SFPC Exam Review Questions and
Answers
What is the responsibility of the Info Security Oversight Office, or ISSO? - Answer-To oversee and
manage the information security program, under the guidance of the National Security Council, or NSC.
What is the responsibility of the National Security Council, or NSC? - Answer-To provide the overall
policy direction for the Information Security Program. It assists the President in developing and issuing
National Security Policies, and it guides and directs the implementation and application of the Executive
Order. The NSC exercises it's guidance primarily through the ISSO.
What is the USD(I) and their responsibility? - Answer-The Under Secretary of Defense for Intelligence
has the primary responsibility for providing guidance, oversight, and approval authority of policies and
procedures that govern the DoD Information Security Program (by issuing theDoD Instruction 5200.01).
The 3 levels of classified information are designated by what executive oder? - Answer-EO 13526
What are the 5 requirements for Derivative Classification? - Answer-1) observe and respect the OCAs
original class determination. (2) apply the required markings. (3) only use authorized sources (4) use
caution when paraphrasing (5) always take the appropriate steps to resolve any doubts you have
What are the 4 types of Declassification Systems? - Answer-Scheduled, Automatic, Mandatory,
Systematic
,What is Scheduled Declassification? - Answer-Instructions consist of either a date or event for
declassification.
What is Automatic Declassification? - Answer-Classified records that have been determined to have
permanent historical value, will be automatically declassified on December 31st of the year that is 25
years from the date of its original classification.
(There are 9 categories of information that may be classified beyond 25 years. You can easily identify
this information by the use of a 25X instruction for declassification. The exemptions are annotated as
25X with the category number following the X, for example, 25X1 or 25X9.)
What is Mandatory Declassification Review, or MDR? - Answer-It is another method of declassifying
information, based on requesting a review of the information to see if classification is still necessary.
What is Systematic Declassification? - Answer-A program to review classified records after a certain age.
What are the options an OCA has when determining declassification ? - Answer-Specific Date, Specific
Event, or by the 50X1-HUM Exemption
What type of information does not provide declassification instructions? - Answer-Restricted Data and
Formerly Restricted Data
What are the purposes of the SF 701 and SF 702? - Answer-The SF 701, or the Activity Security Checklist,
is used to record your End of Day checks. The SF 702, or the Security Container Check sheet, is used to
record the opening and closing of your security container.
What does the term information system refer to? - Answer-Refers to a set of information resources
organized for the collection, storage, processing, maintenance, use, sharing, dissemination, disposition,
display, or transmission of information.
What is COMSEC? - Answer-Communication Security, or COMSEC, is defined as the protection resulting
from all measures designed to deny unauthorized persons, information of value that might be derived
,from the possession and study of telecommunications, and to ensure the authenticity of such
communications. COMSEC includes crypto security, emission security, transmission security, and
physical security of COMSEC material and information.
How is classified information prepared for transportation? - Answer-Classified material needs to be
prepared for shipment, packaged, and sealed in ways that minimize risk of accidental exposure and
facilitates detection of tampering.
Requirements to hand carry classified information - Answer-- Should only be done as a last resort
- Written authorization is required
- Courier must be briefed
What must be included in a Courier Briefing? - Answer-1. Courier's liability for the materials
2. Material cannot be left unattended
3. Should not be opened en route (unless customs)
4. No public discussion
5. Follow an authorized travel route and schedule
6. In case of ER, protect classified material
7. All travel documents must be valid and current
When can Secret information can be sent via USPS? - Answer-Only when it is the most effective means
considering security, time, cost, and accountability.
List 3 approved methods for destroying classified material. - Answer-Burning, shredding, pulverizing,
disintegrating, pulping, melting, chemical decomposition, and mutilation to preclude recognition.
Which agency creates the destruction standard that DoD uses? - Answer-National Security Agency (NSA)
, What is NATO? - Answer-The North Atlantic Treaty Organization, or NATO, is an alliance of 28 countries
from North America and Europe, committed to fulfilling the goals of the North Atlantic Treaty signed on
April 4, 1949, The US is a member of NATO, and as such, has access to NATO classified documents. NATO
classified information, or documents prepared by or for NATO, and NATO member nation documents
that have been released into the NATO security system, and that bear a NATO classification marking,
needs to be safeguarded and marked in compliance with US Security Authority for NATO, or USSAN.
List 3 FOIA exemption categories. - Answer-1. National Defense
2. DoD personnel practices
3. Statutes
4. Trade secrets
5. Litigation
6. Personal and private
7. Law enforcement
8. Regulation of financial institutions
9. Well location
What is FOIA? - Answer-The Freedom of Information Act, or FOIA, recognizes the need to withhold
certain types of information from public release and, therefore, establishes the guidance and framework
for evaluation information for release to the public. The FOIA provides that, for information to be
exempt from mandatory release, it must first fit into one of nine qualifying categories and there must be
a legitimate Government purpose served by withholding it.
What is STIP? - Answer-STIP stands for the DoD Scientific and Technical Information Program. STIP is not
a control marking. STIP was established to improve and enhance the acquisition of data sources to
prevent redundant research to disseminate technical information efficiently to prevent the loss of
technical information to US adversaries and competitors and last, but no less important, STIP was
established to aid the transfer of technical information to qualified researchers in US industry and
government agencies.
List 5 common briefings. - Answer-1. Initial
Answers
What is the responsibility of the Info Security Oversight Office, or ISSO? - Answer-To oversee and
manage the information security program, under the guidance of the National Security Council, or NSC.
What is the responsibility of the National Security Council, or NSC? - Answer-To provide the overall
policy direction for the Information Security Program. It assists the President in developing and issuing
National Security Policies, and it guides and directs the implementation and application of the Executive
Order. The NSC exercises it's guidance primarily through the ISSO.
What is the USD(I) and their responsibility? - Answer-The Under Secretary of Defense for Intelligence
has the primary responsibility for providing guidance, oversight, and approval authority of policies and
procedures that govern the DoD Information Security Program (by issuing theDoD Instruction 5200.01).
The 3 levels of classified information are designated by what executive oder? - Answer-EO 13526
What are the 5 requirements for Derivative Classification? - Answer-1) observe and respect the OCAs
original class determination. (2) apply the required markings. (3) only use authorized sources (4) use
caution when paraphrasing (5) always take the appropriate steps to resolve any doubts you have
What are the 4 types of Declassification Systems? - Answer-Scheduled, Automatic, Mandatory,
Systematic
,What is Scheduled Declassification? - Answer-Instructions consist of either a date or event for
declassification.
What is Automatic Declassification? - Answer-Classified records that have been determined to have
permanent historical value, will be automatically declassified on December 31st of the year that is 25
years from the date of its original classification.
(There are 9 categories of information that may be classified beyond 25 years. You can easily identify
this information by the use of a 25X instruction for declassification. The exemptions are annotated as
25X with the category number following the X, for example, 25X1 or 25X9.)
What is Mandatory Declassification Review, or MDR? - Answer-It is another method of declassifying
information, based on requesting a review of the information to see if classification is still necessary.
What is Systematic Declassification? - Answer-A program to review classified records after a certain age.
What are the options an OCA has when determining declassification ? - Answer-Specific Date, Specific
Event, or by the 50X1-HUM Exemption
What type of information does not provide declassification instructions? - Answer-Restricted Data and
Formerly Restricted Data
What are the purposes of the SF 701 and SF 702? - Answer-The SF 701, or the Activity Security Checklist,
is used to record your End of Day checks. The SF 702, or the Security Container Check sheet, is used to
record the opening and closing of your security container.
What does the term information system refer to? - Answer-Refers to a set of information resources
organized for the collection, storage, processing, maintenance, use, sharing, dissemination, disposition,
display, or transmission of information.
What is COMSEC? - Answer-Communication Security, or COMSEC, is defined as the protection resulting
from all measures designed to deny unauthorized persons, information of value that might be derived
,from the possession and study of telecommunications, and to ensure the authenticity of such
communications. COMSEC includes crypto security, emission security, transmission security, and
physical security of COMSEC material and information.
How is classified information prepared for transportation? - Answer-Classified material needs to be
prepared for shipment, packaged, and sealed in ways that minimize risk of accidental exposure and
facilitates detection of tampering.
Requirements to hand carry classified information - Answer-- Should only be done as a last resort
- Written authorization is required
- Courier must be briefed
What must be included in a Courier Briefing? - Answer-1. Courier's liability for the materials
2. Material cannot be left unattended
3. Should not be opened en route (unless customs)
4. No public discussion
5. Follow an authorized travel route and schedule
6. In case of ER, protect classified material
7. All travel documents must be valid and current
When can Secret information can be sent via USPS? - Answer-Only when it is the most effective means
considering security, time, cost, and accountability.
List 3 approved methods for destroying classified material. - Answer-Burning, shredding, pulverizing,
disintegrating, pulping, melting, chemical decomposition, and mutilation to preclude recognition.
Which agency creates the destruction standard that DoD uses? - Answer-National Security Agency (NSA)
, What is NATO? - Answer-The North Atlantic Treaty Organization, or NATO, is an alliance of 28 countries
from North America and Europe, committed to fulfilling the goals of the North Atlantic Treaty signed on
April 4, 1949, The US is a member of NATO, and as such, has access to NATO classified documents. NATO
classified information, or documents prepared by or for NATO, and NATO member nation documents
that have been released into the NATO security system, and that bear a NATO classification marking,
needs to be safeguarded and marked in compliance with US Security Authority for NATO, or USSAN.
List 3 FOIA exemption categories. - Answer-1. National Defense
2. DoD personnel practices
3. Statutes
4. Trade secrets
5. Litigation
6. Personal and private
7. Law enforcement
8. Regulation of financial institutions
9. Well location
What is FOIA? - Answer-The Freedom of Information Act, or FOIA, recognizes the need to withhold
certain types of information from public release and, therefore, establishes the guidance and framework
for evaluation information for release to the public. The FOIA provides that, for information to be
exempt from mandatory release, it must first fit into one of nine qualifying categories and there must be
a legitimate Government purpose served by withholding it.
What is STIP? - Answer-STIP stands for the DoD Scientific and Technical Information Program. STIP is not
a control marking. STIP was established to improve and enhance the acquisition of data sources to
prevent redundant research to disseminate technical information efficiently to prevent the loss of
technical information to US adversaries and competitors and last, but no less important, STIP was
established to aid the transfer of technical information to qualified researchers in US industry and
government agencies.
List 5 common briefings. - Answer-1. Initial
