SPeD SFPC (Security Fundamentals Professional Certification) ALL QUESTIONS & ANSWERS GRADED A+

SF 311 correct answersAgency Security Classification Management Program Data ISOO 32 CFR Parts 2001 and 2003 correct answersClassified National Security Information Final Rule Provides guidance to all government agencies on classification, downgrading, declassification, and safeguarding of classified national security information DoD Instruction 5200.01 correct answersInformation Security Program and Protection of Sensitive Compartmented Information Establishes the basic information security policies for the DoD and provides a high-level framework for DoD implementation of national policy on classified national security information Authorizes the publication of DoDM 5200.01 Vol 1-4, the DoD Information Security Program DoD 5200-1.H correct answersHandbook for Writing Security Classification Guidance Provides detailed information on how to develop security classification guidance 3 levels of classification correct answersTS - grave damage to national security S - serious damage to national security C - damage to national security Original Classification correct answersThis is defined as an initial determination that information requires, in the interest of national security, protection against unauthorized disclosure. Original Classification Authority correct answersRequest for OCA contains mission justification and position title Delegated in writing by the president to the occupant of the position, not to an individual by name, not able to delegate further unless "acting" Specifies the highest level of the OCA can classify a piece of information and their jurisdiction Must go through training prior to exercising their authority and at least 1x a year A demonstrable and continuing need for such authority at least 2x a year 6 steps to OCA decision process correct answersGov't Info - Determine if the information is official government information or has it already been classified by another OCA Eligibility - determine if the information is eligible for classification (not a smokescreen)Impact/harm - determine if potential for damage to national security if release occurs Designation - assign a level of classification Duration - determine duration of classification Guidance - communicate decision via SCG or properly marked source document SCG Format correct answersGeneral instructions Overall efforts Performance and capabilities Specifications Critical elements Vulnerabilities and weaknesses Administrative data Hardware 5 Requirements of Derivative Classification correct answers1. Observe and respect OCAs original classification determination 2. Apply the required markings 3. Only use authorized sources 4. Use caution when paraphrasing 5. Take appropriate steps to resolve any doubts Authorized Sources correct answersSCG, properly marked source documents, DD254When there is a conflict, the SCG takes precedence Extracting correct answersWhen information is taken directly from an authorized classification guidance source and is stated verbatim in a new or different document Paraphrasing/Restating correct answersWhen information is taken from an authorized source and is re-worded in a new of different document Be careful to ensure that the classification has not been changed Revealed by correct answersApplies when derivative classifiers incorporate classified information from an authorized source into a new document that is not clearly or explicitly stated in the source document but a reader can deduce the classified information from the new document by performing some level of additional interpretation or analysis Declassification correct answersThe authorized change in the status of information from classified to unclassified Instructions are placed on the front of a document and usually appear as declassify on and the date or declassify on and the event Instructions not applied to RD (determined by DOE) or FRD (deterred by DOE and DoD) SF-312 correct answersClassified Information Non-Disclosure Agreement Contractual agreement between the US Gov't and cleared employee that must be executed as a condition of access Agreement to never disclose classified information to an unauthorized person (clearance, NTK, SF-312) Unauthorized Disclosure could... correct answers- Inhibit our national defense capabilities - Adversely affect our foreign relations DoD Component Requirements correct answersAgencies add their own requirements to ensure security measures are effective for their unique missions Designate a Senior Agency Official to oversee the program Appoint a Security Manager for education and training ISCAP (Interagency Security Classifications Appeals Panel) correct answersEstablished by EO 12958 Receives guidance from EO 13526 Provides public and users of the classification system with a forum for further review of classification decisions Classification challenges Exceptions from Automatic Declassification "File Exemption Series Mandatory Declassification Review Appeals Inform Decisions Incident Reporting correct answersIncidents that result in significant consequence or may become public must be promptly reported to the OUSD(I) Espionage Unauthorized disclosure to public media Involving creation or continuation of a SAP against regulation Defense operations that could cause harm to national security Inner Mailing Wrapping correct answersAddress to official gov't activity or contractor Complete return address to your office Conspicuously marked with the highest level of classified information Include applicable special markings "RD" Sealed to minimize possibility of access without leaving evidence of tampering Handcarrying correct answersMust be done by an appropriately cleared gov't or contractor employee Written authorization always required Letter of authorization if traveling on commercial airline Written statement (DD Form 2501) if another mode of transportation Material should be double wrapped - briefcase is outer layer if locked Items may be opened en route as a last resort if required by customs or police but must be opened out of sight of the general public STIP (Scientific and Technical Information Program) correct answersNot a control marking but a program that implements distribution control statements on scientific and technical information Improves acquisition data sources Disseminated technical information efficiently Prevents loss of technical information to US adversaries and competition Aids transfer of technical information to qualified researches in industry and gov't Initial Orientation correct answersDoDM 5200.01 Vol 3 Required prior to allowing access to classified information All personnel in the organization (civilians, military, contractor support) Topics: Controlled Unclassified Information Basic security policies and procedures Individual security responsibilities and sanctions for non-compliance Need to review unclassified info prior to public access Identify DoD Senior Agency Official and Security Manager Information Security correct answersTo promote the proper and effective way to classify, protect, and downgrade official information requiring protection in the interest of national security Also promotes declassification of information no longer requiring protection EO 8381 correct answers1940 1st information security executive order