DCSA SPeD Physical Security Certification (PSC) Exam Study guide– Defense Counterintelligence and Security Agency (DCSA) SPeD Physical Security – 2026/2027 Edition – Verified Questions and Answers

DCSA SPeD Physical Security Certification (PSC) Exam Study guide– Defense Counterintelligence and Security Agency (DCSA) SPeD Physical Security – 2026/2027 Edition – Verified Questions and Answers - Each SAPF, T-SAPF, SAPCA, SAPWA, and SAPTSWA will have procedures for identification and control of visitors seeking physical access in accordance with this volume and Reference (f). _______ and __________ should be used to the maximum extent. Personal introduction and identification - When all individuals within a SAPF, T-SAPF, SAPCA, SAPWA, and SAPTSWA cannot be personally identified, a badging system may be required by the PSO. This normally occurs when a SAPF, T-SAPF, SAPCA, SAPWA, and SAPTSWA hosts more than ______ people. 25 When a badge system is considered necessary, it will be documented in the ______________and address topics such as __________________ - standard operating procedures (SOPs) - badge accountability, storage, disposition, destruction, format, and use. If card readers are used in conjunction with badges and a means exists to lock out lost, unused, and relinquished badges, the PSO or GSSO may negate the requirements in this section for _________________ badge inventory, accountability, and destruction. When not occupied, SAPFs and T-SAPFs will be alarmed in secure mode and secured with an approved General Services Administration (GSA) ___________ combination lock in accordance with Federal Specification __________. - FF-L2740A - FF-L 2740B Access control to a SAPCA will be accomplished by _________________control devices only. _____________________will not be installed on SAPCA doors and independent alarm systems will not be installed in a SAPCA - mechanical or electronic access - Spin-dial combination locks SAP Construction Procedures - SAO § (1) Review and approve or disapprove the design concept, construction security plan (CSP), and final design for each construction project before the start of construction in accordance with Reference (f) and this volume. § (2) Physically inspect a SAPF, T-SAPF, SAPCA, SAPWA, and SAPTSWA before accreditation in accordance with construction standards in Reference (f) and this volume. § (3) Provide construction advice and guidance as required. § (4) Inspect SAPFs, T-SAPFs, SAPCAs, SAPWAs, and SAPTSWAs at an interval as determined by the CA SAPCO and withdraw accreditation when situations dictate. § (5) Approve and document mitigations commensurate with the standards in Reference (f). § (6) Recommend waivers of physical security safeguards to the Director, CA SAPCO. § (7) Ensure mitigating strategies are implemented and documented in the CSP in Reference (f) when using non-U.S. citizen workers. § (8) Request construction surveillance technicians to supplement site access controls, implement screening and inspection procedures, and monitor construction and personnel in accordance with Reference (f). SAP Construction Procedures - site security manager § (1) Advise the SAO of the potential for variation from the requirements of this volume. § (2) In consultation with the SAO, develop a CSP regarding implementation of the standards of this volume and Reference (f). The CSP will include a plan of action and milestones required to document the SAPF, T-SAPF, SAPCA, SAPWA, and SAPTSWA construction from start to finish. § (3) Conduct periodic security inspections for the duration of the SAPF, T-SAPF, SAPCA, SAPWA, and SAPTSWA construction to ensure compliance with the CSP. § (4) Prepare necessary waiver requests and forward to the SAO for further processing. § (5) Investigate and document security violations or deviations from the CSP. Notify the PSO of security violations and the SAO of deviations from the CSP within 24 hours of incident detection. § (6) Implement physical access control measures in accordance with Reference (f). SAP Construction Procedures - Certified TEMPEST technical authority (CTTA)s § (1) Review construction or renovation plans to determine if TEMPEST countermeasures are required and recommend solutions. To the maximum extent practicable, TEMPEST mitigation requirements will be incorporated into the design. § (2) Provide the SAO with documented results of the review with recommendations. Accreditation . The SAO will inspect any SAP area before accreditation. Periodic re-inspections will be conducted based on threat, physical modifications, sensitivity of SAPs, and past security performance, but will be conducted no less frequently than every 3 years. Inspections, announced or unannounced, may occur at any time. The current FFC will be reviewed during inspections to ensure continued compliance. Technical surveillance countermeasures (TSCM) evaluations may be required at the discretion of the SAO, as conditions warrant, and will be implemented in accordance with DoDI 5240.05 (Reference (h)). Inspection reports will be retained within the SAPF, T-SAPF, SAPCA, SAPWA, and SAPTSWA and by the SAO. All SAPFs, T-SAPFs, SAPCAs, SAPWAs, and SAPTSWAs will maintain, on site, current copies of § (1) SAP FFC and supporting documentation. § (2) Any accreditation documents (e.g., physical, TEMPEST, and information systems) and copies of any waivers granted by the CA SAPCO. § (3) SAPF accreditation approval documentation (including mitigations and waivers). § (4) TSCM reports, for the entire period of SAPF, T-SAPF, SAPCA, SAPWA, and SAPTSWA accreditation. § (5) Operating procedures and any security documentation (including information system security authorization package, co-utilization agreements (CUAs), appointment letters, memorandums of agreement, and emergency action plans). Combinations to locks will ____ the same throughout a SAPF, T-SAPF, SAPCA, SAPWA, and SAPTSWA (e.g., doors, vaults). not be Combinations to locks installed on security containers, safes, perimeter doors, windows, and any other opening will be changed when: o (1) A combination lock is first installed or used. o (2) A combination has been subjected, or believed to have been subjected, to compromise. o (3) A person knowing the combination no longer requires access to it unless other sufficient controls exist to prevent access to the lock. o (4) The PSO, GSSO, or CPSO considers the change necessary. When the lock is taken out of service, the combination will be reset to 50-25-50 SAPF Construction Guidance - DODM 5105.21, Volume 1 - DODM 5105.21, Volume 2 o SCI administrative security manual: administration of physical security, visitor control and technical security - DODM 5200.01 V3 - DoD o information security program: protection of classified material o guidance for safeguarding, storage, destruction, transmission, and transportation of classified material - DODM 5105.21, Volume 3 - DODM 5205.07, Volume 3 o DoD SAF security manual: physical security - IC Tech Spec-for ICD/ICS 705 o Tech spec for construction o Establishes physical security specs and best practices - ICD 705-1 o Applies to facilities with SCI related SAPs - ICS 705-2 o Standards of the accreditation and reciprocal use of SCI facilities - ICD 705-1 o Applies to facilities with SCI related SAPs ICS 705-2 o Standards of the accreditation and reciprocal use of SCI facilities SAO inspects SAPF for accreditation and every 3 years Criteria for doors SCIF - Steel doors o 1 ¾ inches thick o 18 gauge face steel o Lock area predrilled and/or reinforced with 10 gauge Criteria for doors SCIF - Roll up Doors o 18 gauge steel or greater o Secured inside using deadbolts on both sides o Non discussion area Criteria for doors SCIF - Double doors o Independent high security switch on each side o One of the doors secured with deadbolts at top and bottom o Astragal strip o Door sweep SCIF Door Locking Devices § DoD Lock Program provides field support § ICD/ICS 705 § Doors must have · FF L 2890 - pedestrian door deadbolts · FF L 2740 - combination locks · Approved access-control device · May be equipped with a high security keyway SAPF door criteria · Primary entrance doors must have an approved access control device o ID badge or card in conjunction with an access control device that validates the ID of the person to whom the card is issued o PIN for each individual o Biometric ID · May be equipped with a high security keyway in case of failure Hardware o Hinges must be non removeable o Automatic, non hold door closer Emergency doors o Deadlocking panic hardware FF L 2890 o Be alarmed at all times o Have no exterior hardware o Must be secured with deadlocking panic hardware on the inside o Provide a local, audible annunciation when opened SAPF Windows - Windows shall be non opening - Protected by security alarms when they are within 18 feet from the ground - Visual and acoustic protection o Must meet acoustic level of facility - Must be treated to provide RF protection - All windows less than 18 feet from the ground or from the nearest platform affording access to the windows, shall be protect against forced entry SAPF Vents and Ducts o ICD/ICS 705, Chapter 3, section G7 o Electrical utilities should enter at a single point o Treated for acoustics or RF o Must meet sound acoustic requirements o Vent bars for vents that exceed 96 inches o If one dimension of the penetration measures less than six inches, bars or grilles are not required o Bars are ½ diameter steel and welded 6 inches on center o Vent grill § ¾ inch mesh, #9 (10 gauge), case hardened, expanded metal § Welded wire fabric - 6 gauge SAP Compartmented Areas o A SAP CA is an area, room, or set of rooms within a SAPF that provides controlled separation o Approved by SAO o SAP CA FFC used to request approval o Access requirements § Controlled by visual recognition or mechanical/electronic access control device § Spin dial combination locks shall not be used, nor shall alarms systems o Acoustic protection § ICD/ICS 705, chapter 3 (wall types a, b, and c) or with brick, concrete, should provide the necessary acoustic protection for sound group 3 Closed storage o All information shall be stored while not in use, then all of the following shall apply § Access and visual controls ID for SAP compartment areas shall be the standard safeguard § Compartmented info shall be physically stored in a GSA approved container Open o Classified information does not need to be stored in a GSA approved container Perimeter wall construction criteria § Will not have any forced entry or acoustic requirements if closed storage Wall Type A § Closed storage, continuous operation, open storage with SID § Sound group 3 rating - 3 sheets of 5/8 gypsum wallboard · 1 layer on uncontrolled side · 2 layers on controlled side § Attached to 3 5/8 wide 16 gauge metal studs or wooden 2/4 studs placed no less than 16 inches on center § Interior 2 lays mounted so seams do not align § Acoustic fill 3 ½ thick Wall Type B § Open storage area without SID § Difference between A and B is that B has ¾ mesh, #9 (10 guage) expanded metal shall be affixed to the interior side of the SAPF perimeter wall studs Wall Type C § Open storage without SID § Sound group 3 rating - 3 sheets of 5/8 gypsum wallboard · 2 layer on uncontrolled side · 1 layers on controlled side § Difference between A and C is the addition of ½ plywood on the controlled side Floors and ceilings § Constructed to meet the same standard for force entry protection and acoustic protection as walls All floor and ceiling penetrations shall be kept to a minimum Sound group 3 - STC 45 or better § Loud speech from within the SAPF can be faintly heard but not understood outside the SAPF § Normal speech is unintelligible Sound group 4 - STC 50 or better § Very loud sounds within the SAPF, such as loud singing, brass music, or a radio at full volume, can be heard with the human ear faintly or not at all outside the SAPF Sound transmission mitigations § ICD 705, chapter 3, section E requirements · When practical, entrance doors should incorporate a vestibule · SAPF doors and from assemblies shall meet acoustic requirements as described in Chapter 9 unless declared a non discussion area § If can not meet sound group 3 or 4 then · Use sound source generators · Structural enhancements · Masking devices SAPF Visits and Meetings - Advanced Notification - A written or electronic visit notification must be approved before visiting a SAPF. Centralized personnel security databases may be used for access verification if authorized in writing by the responsible PSO or CA SAPCO, however GPM or designated representative approval of the visit is still required. All visit requests will be transmitted via PSO-approved channels. - ADVANCED NOTICE. SAP accessed personnel must make every effort to provide advance notification of the visit to their GSSO or CPSO. Visitors who courier classified material will provide travel itinerary, storage requirements, and emergency contact information to their GSSO or CPSO and the destination GSSO or CPSO. SAPF Visits and Meetings - Duration - Visit request authorizations in excess of 12 months are not permitted unless approved in writing by the PSO SAPF Visits and Meetings - Validation of visitor's ID - . The positive identification of each visitor will be made using an authorized credential in accordance with DoDM 5200.08, Volume 3 (aa); the identification number of the credential to be used will be annotated on the visit request. SAPF Visits and Meetings - Foreign Visitors - Foreign nationals visiting a SAPF will be approved by the CA SAPCO or designee. Visitor Records Unless a PSO approved electronic visitor record is on file, the security officer will maintain segregated visitor logs for non-briefed and SAP accessed personnel. The visitor record will contain the visitor's: (NOTSICD) - a. First and last name. - b. Organization or firm. - c. Date visited. - d. Time in and out. - e. Sponsor. - f. Identification number of authorized credential in accordance with Reference (aa). - g. Citizenship. - h. Purpose. UNFORESEEN OPERATIONAL OR EMERGENCY SITUATIONS. - When unforeseen events prevent providing a written or electronic visit notification, visit approval may be provided telephonically by the PSO or designee. Written certification and confirmation will follow verbal authorization within 24 hours. TPI mandates the minimum of _____ indoctrinated persons at all times in a SAPF, T-SAPF, SAPCA, SAPWA, and SAPTSWA. This security protection can only be authorized by the Director, CA SAPCO or designee, and reflected in the ______. 2, SOP SAPF Co-Utilization Requirements - DoD Components that want to co-utilize a SAPF, T-SAPF, SAPCA, SAPWA, and SAPTSWA will accept the current accreditation of the responsible agency if accredited without waiver to the standards in this volume. - Before creating a SAPCA in a SCIF or using sensitive compartmented information (SCI) in a SAPF or SAPCA, a CUA will be established in accordance with Enclosure 2 of Volume 2 of DoD Manual (DoDM) 5105.21 (Reference (i)). SAPF Entry/Exit Inspections - Inspections will deter the unauthorized removal of classified material and the introduction of prohibited items or contraband. Legal counsel should review all personnel inspection procedures before distribution IDS o An automated system that detects intrusion o Open windows, doors, movement, ect... o Consists of sensors and premise control unit (PCU) IDS - General requirements o Must be armed when not occupied o Protect doors that are not under constant visual observation o Physically occupy the facility if the IDS is interrupted o Address IDS failure in the facility emergency plan o UL 2050 compliance o UL 639 motion sensors and UL 634 high security switches for walls common to areas not protected at the SAP level o IDS must be separate from fire, smoke, and radon systems IDS - System components o Sensors - located on SAPF perimeter o PCUs § Transmits alarm conditions to a remote terminal § Placed within SAPF § Cabling placed within SAPF § Be dedicated to the system § Detects · Intrusion detection · Failed sensor · Tamper detection · Maintenance mode · IDS transmission lines leaving the SAPF must meet FIPS for certified encrypted lines SAPF perimeter doors shall be protected by an _____ and a __________ HSS, motion detection sensor Emergency exit doors shall be alarmed and monitored 24 hours a day Host system shall log and monitor failed login attempts The following PEDs without loadable data storage capabilities are authorized within the SAPF, T-SAPF, SAPCA, SAPWA, and SAPTSWA. o (1) Electronic calculators, spell checkers, language translators, etc. o (2) Receive-only pagers. o (3) Audio and video playback devices. o (4) Receive-only radios. o (5) Devices that do not transfer, receive, store, or generate data (text, audio, video, etc.). Medical devices with a two-way capability require approval by the PSO or SAO. Mission-essential government- or contractor- owned PEDs introduced into the SAPF, TSAPF, SAPCA, SAPWA, and SAPTSWA will be approved by the - PSO and AO or designee in accordance with Reference (f) before entering the SAPF, T-SAPF, SAPCA, SAPWA, and SAPTSWA. The ________________ will establish procedures within the SOP for notification that those PED/MEDs needed by persons with disabilities or for medical or health reasons is being brought into the SAPF, T-SAPF, SAPCA, SAPWA, and SAPTSWA. PSO, GSSO, or CPSO Areas where SAP material is processed, stored, discussed, manufactured, or tested may fall into one of these categories: SAPF, T-SAPF, SAPCA, SAPWA, and SAPTSWA SAPF · (to include a T-SAPF) or SAPCA is an accredited area where SAP materials may be stored, used, discussed, manufactured, or electronically processed. SAPFs or SAPCAs may include fixed facilities, mobile platforms, and modular or prefabricated structures. Physical security protection for a SAPF or SAPCA will prevent as well as detect unauthorized visual, acoustical, technical, and physical access by unauthorized persons. Physical security criteria are governed by whether or not the SAPF or SAPCA is located in the United States and according to the operational criteria of closed storage, open storage, or continuous operations. Reference (f) details the specific construction, physical controls, and alarm systems for each situation. Physical security protection for a SAPF or SAPCA will prevent as well as detect unauthorized visual, acoustical, technical, and physical access by unauthorized persons SAPCA · is required when different compartmented programs are sharing the same SAPF and SCIF and not all personnel are cross-briefed. CA SAPCO designated SAO concurrence with visual, acoustic, and access control measures is required. Compartmented area personnel do not have to be briefed to the accreditation level of the parent SAPF or SCIF. However, appropriate operating procedures must be approved by the responsible PSO(s) or GSSOs that ensure separation of non cleared personnel from the various SAPs operating in the SAPF or SCIF and the SAPCA. DoD SAPs will only be stored, used, discussed, manufactured, or electronically processed in Compartmented Area levels 2 or 3, as defined in Reference (g). SAPWA (SAP Working Area) is an accredited area used for discussing, handling, or processing SAP. Storage of SAP material in a SAPWA is not authorized SAPTSWA (SAP Temporary Secure Working Area) is an accredited area where handling, discussing, or processing of SAP is limited to less than 40 hours per month and the accreditation is limited to 12 months or less. Reaccreditation as a SAPTSWA requires a new physical inspection of the area. Storage of SAP material in a SAPTSWA is not authorized.