SFPC TEST 2024-2025 ACTUAL EXAM 120 QUESTIONS AND CORRECT DETAILED ANSWERS WITH RATIONALES, Exams of Programming Languages

Download SFPC TEST 2024-2025 ACTUAL EXAM 120 QUESTIONS AND CORRECT DETAILED ANSWERS WITH RATIONALES and more Exams Programming Languages in PDF only on Docsity!

SFPC TEST 2024-2025 ACTUAL EXAM 120

QUESTIONS AND CORRECT DETAILED ANSWERS

WITH RATIONALES (100% CORRECT AND VERIFIED

ANSWERS). GRADED A

DOD Manual 5200.01, Volumes 1-4 are? - ANSThe manual that governs the DOD Information Security Program E.O. 13526 is what? - ANSThe executive order that governs the DOD Information security Program How can a document be destroyed? - ANSMust be burned, shredded, or chemically decomposed of How can a floppy disk be destroyed? - ANSMust be burned, overwritten, or demagnetized How can a Microfiche be destroyed? - ANSBurned or shredded to be destroyed. It can also be destroyed with chemicals that destroy the imprints. How can a typewriter ribbon be destroyed? - ANSRibbons must be burned or shredded How can a videotape be destroyed? - ANSMust be burned, shredded, or demagnetized

How can you send Secret Information? - ANSThis kind of information can be sent via USPS How can you send Top Secret Information? - ANSThis kind of information CANNOT be sent via USPS and must be transported by a courier How is classified information prepared for transportation? - ANSPackaged and sealed in ways that minimize risk of accidental exposure and facilitates detection of tampering How is the level of classification determined by the OCA? - ANS1) Probably Impact

2. Verbal determinations must be followed by a written confirmation within 7 days
3. By prepared to present reason in a court of law
4. Be prepared to provide written description of damage In what circumstance is foreign travel briefings required? - ANS1) For individuals with SAP/SCI access
5. Attendance at meetings where foreign nationals are likely to be present. List 3 approved methods for destroying classified material? - ANS1) Burning
6. Shredding
7. Pulverizing
8. Disintegrating
9. Pulping
10. Melting
11. Chemical Decomposition

8. Mutilation to preclude recognition NSC exercises its guidance through primarily who? - ANSISOO OCAs must always make a declassification determination when they originally classify information (T/F) - ANSTrue Requirements to hand Carry Classified Information are? - ANS1) Should only be done as a last resort
9. Written Authorization is required
10. Courier must be briefed T/F: An OCA can communicate their classification decision by issuing either a security classification guide or a properly marked source document? - ANSTrue T/F: An OCA cannot issue a SCG until approved by the Information Security Oversight Officer(ISSO)? - ANSFalse T/F: Anyone can determine the need for hand carrying classified information? - ANSFalse T/F: Compromise of critical program information can significantly alter program direction, shorten combat effective life of the system, or require additional research, development, test, and evaluation resources to counter impact or loss? - ANSTrue

T/F: Critical Program Information includes both classifed military information and controlled unclassified information? - ANSTrue T/F: Critical program information needs to be protected from unauthorized or inadvertent destruction, transfer, alteration, or loss? - ANSTrue T/F: Declassified foreign government information may be considered for original classification by an OCA? - ANSFalse T/F: Delegation of the original classification authority (OCA) needs to specify the lowest level the OCA can classify a piece of information? - ANSFalse T/F: Hard Carrying classifed information should only be done as a last resort? - ANSTrue T/F: Original Classification authority is delegated to occupants of a position? - ANSTrue T/F: SCGs address the possibility that the compilation and aggregation of the COP may reveal classified information? - ANSTrue T/F: The organizational or command security manager is responsible for developing, approving, and implementing the Program Protection Plan, or a single source document that specifies all protection efforts designed to prevent unauthorized access to critical program information? - ANSFalse (its the program manager's job not security manager)

T/F: The preparation and implementation of a Program Protection Plan is based on effective application of risk avoidance methodology? - ANSFalse T/F: The Program Protection Plan needs to be classified according to its content? - ANSTrue T/F: When someone is carrying classified information, written authorization is always required? - ANSTrue The 25 year rule is what? - ANSThe process where records automatically become declassified after 25 years Two security professionals (Joe and Chris) are discussing the policy of documents associated with information classification... Joe says that EO 13526 calls for basic classification policy that advocates classifying information only when necessary to prevent damage to US National Security and only for as long as necessary, but not for longer than 15 years. Chris says that DOD 5200.2R is the policy document that established the baseline information security requirements for DOD Who is correct? - ANSBoth are INCORRECT What agency created the destruction standard that DOD uses? - ANSNSA (National Security Agency)

What are 4 types of Declassification Systems? - ANSScheduled, automatic, mandatory, and systematic What are methods to send hard copy classified information? - ANSDCS, first class mail, registered mail, and certified mail What are options an OCA has when determining a classification? - ANSSpecific Date, Specific Event, or by the 50X1-HUM Exemption What are the 10 Common Briefings? - ANS1) Initial

2. Indoctrination
3. Annual refresher
4. Debriefing
5. Courier
6. NATO
7. Non-Disclosure Briefing (authorized access)
8. Foreign Travel Brief
9. Attestation (SAP Briefing)
10. Antiterrorism, Force Protection (AT/FP)` What are the 3 key concepts you must use to determine the classification level of the material you create? - ANS1) Contained in: Information used from an authorized source with no additional interpretation or analysis
11. Revealed by: information that i snot clearly or explicitly stated in the source document, but a reader can deduce the classified information from the new document by performing some level of additional interpretation or analysis

3. Compilation: combining or associating unclassified individual elements of information to reveal an additional association or relationship that warrants a classified level of protection What are the 3 methods used to derivatively classify information? - ANS1) Extracting: taken directly from and authorized source
4. Paraphrasing: Re-worded in a new or different document
5. Generating: taken from one form and generated into another form or medium (such as a document to video) What are the 4 steps to determine if information is eligible for classification? - ANS1) If the information Official
6. Is it under any prohibitions or limitations
7. is it already classified
8. Does it fall into one of the 8 categories of classified information What are the 5 requirements for Derivative Classification? - ANS1) Observe and respect the OCAs Original class determination
9. Apply the required markings
10. Only use authorized sources
11. Use caution when paraphrasing
12. Always take the appropriate steps to resolve any doubts you have What are the 6 steps for an OCA to classify information? - ANS1) Confirm the info is owned/controlled by the government
13. Confirm the info is eligible for classification

3. Determine Impact
4. Determine Classification Level
5. Determine Classification Duration
6. Provide Guidance What are the 8 categories of classified information? - ANS1) Military plans, weapon systems
7. Foreign Government Information
8. Intelligence activities, sources, methods
9. Foreign relations, activities
10. Science, Technology or economic matters relating to National Security
11. Safeguarding nuclear material or facilities
12. Vulnerabilities or capabilities related to national security
13. Weapons of Mass Destruction What are the 9 FIOA exemption categories? - ANS1) National Defense
14. DOD personnel practices
15. Statues
16. Trade secrets
17. Litigation
18. Personal and private
19. Law Enforcement
20. Regulation of financial institutions
21. Well Location

What are the options an OCA has when determining declassifcation? - ANS1) Specific date

2. Specific Event
3. by the 50X1-HUM Exemption What are the practices to follow when handling classified information? - ANS1) Properly destroy preliminary drafts, worksheets, and other material after they have served their purpose
4. use approved secure communications circuits for telephone conversations to discuss classified information
5. Follow proper procedures when copying classified information
6. Use security forms such as SF 701 and SF 702 What are the purposes of the SF701 and SF702? - ANSSF701: Activity Security Check List, used to record end of day checks. SF702: Security Container Check List, used to record opening and closing of a security container. What are the responsibilities when derivatively classifying information? - ANSTo observe and respect the original classification authority's decision and only use authorized sources to determine derivative classification What document outlines the requirements on the content of security classification and declassification guides? - ANSISOO 32 CFR parts 2001 and 2003 What does COMSEC stand for? - ANSCommunication Security (specifically tele communications)

What does comsec stand for? - ANSCommunication Security: the protection resulting from the measures designed to deny unauthorized persons information of value t6hatmight be derived from the possession and study of telecommunications and to ensure the authenticity of such communications What does DSC stand for? - ANSDefense Courier System What does FOIA stand for and what is it? - ANSThe Freedom of Information Act, recognized the need to withhold certain information from the public and provides framework on how to release sensitive information. What does Net-National-Advantage mean? - ANSInformation that is or will be valuable to the U.S., either directly or indirectly What does OCA stand for and what is their job? - ANSOriginal Classification Authority, determines how much damage could be done if the information was not protected. In so gives the information a classification level. What does the DISA, Joint Interoperability Test Command (JITC) do? - ANSOrganization that maintains a register of certified security digital facilities What does the term information system refer to? - ANSRefers to a set of information resources organized for the collection, storage, processing, maintenance, use, sharing, dissemination, disposition, display, or transmission of information.

What factors should you consider before granting state-of-the-art status? - ANS1) consider if the information is known in other countries

2. if the information has been published
3. What has already been accomplished in the field
4. Remember to solicit the opinions of technical experts in the field What is a potential compromise? - ANSThe possibility of compromise could exist but it is not known with certainty What is an initial Orientation Briefing? - ANSThe initial briefing given to all personnel on the DoD Information Security Program What is Automatic Declassification? - ANSClassified records that have been determined to have permanent historical value, will be automatically declassified on December 31st of the year that is 25 years from the date of its original classification. (9 total categories) What is DD Form 2501? - ANSCourier Authorization Card What is Mandatory Declassification review or MDR? - ANSAnother method of declassifying information, based on requesting a review of the information to see if classification is still necessary. What is NATO stand for and how many countries are in it? - ANSNorth Atlantic Treaty Organization (28 countries)

What is Net National Advantage? - ANSInformation that is or will be valuable to the U.S., either directly or indirectly What is not a reason to classify information? - ANS1) Concealment of a crime or error

2. Preventing Embarrassment
3. Restrain Competition What is restricted data and formerly restricted data? - ANSType of information that does not provide declassification instructions What is scheduled declassification? - ANSInstructions consist of either a date or event for declassification What is Security Infraction? - ANSAn event that cannot reasonably be expected to and does not result in the loss, compromise, or suspected compromise of classified information. What is STIP and what does it stand for? - ANSScientific and Technical Information Program, established to aid the transfer of technical information to qualified researchers in the U.S> industry and government agencies. What is the 32 CFR parts 2001 and 2003 "Classified National Security Information; Final Rule? - ANSThe Information Oversight Office (ISSO) document that governs the DOD Information Security Program What is the definition of a security Violation? - ANSAn event that results in or could be expected to result in the loss or compromise of classifed information

What is the definition of Actual Compromise? - ANSAn unauthorized disclosure of classified information is What is the definition of Automatic Declassification? - ANSThe declassification system where permanently Valuable Historical records are declassified when they are 25 years old What is the definition of compilation? - ANSUnclassified information or classified information (at a lower level) that when the information is combined or associated reveals additional factors that qualifies for classification What is the definition of Confidential? - ANSUnauthorized disclosure of this information could reasonably be expected to cause damage to our national security. What is the definition of Custodians? - ANSPeople who are in possession of, or who are otherwise charged with safeguarding classified information What is the definition of declassifcation? - ANSThe authorized change in the status of information going from classified information to unclassified information What is the definition of Derivative Classification? - ANSIncorporating, paraphrasing, restating, or generating in new form any information that is already classified

What is the definition of Foreign Travel Briefing? - ANSThis briefing applies to cleared personnel who plan to travel in or through foreign countries, or attend meetings attended by representative of other countries What is the definition of Mandatory Declassification Review (MDR)? - ANSDeclassification system where the public can ask for classified information to be reviewed for declassification and public release What is the definition of Original Classification Authority? - ANSUsed to identify individuals specifically authorized in writing to make initial classification decisions What is the definition of original classification? - ANSAn Initial determination that information requires, in the interest of nation security, protection against unauthorized disclosure What is the definition of Refresher Briefing? - ANSThis briefing is presented annually to personal who have access to classified information or assignment to sensitive duties What is the definition of scheduled declassification? - ANSDeclassification system where an OCA, at the time the information originally is classified, sets a date for event for declassification What is the definition of Secret? - ANSUnauthorized disclosure of this information could reasonably be expected to cause serious damage to our national security What is the definition of Security Classification Guides (SCG) - ANSContains classification levels, special requirements and duration instructions for programs, projects, plants, ... etc

What is the definition of Systematic declassification review? - ANSThe declassification system where information exempted from automatic declassification is reviewed for possible declassification What is the definition of Termination Briefing? - ANSThis briefing is given when an individual's employment is terminated, clearance eligibility is withdrawn, or if the individual will be absent from duty for 60 days or more. What is the definition of the Original Classification Process? - ANSThe six-step process an OCA applies in making classification determinations. What is the definition of Top Secret? - ANSUnauthorized disclosure of this information could reasonably be expected to cause exceptionally grave damage to our national security What is the definition of unauthorized disclosure? - ANSCommuncation or physical transfer of classified or controlled unclassified information to an unauthorized recipient What is the required content of a classification guide? - ANSSCGs must identify the subject matter, the OCA and the agency Point Of Contact, and the date of approval or last review. What is the required content of a declassification guide? - ANSSecurity declassification guides must identify the subject matter, the name and position of the OCA or declassification authority, and the date of the issuance or last review.

What is the responsibility of the Information Security Oversight Office, ISOO? - ANSTo oversee and manage the information security policy under NSC (National Security Council) What is the responsibility of the National Security Council (NSC)? - ANSTo provide the overall policy direction for the Information Security Program. It also assists the president in developing and issuing National Security Policies. What is the SF 701? - ANSActivity Security Checklist: Ensures security container is documented when opened and closed to prevent unauthorized access or disclosure of material What is the SF 702? - ANSSecurity Container Check list: used to record the opening and closing of your security container What is the USD(I) and their responsibility? - ANSThe Under Secretary of Defense for Intelligence has the primary responsibility for providing guidance, oversight, and approval authority of policies and procedures that govern the DoD Information Security Program (by issuing the DoD Instruction 5200.01). What must a briefing accomplish? - ANSEmphasizes an individual's continued responsibility to protect classified information in which they have access to. What must an OCA be trained in? - ANSOCA responsibilities, classification principles, to include avoidance of over-classification, proper safeguarding of classified information, and the criminal, civil, and administrative penalties for failing to protect classified information from unauthorized disclosure.

What must be included in a Courier Briefing? - ANS1) Courier's liability for the materials

2. Material cannot be left unattended
3. Should not be opened enroute (unless customs)
4. No public discussion
5. Follow an authorized travel route and schedule
6. In case of ER, protect classified material
7. All travel documents must be valid and current What must be included on a SCG cover page? - ANSThe name of the system, plan, program, or project; the date; the office issuing the guide, identified by name or personal identifier and position; the OCA approving the guide; a statement of supersession, if necessary; and a distribution statement. What must be submitted when requesting DOD Original Classification Authority? - ANSRequests must specify the position title for which the authority is requested, provide a brief mission specific justification for the request, and be submitted through established organizational channels. When authority is granted to a position, that authority is documented by an appointment letter What must the initial briefing accomplish? - ANSDefine classified information and provide reasons on why it needs to be protection. What topics must be covered in a derivative classification briefing? - ANSAt a minimum, the training must cover principles of derivative classification, classification levels, duration of classification, identification and markings, classification prohibitions and limitations, sanctions, classification challenges, security classification guides, and information sharing

What type of information does not provide declassification instructions? - ANSRestricted Data and Formerly Restricted Data When can Secret Information be sent via USPS? - ANSOnly when it is most effective means considering security, time, cost, and accountability When OCAs are appointed, they are given a specific area of jurisdiction (T/F) - ANSTrue, they are assigned a specific realm in which they are qualified to make original classification decisions When should you Inser the envelope into the outer envelope? - ANSWhen the document has been sealed within a properly marked inner envelope When should you use the phrase "Neither Confirm or Deny"? - ANSWhen asked about sensitive information by the media concerning classified material. When will Agency grant a request for OCA? - ANSRequests will be granted only when any existing Security Classification Guides are insufficient to address the information in question, and when it is impractical to refer decisions to another OCA. Which DOD policy document establishes the requirements and standards for developing classification guidance? - ANSDODM 5200.01, DOD Information Security Program VOL 1-

Which policy document prescribes a uniform system for classifying, safeguarding, and declassifying nation security information? - ANSE.O. 13526, Classified National Security Information Who can classify DOD info? - ANS1) Secretary of Defense

2. Secretaries of the Military Departments
3. Officials delegated by the OCA
4. Officials delegated as declassification authorities