refers to: A) The process of marking a document as Top Secret. B) The specific date or event that triggers automatic declassification. C) The method for destroying classified material. D. The name of the person who classified the document. Answer: B Explanation: Declassification instructions specify when a document will be automatically declassified (e.g., “25X1”). Question 42. Which of the following is a proper method for destroying classified paper? A) Shredding with a cross-cut shredder that meets GSA standards. B) Burning in an open fire without supervision. C) Throwing it in a regular trash bin. D) Recycling with unclassified paper. Answer: A
Explanation: GSA-approved cross-cut shredders ensure that classified paper is destroyed beyond reconstruction. Question 43. Which of the following best describes “need-to-know” in the context of classified information? A) Anyone with a clearance can access all classified material. B) Access is granted only when the individual’s duties require the specific information. C) Access is determined by seniority alone. D. Access is automatically granted after 30 days of clearance. Answer: B Explanation: Need-to-know restricts access to those whose job responsibilities require the specific information. Question 44. If a document contains both Secret and Unclassified portions, the overall banner line should be marked as: A) SECRET B) UNCLASSIFIED C) TOP SECRET D) CONFIDENTIAL Answer: A Explanation: The overall classification is the highest level present; Secret overrides Unclassified. Question 45. A “Security Manager” is primarily responsible for: A) Issuing original classification authority. B) Providing guidance on classification disputes and overseeing compliance. C) Writing all SCGs. D. Conducting background investigations. Answer: B
Explanation: “25X1” is the standard format indicating automatic declassification after 25 years. Question 49. When a paragraph is marked “(U)”, it indicates: A) The paragraph is Unclassified. B) The paragraph is Top Secret. C) The paragraph is Confidential. D) The paragraph is Sensitive but Unclassified. Answer: A Explanation: (U) denotes Unclassified material. Question 50. Which of the following is a valid reason to apply a “PROPIN” (Protective Information) caveat? A) The information is already public. B) The content is specifically designated as Protected Information under a specific program. C) The document is being sent to a foreign national. D) The document is unclassified. Answer: B Explanation: PROPIN is used for information that requires special protection under a designated program. Question 51. The “ORCON” caveat requires that any further dissemination be: A) Approved in writing by the originator. B) Automatically allowed after 30 days. C. Limited to the original recipients only. D) Shared with any cleared individual. Answer: A Explanation: ORCON means the originator controls any further distribution.
Question 52. Which of the following best describes “classification by inference”? A) Classifying a document because it contains a direct quote. B) Classifying because the reader can deduce classified facts from unclassified data. C) Classifying because the document is printed on classified paper. D. Classifying due to the author’s request. Answer: B Explanation: Inference (or “revealed by”) classification occurs when the combination of data points allows deduction of classified information. **Question 53. When a derivative classifier uses a source that is marked “Secret//NOFORN”, the new document must also carry which dissemination control? ** A) NOFORN B) ORCON C) REL TO USA D) PROPIN Answer: A Explanation: The dissemination control from the source must be carried forward. Question 54. Which of the following is the correct procedure for handling a classified document that is no longer needed? A) Shred it in a GSA-approved shredder. B) Throw it in the regular trash. C) Store it in an unlocked drawer. D) Keep it indefinitely. Answer: A Explanation: Proper destruction of classified material requires an approved method such as cross-cut shredding. Question 55. A document that contains a mixture of Secret and Top Secret material should be marked overall as:
D) Dissemination controls (if any). Answer: C Explanation: The author’s name is not required on the banner line. Question 59. If a derivative classifier discovers that a source SCG has been rescinded, the appropriate action is to: A) Continue using the old classification. B) Re-classify the information according to the latest guidance or seek OCA direction. C) Declassify the material automatically. D. Remove all markings. Answer: B Explanation: When guidance changes, the classifier must follow the current authority or obtain clarification. Question 60. Which of the following best illustrates “classification by compilation”? A) Copying a paragraph verbatim from a Secret memo. B) Combining publicly available satellite imagery with known launch dates to infer a secret weapons system. C) Paraphrasing a Top Secret briefing. D) Adding a footnote to an unclassified report. Answer: B Explanation: The combination of multiple unclassified pieces yields a classified conclusion, requiring classification. Question 61. The “Classified By” line should be placed: A) In the footer of the last page only. B) Directly beneath the banner line on the first page. C) In the header of every page. D) Inside the body of the document.
Answer: B Explanation: The “Classified By” line appears immediately under the banner line on the first page. Question 62. Which of the following is a permissible reason to declassify a document earlier than its scheduled date? A) The information has become publicly known. B) The author wants to share it with friends. C) The document is no longer needed for any purpose. D) The classification level was mistakenly applied. Answer: A Explanation: If the information is already in the public domain, it can be declassified ahead of schedule. Question 63. Which of the following statements about “NOFORN” is correct? A) It allows sharing with any foreign national who has a clearance. B) It restricts dissemination to U.S. persons only. C) It automatically declassifies after 10 years. D) It is a classification level. Answer: B Explanation: NOFORN means “No Foreign Nationals” may receive the material. Question 64. When a document is marked “CONFIDENTIAL//PROPIN”, the PROPIN caveat indicates: A) The document is unclassified. B) The information is protected under a specific program and requires special handling. C) The document can be freely shared with allies. D) The document will be declassified in 5 years. Answer: B