SECURITY ASSET PROTECTION
PROFESSIONAL
CERTIFICATION (SAPPC)
EXAMINATION CURRENT TESTING
QUESTIONS AND CORRECT ANSWERS
WITH DETAILED RATIONALES
SECTION 1: GENERAL SECURITY & SECURITY PROGRAM MANAGEMENT
D
(Questions 1–20)
O
1. The Security Asset Protection Professional Certification (SAPPC) is part of which DoD
N
certification program?
O
A. DISA Security Certification Program
B.
T
Security Professional Education Development (SPeD) Program
C. DoD Cybersecurity Workforce Certification Program
C
D. Personnel Security Certification Program
O
Correct answer: B. Security Professional Education
PY
Development (SPeD) Program
Rationale: The SAPPC is the second of four certifications within the SPeD Certification
Program. The SPeD program provides professional certification for DoD security
practitioners across multiple disciplines.
2. Which of the following is NOT a core area of expertise assessed by the SAPPC
examination?
A. Information Security
B. Personnel Security
C. Physical Security
D. Cybersecurity Operations
Correct answer: D. Cybersecurity Operations
, Page 2 of 43
Rationale: The SAPPC assesses practical application of three primary areas of expertise:
Information Security, Personnel Security, and Physical Security. Cybersecurity
Operations is not a core domain of the SAPPC.
3. What is the primary purpose of the Security Asset Protection Professional Certification
(SAPPC)?
A. To certify cybersecurity professionals
B. To provide a recognized indication of a security practitioner's ability to apply foundational
concepts to protect DoD assets
C. To replace all other security certifications
D. To certify law enforcement personnel
Correct answer: B. To provide a recognized indication of a security practitioner's ability
D
to apply foundational concepts to protect DoD assets
O
Rationale: The SAPPC provides a recognized and reliable indication of a security
practitioner's ability to apply foundational concepts, principles, and practices
N
needed to successfully perform functions, implement programs, and pursue
missions to protect DoD assets.
O
T
C
4. The SAPPC is which level within the SPeD Certification Program?
A.
O
First
B. Second
PY
C. Third
D. Fourth
Correct answer: B. Second
Rationale: The SAPPC is the second of four certifications within the SPeD Certification
Program. The first is the Security Fundamentals Professional Certification (SFPC).
5. A security professional who holds a SAPPC certification is expected to be able to:
A. Design complex security systems
B. Apply foundational security concepts and implement security programs
C. Conduct criminal investigations
D. Manage only physical security programs
, Page 3 of 43
Correct answer: B. Apply foundational security concepts and implement security
programs
Rationale: SAPPC-certified professionals are expected to apply foundational concepts,
principles, and practices needed to successfully perform functions, implement programs,
and pursue missions to protect DoD assets.
6. Which of the following best describes the role of the DoD Security Professional
Education Development (SPeD) Program?
A. To provide training only for cybersecurity professionals
B. To develop and certify security professionals across multiple disciplines
C. To replace all civilian security positions
D. To manage only physical security programs
D
Correct answer: B. To develop and certify security professionals across multiple disciplines
O
Rationale: The SPeD Program provides professional development and certification for
DoD security practitioners across multiple disciplines, including information,
N
personnel, physical, and industrial security.
O
T
7. The SAPPC certification is designed for security practitioners who:
C
A. Have no prior security experience
O
B. Have foundational knowledge and are ready to apply security concepts
PY
C. Are senior-level security executives
D. Are only involved in law enforcement
Correct answer: B. Have foundational knowledge and are ready to apply security concepts
Rationale: The SAPPC is designed for practitioners who have foundational security
knowledge and are ready to apply concepts, principles, and practices to protect DoD
assets.
8. Which of the following is a key responsibility of a security professional under the SPeD
framework?
A. Designing software applications
B. Implementing security programs to protect assets
C. Conducting financial audits
, Page 4 of 43
D. Managing human resources
Correct answer: B. Implementing security programs to protect assets
Rationale: A key responsibility of security professionals under the SPeD framework is to
implement programs and pursue missions to protect DoD assets.
9. The SAPPC certification is awarded by which organization?
A. ASIS International
B. Department of Defense (DoD) / Center for Development of
Security Excellence (CDSE)
C. Federal Bureau of Investigation (FBI)
D. National Security Agency (NSA)
D
Correct answer: B. Department of Defense (DoD) / Center for
O
Development of Security Excellence (CDSE)
Rationale: The SAPPC is a DoD certification administered through the Center for
N
Development of Security Excellence (CDSE).
O
T
10. What is the primary focus of the SAPPC examination?
C
A. Theoretical knowledge only
O
B. Practical application of security concepts
PY
C. Memorization of regulations
D. Cybersecurity technical skills
Correct answer: B. Practical application of security concepts Rationale: The SAPPC
assesses the practical application of foundational security concepts, principles, and
practices needed to perform security functions.
11. A security professional's role in pursuing cybersecurity goals includes:
A. Only implementing technical controls
B. Understanding the relationship between physical and cybersecurity
C. Ignoring cyber threats
D. Focusing only on personnel security
Correct answer: B. Understanding the relationship between physical and cybersecurity