SFPC- INFOSEC UPDATED ACTUAL
Exam Questions and CORRECT Answers
What are the names of the policies that provide guidance for the DoD Information Security
Program? - CORRECT ANSWER - DoDM 5200.02, Volume 1,
What are the purpose, scope, and goals of the DoD Information Security Program? - CORRECT
ANSWER - DoDM 5200.02, Volume 1,
What policies are associated with the classification, declassification, and reclassification of
information? - CORRECT ANSWER - DoDM 5200.02, Volume 1,
What is the retention policy for classified and controlled unclassified information (CUI)? -
CORRECT ANSWER - DoDM 5200.02, Volume 1,
How do the terms "need-to-know," "access," and "eligibility" relate to protecting classified
information? - CORRECT ANSWER - DoDM 5200.02, Volume 1,
What are the different levels/types of classified information? - CORRECT ANSWER -
DoDM 5200.02, Volume 1,
How do you recognize the access requirements for different categories of classified information?
(e.g., Confidential, Secret, Top Secret, Sensitive Compartmented Information (SCI), Special
Access Program (SAP), NATO) - CORRECT ANSWER - DoDM 5200.02, Volume 1,
What are the six categories of CUI? - CORRECT ANSWER - DoDM 5200.01, Volume 4,
Describe access, distribution, and dissemination controls associated with CUI. - CORRECT
ANSWER - DoDM 5200.01, Volume 4,
, How do you protect CUI? - CORRECT ANSWER - DoDM 5200.01, Volume 4,
What authorities govern foreign disclosure of classified military information? - CORRECT
ANSWER - DoDD 5230.11
What is the definition of "unauthorized disclosure?" - CORRECT ANSWER - DoDM
5200.01, Volume 3
What are the definitions of "potential and actual compromise?" - CORRECT ANSWER -
DoDM 5200.01, Volume 3
What are the differences between a security infraction and a security violation? What are the
similarities? - CORRECT ANSWER - DoDM 5200.01, Volume 3
How are security incident inquiries similar to an investigation? How are they different? -
CORRECT ANSWER - DoDM 5200.01, Volume 3
How do you coordinate security incidents with the appropriate Criminal Investigative
Organization or Defense Counterintelligence Component? - CORRECT ANSWER -
DoDM 5200.01, Volume 3
What are the requirements for reporting a potential or actual compromise? - CORRECT
ANSWER - DoDM 5200.01, Volume 3
What is the process for handling incidents of potential or actual compromise (including Original
Classification Authority Actions and Damage Assessment)? - CORRECT ANSWER -
DoDM 5200.01, Volume 3
What is original classification? Who has the authority to originally classify information? -
CORRECT ANSWER - DoDM 5200.01, Volume 1,
Exam Questions and CORRECT Answers
What are the names of the policies that provide guidance for the DoD Information Security
Program? - CORRECT ANSWER - DoDM 5200.02, Volume 1,
What are the purpose, scope, and goals of the DoD Information Security Program? - CORRECT
ANSWER - DoDM 5200.02, Volume 1,
What policies are associated with the classification, declassification, and reclassification of
information? - CORRECT ANSWER - DoDM 5200.02, Volume 1,
What is the retention policy for classified and controlled unclassified information (CUI)? -
CORRECT ANSWER - DoDM 5200.02, Volume 1,
How do the terms "need-to-know," "access," and "eligibility" relate to protecting classified
information? - CORRECT ANSWER - DoDM 5200.02, Volume 1,
What are the different levels/types of classified information? - CORRECT ANSWER -
DoDM 5200.02, Volume 1,
How do you recognize the access requirements for different categories of classified information?
(e.g., Confidential, Secret, Top Secret, Sensitive Compartmented Information (SCI), Special
Access Program (SAP), NATO) - CORRECT ANSWER - DoDM 5200.02, Volume 1,
What are the six categories of CUI? - CORRECT ANSWER - DoDM 5200.01, Volume 4,
Describe access, distribution, and dissemination controls associated with CUI. - CORRECT
ANSWER - DoDM 5200.01, Volume 4,
, How do you protect CUI? - CORRECT ANSWER - DoDM 5200.01, Volume 4,
What authorities govern foreign disclosure of classified military information? - CORRECT
ANSWER - DoDD 5230.11
What is the definition of "unauthorized disclosure?" - CORRECT ANSWER - DoDM
5200.01, Volume 3
What are the definitions of "potential and actual compromise?" - CORRECT ANSWER -
DoDM 5200.01, Volume 3
What are the differences between a security infraction and a security violation? What are the
similarities? - CORRECT ANSWER - DoDM 5200.01, Volume 3
How are security incident inquiries similar to an investigation? How are they different? -
CORRECT ANSWER - DoDM 5200.01, Volume 3
How do you coordinate security incidents with the appropriate Criminal Investigative
Organization or Defense Counterintelligence Component? - CORRECT ANSWER -
DoDM 5200.01, Volume 3
What are the requirements for reporting a potential or actual compromise? - CORRECT
ANSWER - DoDM 5200.01, Volume 3
What is the process for handling incidents of potential or actual compromise (including Original
Classification Authority Actions and Damage Assessment)? - CORRECT ANSWER -
DoDM 5200.01, Volume 3
What is original classification? Who has the authority to originally classify information? -
CORRECT ANSWER - DoDM 5200.01, Volume 1,
