SFPC EXAM PREPARATION (SECURITY FUNDAMENTALS
PROFESSIONAL CERTIFICATION (SFPC) ACTUAL EXAM
LATEST VERSION 2026-2027 COMPLETE QUESTIONS AND
CORRECT DETAILED ANSWERS (VERIFIED ANSWERS)
|ALREADY GRADED A+||BRAND NEW.
What is the purpose of the Federal Acquisition Regulation (FAR)?
✔✔CORRECT ANSWER✔✔To codify and publish uniform policies and
procedures for acquisition by all executive agencies
What is the role of the Special Access Program Oversight Committee
(SAPOC) during the maintenance phase of the SAP lifecycle?
✔✔CORRECT ANSWER✔✔To review existing programs annually to
determine whether to revalidate them as SAPs
Define acquisition SAP ✔✔CORRECT ANSWER✔✔A SAP established to
protect sensitive research, development, testing, and evaluation,
modification, and procurement activities
Define intelligence SAP ✔✔CORRECT ANSWER✔✔A SAP established
primarily to protect the planning and execution of especially sensitive
intelligence or CI operations or collection activities
Define operations and support SAP ✔✔CORRECT ANSWER✔✔A SAP
established primarily to protect the planning for, execution of, and
messages.downloaded_by
,support to especially sensitive military operations. An operations and
support SAP may protect organizations, property, operational concepts,
plans, or activities
Define Security-in-Depth ✔✔CORRECT ANSWER✔✔Layered and
complementary security controls sufficient to deter, detect, and
document unauthorized entry and movement within the facility
What is the purpose of Intrusion Detection System (IDS) ✔✔CORRECT
ANSWER✔✔Deter, detect, and document
What are the components of IDS? ✔✔CORRECT ANSWER✔✔Sensors,
control or transmission units, monitor units, and computer monitoring
stations
List and define the four operational phases of IDS ✔✔CORRECT
ANSWER✔✔1. Detection: begins as soon as a detector or sensor reacts
to the stimuli
2. Reporting: begins when the premise control unit (PCU) receives
signals from sensors in the protected area and incorporates the signals
into a communication scheme
3. Dispatch: the first phase requiring human interaction - operator
initiates the appropriate response
4. Response/Assessment: initiated once a response force is dispatched
and continues when they arrive at the scene of the alarm
messages.downloaded_by
,What are the 3 types of IDS monitoring? ✔✔CORRECT ANSWER✔✔1.
Local
2. Proprietary
3. Central Station
What are the 2 types of locks? ✔✔CORRECT ANSWER✔✔1.
Combination (electromechanical/mechanical/padlock)
2. Key operated (high security padlock/low security padlock/mortise
lock)
What are the 4 types of lighting? ✔✔CORRECT ANSWER✔✔1.
Continuous
2. Standby
3. Emergency
4. Movable
What kind of electromechanical locks meet the FF-L-2740 standard to
secure classified material in security containers, vaults, or other secure
rooms? ✔✔CORRECT ANSWER✔✔Kaba Mas X-07, X-08, X-09, X-10, CDX-
07, CDX-08, CDX-09 and CDX-10 locks and S&G 2740, 2740B, and 2890
Pedestrian Door Locks.
messages.downloaded_by
, What are vulnerabilities? ✔✔CORRECT ANSWER✔✔Weaknesses,
characteristics, or circumstances that can be exploited by an adversary
to gain access to information/assets
What are the objectives of physical security? ✔✔CORRECT
ANSWER✔✔Identify assets, identify threats, identify vulnerabilities
What are host organization responsibilities for facility visits?
✔✔CORRECT ANSWER✔✔Determine the need for the visit, confirm
visitor PCL, determine NTK, control visitor access during visit
When must you obtain an export authorization for discussion of
classified information with international visitors? ✔✔CORRECT
ANSWER✔✔Both incoming and outgoing international visits. Access
control procedures should ensure that the disclosure of, and access to,
export-controlled articles and related information is limited to those
that are approved by an export authorization.
When is Technology Control Plan (TCP) needed for long-term visitors?
✔✔CORRECT ANSWER✔✔A TCP is required to control access by foreign
nationals assigned to, or employed by, cleared contractor facilities.
When should you provide threat awareness training for international
visits? ✔✔CORRECT ANSWER✔✔Both incoming and outgoing visits.
Personnel interacting with foreign visitors should receive threat
messages.downloaded_by
PROFESSIONAL CERTIFICATION (SFPC) ACTUAL EXAM
LATEST VERSION 2026-2027 COMPLETE QUESTIONS AND
CORRECT DETAILED ANSWERS (VERIFIED ANSWERS)
|ALREADY GRADED A+||BRAND NEW.
What is the purpose of the Federal Acquisition Regulation (FAR)?
✔✔CORRECT ANSWER✔✔To codify and publish uniform policies and
procedures for acquisition by all executive agencies
What is the role of the Special Access Program Oversight Committee
(SAPOC) during the maintenance phase of the SAP lifecycle?
✔✔CORRECT ANSWER✔✔To review existing programs annually to
determine whether to revalidate them as SAPs
Define acquisition SAP ✔✔CORRECT ANSWER✔✔A SAP established to
protect sensitive research, development, testing, and evaluation,
modification, and procurement activities
Define intelligence SAP ✔✔CORRECT ANSWER✔✔A SAP established
primarily to protect the planning and execution of especially sensitive
intelligence or CI operations or collection activities
Define operations and support SAP ✔✔CORRECT ANSWER✔✔A SAP
established primarily to protect the planning for, execution of, and
messages.downloaded_by
,support to especially sensitive military operations. An operations and
support SAP may protect organizations, property, operational concepts,
plans, or activities
Define Security-in-Depth ✔✔CORRECT ANSWER✔✔Layered and
complementary security controls sufficient to deter, detect, and
document unauthorized entry and movement within the facility
What is the purpose of Intrusion Detection System (IDS) ✔✔CORRECT
ANSWER✔✔Deter, detect, and document
What are the components of IDS? ✔✔CORRECT ANSWER✔✔Sensors,
control or transmission units, monitor units, and computer monitoring
stations
List and define the four operational phases of IDS ✔✔CORRECT
ANSWER✔✔1. Detection: begins as soon as a detector or sensor reacts
to the stimuli
2. Reporting: begins when the premise control unit (PCU) receives
signals from sensors in the protected area and incorporates the signals
into a communication scheme
3. Dispatch: the first phase requiring human interaction - operator
initiates the appropriate response
4. Response/Assessment: initiated once a response force is dispatched
and continues when they arrive at the scene of the alarm
messages.downloaded_by
,What are the 3 types of IDS monitoring? ✔✔CORRECT ANSWER✔✔1.
Local
2. Proprietary
3. Central Station
What are the 2 types of locks? ✔✔CORRECT ANSWER✔✔1.
Combination (electromechanical/mechanical/padlock)
2. Key operated (high security padlock/low security padlock/mortise
lock)
What are the 4 types of lighting? ✔✔CORRECT ANSWER✔✔1.
Continuous
2. Standby
3. Emergency
4. Movable
What kind of electromechanical locks meet the FF-L-2740 standard to
secure classified material in security containers, vaults, or other secure
rooms? ✔✔CORRECT ANSWER✔✔Kaba Mas X-07, X-08, X-09, X-10, CDX-
07, CDX-08, CDX-09 and CDX-10 locks and S&G 2740, 2740B, and 2890
Pedestrian Door Locks.
messages.downloaded_by
, What are vulnerabilities? ✔✔CORRECT ANSWER✔✔Weaknesses,
characteristics, or circumstances that can be exploited by an adversary
to gain access to information/assets
What are the objectives of physical security? ✔✔CORRECT
ANSWER✔✔Identify assets, identify threats, identify vulnerabilities
What are host organization responsibilities for facility visits?
✔✔CORRECT ANSWER✔✔Determine the need for the visit, confirm
visitor PCL, determine NTK, control visitor access during visit
When must you obtain an export authorization for discussion of
classified information with international visitors? ✔✔CORRECT
ANSWER✔✔Both incoming and outgoing international visits. Access
control procedures should ensure that the disclosure of, and access to,
export-controlled articles and related information is limited to those
that are approved by an export authorization.
When is Technology Control Plan (TCP) needed for long-term visitors?
✔✔CORRECT ANSWER✔✔A TCP is required to control access by foreign
nationals assigned to, or employed by, cleared contractor facilities.
When should you provide threat awareness training for international
visits? ✔✔CORRECT ANSWER✔✔Both incoming and outgoing visits.
Personnel interacting with foreign visitors should receive threat
messages.downloaded_by
