SAPPC END OF COURSE QUESTIONS AND
ANSWERS SURE A+
✔✔Methods to send hard copy Confidential information - ✔✔DCS, First Class mail,
registered mail, and certified mail
✔✔True - ✔✔True or False: Hand carrying classified information should only be done
as a last resort
✔✔False - ✔✔True or False: Anyone can determine the need for hand carrying
classified information
✔✔True - ✔✔True or False: When someone is carrying classified information, written
authorization is always required
✔✔DD Form 2501 - ✔✔Courier Authorization Card
✔✔Microfiche destruction - ✔✔Burned or shredded to be destroyed. It can also be
destroyed with chemicals that destroy the imprints.
✔✔Typewriter ribbon destruction - ✔✔Ribbons must be burned or shredded
✔✔Floppy disk destruction - ✔✔Must be burned, overwritten, or demagnetized
✔✔Document destruction - ✔✔Must be burned, shredded, or chemically decomposed of
✔✔Videotape destruction - ✔✔Must be burned, shredded, or demagnetized
✔✔Initial Orientation Briefing - ✔✔The initial briefing given to all personnel on the DoD
Information Security Program
,✔✔Critical Program Information (CPI) - ✔✔Most sensitive technology information in
DoD research, development, and acquisition programs. DoD selects this to ensure that
critical capabilities and the technology that enables those capabilities receives the
highest order of protection.
✔✔CPI elements - ✔✔Elements or components of a Research, Development, and
Acquisition (RDA) program that, if compromised, could cause significant degradation in
mission effectiveness; shorten the expected combat-effective life of the system; reduce
technological advantage; significantly alter program direction; or enable an adversary to
defeat, counter, copy, or reverse engineer the technology or capability. Includes
information about applications, capabilities, processes and end-items.
✔✔Five steps for protecting CPI - ✔✔1. Program must identify CPI
2. Identify any associated threats and vulnerabilities
3. conduct risks analysis,
4. develop and implement countermeasures
5. document it all
✔✔Information Assurance - ✔✔This refers to the measures that protect and defend
information and information systems by ensuring their availability, integrity,
authentication, confidentiality, and non-repudiation. These measures include providing
for restoration of IS by incorporating protection, detection, and reaction capabilities.
✔✔Information Assurance - ✔✔The fundamentals of this helps 1. Avoid being targeted
by adversaries 2. Protect against social engineering 3. Protect against Insider Threat 4.
Protects against Identity Theft
✔✔True - ✔✔True or False. Information should be classified for the length of time that it
is in the best interest of national security to keep it protected.
✔✔Program Protection Planning - ✔✔The objective of this is to prevent exploitation of
US technology and to prevent the development of countermeasures against US
Defense systems. It aims to selectively and effectively apply security countermeasures
to COP that are cost effective and consistent with risk management principles
✔✔Program Protection Planning - ✔✔This includes Classification Management, foreign
disclosure, operations security OPSEC, system security engineering, contract and legal
aspects
✔✔Program Protection Planning - ✔✔The benefits of this are that it saves money
because it places safeguards and countermeasure son what are needed rather than
placing unnecessary safeguards on an entire program
✔✔CPI contractual requirements - ✔✔Contractors who work for DoD RDA that include
CPI must use CPI protection measures 1) determine what CPI protection measures are
, required to protect CPI for specific contracts, 2) identify those CPI protection measures
in tier requirement documentation, 3) provide the government contracting activity (GCA)
with CPI protection measures and requirements to be included in the resulting
solicitations, 4) determine what support the CPI protection will require from DSS
✔✔CPI Regulations and Requirements - ✔✔5200.39 - Critical Program Information
Protection - CPI must be identified early in the development, acquisition and
sustainment process
5200.39-M - Procedures for the Protection of CPI
5000.02 - Operation of the Defense Acquisition System - it defines with the PPP is
required
DoDI 5240.11 - Counterintelligence Activities in research, development, and acquisition;
establishes policy, assigns responsibility and provides procedures for CI for RDA
✔✔Program Manager - ✔✔CPI is identified by the ________ with the assistance of a
working level integrated product team- PM, Program protection lead, key engineers, and
key contractor personnel
✔✔Defense Acquisition Cycle - Sustainment - ✔✔Operations and Support - Full
operational capability (FOC)
✔✔CPI in Pre-system Acquisition - ✔✔CPI must be identified prior to milestone B.
CPI identification occurs mainly with in pre-system acquisition
✔✔CPI in System Acquisition - ✔✔During full-rate production decision review, the team
conducts pre-inspection research, which includes reviewing material, identifying who the
team needs to interview, and preparing a list of questions.
✔✔CPI in Sustainment - ✔✔The PM reviews for changes or upgrades that differs from
original CPI
✔✔CPI Identification Process - ✔✔1. Mission risk assessment
2. "no CPI" memo
3. Review critical technology
4. preform critical analysis
5. review inherited CPI
ANSWERS SURE A+
✔✔Methods to send hard copy Confidential information - ✔✔DCS, First Class mail,
registered mail, and certified mail
✔✔True - ✔✔True or False: Hand carrying classified information should only be done
as a last resort
✔✔False - ✔✔True or False: Anyone can determine the need for hand carrying
classified information
✔✔True - ✔✔True or False: When someone is carrying classified information, written
authorization is always required
✔✔DD Form 2501 - ✔✔Courier Authorization Card
✔✔Microfiche destruction - ✔✔Burned or shredded to be destroyed. It can also be
destroyed with chemicals that destroy the imprints.
✔✔Typewriter ribbon destruction - ✔✔Ribbons must be burned or shredded
✔✔Floppy disk destruction - ✔✔Must be burned, overwritten, or demagnetized
✔✔Document destruction - ✔✔Must be burned, shredded, or chemically decomposed of
✔✔Videotape destruction - ✔✔Must be burned, shredded, or demagnetized
✔✔Initial Orientation Briefing - ✔✔The initial briefing given to all personnel on the DoD
Information Security Program
,✔✔Critical Program Information (CPI) - ✔✔Most sensitive technology information in
DoD research, development, and acquisition programs. DoD selects this to ensure that
critical capabilities and the technology that enables those capabilities receives the
highest order of protection.
✔✔CPI elements - ✔✔Elements or components of a Research, Development, and
Acquisition (RDA) program that, if compromised, could cause significant degradation in
mission effectiveness; shorten the expected combat-effective life of the system; reduce
technological advantage; significantly alter program direction; or enable an adversary to
defeat, counter, copy, or reverse engineer the technology or capability. Includes
information about applications, capabilities, processes and end-items.
✔✔Five steps for protecting CPI - ✔✔1. Program must identify CPI
2. Identify any associated threats and vulnerabilities
3. conduct risks analysis,
4. develop and implement countermeasures
5. document it all
✔✔Information Assurance - ✔✔This refers to the measures that protect and defend
information and information systems by ensuring their availability, integrity,
authentication, confidentiality, and non-repudiation. These measures include providing
for restoration of IS by incorporating protection, detection, and reaction capabilities.
✔✔Information Assurance - ✔✔The fundamentals of this helps 1. Avoid being targeted
by adversaries 2. Protect against social engineering 3. Protect against Insider Threat 4.
Protects against Identity Theft
✔✔True - ✔✔True or False. Information should be classified for the length of time that it
is in the best interest of national security to keep it protected.
✔✔Program Protection Planning - ✔✔The objective of this is to prevent exploitation of
US technology and to prevent the development of countermeasures against US
Defense systems. It aims to selectively and effectively apply security countermeasures
to COP that are cost effective and consistent with risk management principles
✔✔Program Protection Planning - ✔✔This includes Classification Management, foreign
disclosure, operations security OPSEC, system security engineering, contract and legal
aspects
✔✔Program Protection Planning - ✔✔The benefits of this are that it saves money
because it places safeguards and countermeasure son what are needed rather than
placing unnecessary safeguards on an entire program
✔✔CPI contractual requirements - ✔✔Contractors who work for DoD RDA that include
CPI must use CPI protection measures 1) determine what CPI protection measures are
, required to protect CPI for specific contracts, 2) identify those CPI protection measures
in tier requirement documentation, 3) provide the government contracting activity (GCA)
with CPI protection measures and requirements to be included in the resulting
solicitations, 4) determine what support the CPI protection will require from DSS
✔✔CPI Regulations and Requirements - ✔✔5200.39 - Critical Program Information
Protection - CPI must be identified early in the development, acquisition and
sustainment process
5200.39-M - Procedures for the Protection of CPI
5000.02 - Operation of the Defense Acquisition System - it defines with the PPP is
required
DoDI 5240.11 - Counterintelligence Activities in research, development, and acquisition;
establishes policy, assigns responsibility and provides procedures for CI for RDA
✔✔Program Manager - ✔✔CPI is identified by the ________ with the assistance of a
working level integrated product team- PM, Program protection lead, key engineers, and
key contractor personnel
✔✔Defense Acquisition Cycle - Sustainment - ✔✔Operations and Support - Full
operational capability (FOC)
✔✔CPI in Pre-system Acquisition - ✔✔CPI must be identified prior to milestone B.
CPI identification occurs mainly with in pre-system acquisition
✔✔CPI in System Acquisition - ✔✔During full-rate production decision review, the team
conducts pre-inspection research, which includes reviewing material, identifying who the
team needs to interview, and preparing a list of questions.
✔✔CPI in Sustainment - ✔✔The PM reviews for changes or upgrades that differs from
original CPI
✔✔CPI Identification Process - ✔✔1. Mission risk assessment
2. "no CPI" memo
3. Review critical technology
4. preform critical analysis
5. review inherited CPI
