SAPPC CERTIFICATION EXAM QUESTIONS WITH 100% CORRECT ANSWERS

SAPPC CERTIFICATION EXAM QUESTIONS WITH 100% CORRECT ANSWERS Arms, Ammunition, Explosives, Chemical and nuclear weapons can be stored with what types of locks? - ANSWERCombination and Key Operated Locks Briefly define a Special Access Program (SAP)? - ANSWERA program established for a specific class of classified information that imposes safeguarding and access requirements that exceed those normally required for information at the same classification level. Briefly describe the concept of insider threat? - ANSWERAn employee who may represent a threat to national security. These threats encompass potential espionage, violent acts against the Government or the nation, and unauthorized disclosure of classified information, including the vast amounts of classified data available on interconnected United States Government computer networks and systems. Briefly describe the purpose of the DD Form 254? - ANSWERConvey security requirements and classification guidance, and provide handling procedures for classified material received and/or generated on a classified contract. CI Elicitation is a form of social engineering? - ANSWERCollecting info from people though conversation. CI Foreign Travel Briefing? - ANSWERPurpose to increase awareness and personal safety, targeting by foreign intelligence, current travel warnings, & where to seek help if needed. Contractors visiting the facility do not require check-in at the front desk if they have a Common Access Card (CAC) because other control measures will be in place throughout the facility? True or False - ANSWERFalse Define derivative classification? - ANSWERIncorporating, paraphrasing, restating, or generating in new form information that is already classified and marking the newly developed material consistent with the markings that apply to the source information. Define the difference between a security infraction and a security violation? - ANSWERAn infraction cannot reasonably be expected to and does not result in the loss, compromise, or suspected compromise of classified information; whereas a violation does result in or could be expected to result in the loss or compromise of classified information. Define the purpose and function of the Militarily Critical Technologies List (MCTL)? - ANSWERServes as a technical reference for the development and implementation of DoD technology, security policies on international transfers of defense-related goods, services, and technologies as administered by the Director, Defense Technology Security Administration (DTSA). Formulation of export control proposals and export license review. Define unauthorized disclosure? - ANSWERCommunication or physical transfer of classified or controlled unclassified information to an unauthorized recipient. Describe how the roles of the security professional and the information assurance (IA) professional differ in regard to protecting DoD classified information on information technology (IT) systems. - ANSWER• The IA professional must ensure that all DoD information systems maintain appropriate levels of availability, integrity, authentication, confidentiality, and non-repudiation in order to protect and defend DoD information and networks. They must also ensure the systems are certified and accredited. • The security professional coordinates with the IA professional during the C&A process. The security professional must be aware of the nature, scope, and schedule of ongoing C&A activities within a given organization, in order to provide timely and relevant classification management direction and to ensure the physical environment is properly secured and accredited for the operations planned and that users are properly cleared and have all requisite access in time to support the mission. Describe the concept of security-in-depth? - ANSWERLayered and complementary security controls sufficient to deter, detect, and document unauthorized entry and movement within an installation or facility. Describe the CSA's role in the National Industrial Security Program (NISP)? - ANSWERTo establish an industrial security program to safeguard classified information under its jurisdiction. Describe the difference between revocation and denial in Personnel Security Program? - ANSWERRevocation: A current security eligibility determination is rescinded. Denial: An initial request for security eligibility is not granted. Describe the function of e-QIP in the personnel security program (PSP)? - ANSWER• Initiate investigations • Complete forms • Forward forms to ISP Describe the purpose of a Statement of Reason (SOR)? - ANSWERThe purpose of the SOR is to provide a comprehensive and detailed written explanation of why a preliminary unfavorable adjudicative determination was made. Describe the purpose of due process in Personnel Security Program (PSP)? - ANSWEREnsures fairness by providing the subject the opportunity to appeal an unfavorable adjudicative determination. Describe the purpose of the Foreign Visitor Program? - ANSWERTo track and approve access by a foreign entity to information that is classified; and to approve access by a foreign entity to information that is unclassified, related to a U.S. Government contract, or plant visits covered by ITAR. Describe the security professional's role in handling a security incident? - ANSWER• Secure • Safeguard • Report • Inquire (under unusual circumstances) • Investigate (under unusual circumstances) • Recommend Executive Order 13587? - ANSWERGovernment agencies to establish their own insider threat programs. Explain how effective implementation of the continuous evaluation process contributes to management of risks to DoD assets? - ANSWEREnsures that individuals with national security eligibility and access are continuously assessed through utilization of accessible databases and other lawfully available information; continue to meet adjudicative standards; and that any issues that may arise are promptly reported. Explain how the adjudication process contributes to effective risk management of DoD assets? - ANSWEREnsures that, based upon all available information, an individual's loyalty, reliability, and trustworthiness are such that entrusting assigned persons with eligibility to classified information or sensitive duties is in the best interest of national security. Explain how visitor identification control methods are used to effectively control access to facilities? - ANSWEREnsure only authorized personnel and materials enter and exit from an installation or facility by identifying, verifying, and authenticating. Explain why access control measures are contingent on threat levels? - ANSWERBased on threat levels, commanders or directors are responsible for enhancing access control measures to their installations and facilities.