SFPC REVIEW EXAM 2025 WITH
CORRECT ANSWERS_GRADED A+
What is the responsibility of the Info Security Oversight Office, or ISSO? - correct answers To oversee and
- - - - - - - - - - - - - - - - - -
manage the information security program, under the guidance of the National Security Council, or NSC.
- - - - - - - - - - - - - -
What is the responsibility of the National Security Council, or NSC? - correct answers To provide the overall
- - - - - - - - - - - - - - - - - -
policy direction for the Information Security Program. It assists the President in developing and issuing
- - - - - - - - - - - - - - -
National Security Policies, and it guides and directs the implementation and application of the Executive
- - - - - - - - - - - - - - -
Order. The NSC exercises it's guidance primarily through the ISSO.
- - - - - - - - -
What is the USD(I) and their responsibility? - correct answers The Under Secretary of Defense for Intelligence
- - - - - - - - - - - - - - - - -
has the primary responsibility for providing guidance, oversight, and approval authority of policies and
- - - - - - - - - - - - - -
procedures that govern the DoD Information Security Program (by issuing theDoD Instruction 5200.01).
- - - - - - - - - - - -
The 3 levels of classified information are designated by what executive oder? - correct answers EO 13526
- - - - - - - - - - - - - - - -
What are the 5 requirements for Derivative Classification? - correct answers 1) observe and respect the OCAs
- - - - - - - - - - - - - - - - -
original class determination. (2) apply the required markings. (3) only use authorized sources (4) use caution
- - - - - - - - - - - - - - - -
when paraphrasing (5) always take the appropriate steps to resolve any doubts you have
- - - - - - - - - - - - -
,What are the 4 types of Declassification Systems? - correct answers Scheduled, Automatic, Mandatory,
- - - - - - - - - - - - - -
Systematic
What is Scheduled Declassification? - correct answers Instructions consist of either a date or event for
- - - - - - - - - - - - - - - -
declassification.
What is Automatic Declassification? - correct answers Classified records that have been determined to have
- - - - - - - - - - - - - - -
permanent historical value, will be automatically declassified on December 31st of the year that is 25 years
- - - - - - - - - - - - - - - - -
from the date of its original classification.
- - - - - - -
(There are 9 categories of information that may be classified beyond 25 years. You can easily identify this
- - - - - - - - - - - - - - - - - -
information by the use of a 25X instruction for declassification. The exemptions are annotated as 25X with the
- - - - - - - - - - - - - - - - - -
category number following the X, for example, 25X1 or 25X9.)
- - - - - - - - -
What is Mandatory Declassification Review, or MDR? - correct answers It is another method of declassifying
- - - - - - - - - - - - - - - -
information, based on requesting a review of the information to see if classification is still necessary.
- - - - - - - - - - - - - - -
What is Systematic Declassification? - correct answers A program to review classified records after a certain
- - - - - - - - - - - - - - - -
age.
What are the options an OCA has when determining declassification ? - correct answers Specific Date, Specific
- - - - - - - - - - - - - - - - -
Event, or by the 50X1-HUM Exemption
- - - - -
What type of information does not provide declassification instructions? - correct answers Restricted Data
- - - - - - - - - - - - - -
and Formerly Restricted Data
- - -
What are the purposes of the SF 701 and SF 702? - correct answers The SF 701, or the Activity Security Checklist,
- - - - - - - - - - - - - - - - - - - - - -
is used to record your End of Day checks. The SF 702, or the Security Container Check sheet, is used to record the
- - - - - - - - - - - - - - - - - - - - - - -
opening and closing of your security container.
- - - - - -
What does the term information system refer to? - correct answers Refers to a set of information resources
- - - - - - - - - - - - - - - - - -
organized for the collection, storage, processing, maintenance, use, sharing, dissemination, disposition,
- - - - - - - - - - -
display, or transmission of information.
- - - -
,What is COMSEC? - correct answers Communication Security, or COMSEC, is defined as the protection
- - - - - - - - - - - - - - -
resulting from all measures designed to deny unauthorized persons, information of value that might be
- - - - - - - - - - - - - - -
derived from the possession and study of telecommunications, and to ensure the authenticity of such
- - - - - - - - - - - - - - -
communications. COMSEC includes crypto security, emission security, transmission security, and physical - - - - - - - - - - -
security of COMSEC material and information. - - - - -
How is classified information prepared for transportation? - correct answers Classified material needs to be
- - - - - - - - - - - - - - -
prepared for shipment, packaged, and sealed in ways that minimize risk of accidental exposure and facilitates
- - - - - - - - - - - - - - - -
detection of tampering. - -
Requirements to hand carry classified information - correct answers - Should only be done as a last resort - - - - - - - - - - - - - - - - -
- - Written authorization is required
- - - -
- - Courier must be briefed
- - - -
What must be included in a Courier Briefing? - correct answers 1. Courier's liability for the materials
- - - - - - - - - - - - - - - -
2. Material cannot be left unattended
- - - - -
3. Should not be opened en route (unless customs)
- - - - - - - -
4. No public discussion
- - -
5. Follow an authorized travel route and schedule
- - - - - - -
6. In case of ER, protect classified material
- - - - - - -
7. All travel documents must be valid and current
- - - - - - - -
When can Secret information can be sent via USPS? - correct answers Only when it is the most effective means
- - - - - - - - - - - - - - - - - - - -
considering security, time, cost, and accountability. - - - - -
List 3 approved methods for destroying classified material. - correct answers Burning, shredding, pulverizing,
- - - - - - - - - - - - - -
disintegrating, pulping, melting, chemical decomposition, and mutilation to preclude recognition. - - - - - - - - -
Which agency creates the destruction standard that DoD uses? - correct answers National Security Agency
- - - - - - - - - - - - - - -
(NSA)
, What is NATO? - correct answers The North Atlantic Treaty Organization, or NATO, is an alliance of 28 countries
- - - - - - - - - - - - - - - - - - -
from North America and Europe, committed to fulfilling the goals of the North Atlantic Treaty signed on April 4,
- - - - - - - - - - - - - - - - - - -
1949, The US is a member of NATO, and as such, has access to NATO classified documents. NATO classified
- - - - - - - - - - - - - - - - - - -
information, or documents prepared by or for NATO, and NATO member nation documents that have been - - - - - - - - - - - - - - - -
released into the NATO security system, and that bear a NATO classification marking, needs to be safeguarded
- - - - - - - - - - - - - - - - -
and marked in compliance with US Security Authority for NATO, or USSAN.
- - - - - - - - - - -
List 3 FOIA exemption categories. - correct answers 1. National Defense
- - - - - - - - - - -
2. DoD personnel practices
- - -
3. Statutes
-
4. Trade secrets
- -
5. Litigation
-
6. Personal and private
- - -
7. Law enforcement
- -
8. Regulation of financial institutions
- - - -
9. Well location
- -
What is FOIA? - correct answers The Freedom of Information Act, or FOIA, recognizes the need to withhold
- - - - - - - - - - - - - - - - - -
certain types of information from public release and, therefore, establishes the guidance and framework for
- - - - - - - - - - - - - - -
evaluation information for release to the public. The FOIA provides that, for information to be exempt from
- - - - - - - - - - - - - - - - -
mandatory release, it must first fit into one of nine qualifying categories and there must be a legitimate
- - - - - - - - - - - - - - - - - -
Government purpose served by withholding it. - - - - -
What is STIP? - correct answers STIP stands for the DoD Scientific and Technical Information Program. STIP is
- - - - - - - - - - - - - - - - - -
not a control marking. STIP was established to improve and enhance the acquisition of data sources to prevent
- - - - - - - - - - - - - - - - - -
redundant research to disseminate technical information efficiently to prevent the loss of technical
- - - - - - - - - - - - -
information to US adversaries and competitors and last, but no less important, STIP was established to aid the
- - - - - - - - - - - - - - - - - -
transfer of technical information to qualified researchers in US industry and government agencies.
- - - - - - - - - - - -
List 5 common briefings. - correct answers 1. Initial
- - - - - - - -
2. Indoctrination (access to special types of class data, such as SCI/G/H/etc.)
- - - - - - - - - - -
3. Annual Refresher
- -
4. Debriefing
-
CORRECT ANSWERS_GRADED A+
What is the responsibility of the Info Security Oversight Office, or ISSO? - correct answers To oversee and
- - - - - - - - - - - - - - - - - -
manage the information security program, under the guidance of the National Security Council, or NSC.
- - - - - - - - - - - - - -
What is the responsibility of the National Security Council, or NSC? - correct answers To provide the overall
- - - - - - - - - - - - - - - - - -
policy direction for the Information Security Program. It assists the President in developing and issuing
- - - - - - - - - - - - - - -
National Security Policies, and it guides and directs the implementation and application of the Executive
- - - - - - - - - - - - - - -
Order. The NSC exercises it's guidance primarily through the ISSO.
- - - - - - - - -
What is the USD(I) and their responsibility? - correct answers The Under Secretary of Defense for Intelligence
- - - - - - - - - - - - - - - - -
has the primary responsibility for providing guidance, oversight, and approval authority of policies and
- - - - - - - - - - - - - -
procedures that govern the DoD Information Security Program (by issuing theDoD Instruction 5200.01).
- - - - - - - - - - - -
The 3 levels of classified information are designated by what executive oder? - correct answers EO 13526
- - - - - - - - - - - - - - - -
What are the 5 requirements for Derivative Classification? - correct answers 1) observe and respect the OCAs
- - - - - - - - - - - - - - - - -
original class determination. (2) apply the required markings. (3) only use authorized sources (4) use caution
- - - - - - - - - - - - - - - -
when paraphrasing (5) always take the appropriate steps to resolve any doubts you have
- - - - - - - - - - - - -
,What are the 4 types of Declassification Systems? - correct answers Scheduled, Automatic, Mandatory,
- - - - - - - - - - - - - -
Systematic
What is Scheduled Declassification? - correct answers Instructions consist of either a date or event for
- - - - - - - - - - - - - - - -
declassification.
What is Automatic Declassification? - correct answers Classified records that have been determined to have
- - - - - - - - - - - - - - -
permanent historical value, will be automatically declassified on December 31st of the year that is 25 years
- - - - - - - - - - - - - - - - -
from the date of its original classification.
- - - - - - -
(There are 9 categories of information that may be classified beyond 25 years. You can easily identify this
- - - - - - - - - - - - - - - - - -
information by the use of a 25X instruction for declassification. The exemptions are annotated as 25X with the
- - - - - - - - - - - - - - - - - -
category number following the X, for example, 25X1 or 25X9.)
- - - - - - - - -
What is Mandatory Declassification Review, or MDR? - correct answers It is another method of declassifying
- - - - - - - - - - - - - - - -
information, based on requesting a review of the information to see if classification is still necessary.
- - - - - - - - - - - - - - -
What is Systematic Declassification? - correct answers A program to review classified records after a certain
- - - - - - - - - - - - - - - -
age.
What are the options an OCA has when determining declassification ? - correct answers Specific Date, Specific
- - - - - - - - - - - - - - - - -
Event, or by the 50X1-HUM Exemption
- - - - -
What type of information does not provide declassification instructions? - correct answers Restricted Data
- - - - - - - - - - - - - -
and Formerly Restricted Data
- - -
What are the purposes of the SF 701 and SF 702? - correct answers The SF 701, or the Activity Security Checklist,
- - - - - - - - - - - - - - - - - - - - - -
is used to record your End of Day checks. The SF 702, or the Security Container Check sheet, is used to record the
- - - - - - - - - - - - - - - - - - - - - - -
opening and closing of your security container.
- - - - - -
What does the term information system refer to? - correct answers Refers to a set of information resources
- - - - - - - - - - - - - - - - - -
organized for the collection, storage, processing, maintenance, use, sharing, dissemination, disposition,
- - - - - - - - - - -
display, or transmission of information.
- - - -
,What is COMSEC? - correct answers Communication Security, or COMSEC, is defined as the protection
- - - - - - - - - - - - - - -
resulting from all measures designed to deny unauthorized persons, information of value that might be
- - - - - - - - - - - - - - -
derived from the possession and study of telecommunications, and to ensure the authenticity of such
- - - - - - - - - - - - - - -
communications. COMSEC includes crypto security, emission security, transmission security, and physical - - - - - - - - - - -
security of COMSEC material and information. - - - - -
How is classified information prepared for transportation? - correct answers Classified material needs to be
- - - - - - - - - - - - - - -
prepared for shipment, packaged, and sealed in ways that minimize risk of accidental exposure and facilitates
- - - - - - - - - - - - - - - -
detection of tampering. - -
Requirements to hand carry classified information - correct answers - Should only be done as a last resort - - - - - - - - - - - - - - - - -
- - Written authorization is required
- - - -
- - Courier must be briefed
- - - -
What must be included in a Courier Briefing? - correct answers 1. Courier's liability for the materials
- - - - - - - - - - - - - - - -
2. Material cannot be left unattended
- - - - -
3. Should not be opened en route (unless customs)
- - - - - - - -
4. No public discussion
- - -
5. Follow an authorized travel route and schedule
- - - - - - -
6. In case of ER, protect classified material
- - - - - - -
7. All travel documents must be valid and current
- - - - - - - -
When can Secret information can be sent via USPS? - correct answers Only when it is the most effective means
- - - - - - - - - - - - - - - - - - - -
considering security, time, cost, and accountability. - - - - -
List 3 approved methods for destroying classified material. - correct answers Burning, shredding, pulverizing,
- - - - - - - - - - - - - -
disintegrating, pulping, melting, chemical decomposition, and mutilation to preclude recognition. - - - - - - - - -
Which agency creates the destruction standard that DoD uses? - correct answers National Security Agency
- - - - - - - - - - - - - - -
(NSA)
, What is NATO? - correct answers The North Atlantic Treaty Organization, or NATO, is an alliance of 28 countries
- - - - - - - - - - - - - - - - - - -
from North America and Europe, committed to fulfilling the goals of the North Atlantic Treaty signed on April 4,
- - - - - - - - - - - - - - - - - - -
1949, The US is a member of NATO, and as such, has access to NATO classified documents. NATO classified
- - - - - - - - - - - - - - - - - - -
information, or documents prepared by or for NATO, and NATO member nation documents that have been - - - - - - - - - - - - - - - -
released into the NATO security system, and that bear a NATO classification marking, needs to be safeguarded
- - - - - - - - - - - - - - - - -
and marked in compliance with US Security Authority for NATO, or USSAN.
- - - - - - - - - - -
List 3 FOIA exemption categories. - correct answers 1. National Defense
- - - - - - - - - - -
2. DoD personnel practices
- - -
3. Statutes
-
4. Trade secrets
- -
5. Litigation
-
6. Personal and private
- - -
7. Law enforcement
- -
8. Regulation of financial institutions
- - - -
9. Well location
- -
What is FOIA? - correct answers The Freedom of Information Act, or FOIA, recognizes the need to withhold
- - - - - - - - - - - - - - - - - -
certain types of information from public release and, therefore, establishes the guidance and framework for
- - - - - - - - - - - - - - -
evaluation information for release to the public. The FOIA provides that, for information to be exempt from
- - - - - - - - - - - - - - - - -
mandatory release, it must first fit into one of nine qualifying categories and there must be a legitimate
- - - - - - - - - - - - - - - - - -
Government purpose served by withholding it. - - - - -
What is STIP? - correct answers STIP stands for the DoD Scientific and Technical Information Program. STIP is
- - - - - - - - - - - - - - - - - -
not a control marking. STIP was established to improve and enhance the acquisition of data sources to prevent
- - - - - - - - - - - - - - - - - -
redundant research to disseminate technical information efficiently to prevent the loss of technical
- - - - - - - - - - - - -
information to US adversaries and competitors and last, but no less important, STIP was established to aid the
- - - - - - - - - - - - - - - - - -
transfer of technical information to qualified researchers in US industry and government agencies.
- - - - - - - - - - - -
List 5 common briefings. - correct answers 1. Initial
- - - - - - - -
2. Indoctrination (access to special types of class data, such as SCI/G/H/etc.)
- - - - - - - - - - -
3. Annual Refresher
- -
4. Debriefing
-
