Security Fundamentals Professional Certification
Security Fundamentals Professional
Certification (SFPC) Exam Questions
and Answers Top Graded 2025
What is the responsibility of the Information Security Oversight
Office, or ISOO? -Correct Answer ✔To oversee and manage the information
security
program, under the guidance of the National Security Council, or NSC.
What is the responsibility of the National Security Council, or NSC? -Correct
Answer ✔To provide the overall policy direction for the Information Security
Program. It assists the President in developing and issuing National Security
Policies, and it guides and directs the implementation and application of the
Executive Order. The NSC exercises its guidance primarily through the ISOO.
What is the USD(I) and their responsibility? -Correct Answer ✔The Under
Secretary of Defense for Intelligence has the primary responsibility for providing
guidance, oversight, and approval authority of policies and procedures that govern
the DoD Information Security Program (by issuing the DoD Instruction 5200.01)
The three levels of classified information are designated by what
executive order? -Correct Answer ✔EO 13526
What are the 5 requirements for Derivative Classification? -Correct Answer ✔1)
Observe and respect the OCAs original class determination.
2) Apply the required markings
3) Only use authorized sources
4) Use caution when paraphrasing
5) Always take the appropriate steps to resolve any doubts you have
What are the 4 types of Declassification Systems? -Correct Answer ✔Scheduled,
automatic, mandatory, and systematic.
Security Fundamentals Professional Certification
,Security Fundamentals Professional Certification
What is Scheduled Declassification? -Correct Answer ✔Instructions consist of
either a date or event for declassification.
What is Automatic Declassification? -Correct Answer ✔Classified records that
have been determined to have permanent historical value, will be automatically
declassified on December 31st of the year which is 25 years from the date of its
original classification. (There are 9 categories of information that may be classified
beyond 25 years. You can easily identify this information by the use of a 25X
instruction for declassification. The exemptions are annotated as 25X with the
category number following the X, for example, 25X1 or 25X9.)
What is Mandatory Declassification Review, or MDR? -Correct Answer ✔It is
another method of declassifying information, based on requesting a review of the
information to see if classification is still necessary.
What is Systematic Declassification? -Correct Answer ✔A program to review
classified records after a certain age.
What are the options an OCA has when determining declassification? -Correct
Answer ✔Specific Date, Specific Event, or by the 50X1- HUM Exemption
What type of information does not provide declassification instructions? -Correct
Answer ✔Restricted Data and Formerly Restricted Data
What are the purposes of the SF701 and SF 702? -Correct Answer ✔The SF 701,
or the Activity Security Checklist, is used to record your End of Day checks.
The SF 702, or the Security Container Check Sheet, is used to record the opening
and closing of your security container.
What does the term Information System refer to? -Correct Answer ✔Refers to a set
of information resources organized for the collection, storage, processing,
Security Fundamentals Professional Certification
, Security Fundamentals Professional Certification
maintenance, use, sharing, dissemination, disposition, display, or transmission of
information.
What is COMSEC? -Correct Answer ✔Communications Security, or COMSEC, is
defined as the protection resulting from all measures designed to deny
unauthorized persons, information of value that might be
derived from the possession and study of telecommunications, and to ensure the
authenticity of such communications. COMSEC includes crypto security, emission
security, transmission security, and physical security of COMSEC material and
information.
How is classified information prepared for transportation? -Correct Answer
✔Classified material needs to be prepared for shipment, packaged, and sealed in
ways that minimize risk of accidental exposure and facilitates detection of
tampering.
Requirements to Hand Carry classified information -Correct Answer ✔1) Should
only be done as a last resort
2) Written authorization is required
3) Courier must be briefed
What must be included in a Courier Briefing? -Correct Answer ✔1) Courier's
liability for the materials
2) Material cannot be left unattended
3) Should not be opened en route (unless customs)
4) No public discussion
5) Follow an authorized travel route and schedule
6) In case of ER, protect classified material
7) All travel documents must be valid and current
When can Secret information can be sent via USPS? -Correct Answer ✔Only when
it is the most effective means considering security, time, cost, and accountability.
Security Fundamentals Professional Certification
Security Fundamentals Professional
Certification (SFPC) Exam Questions
and Answers Top Graded 2025
What is the responsibility of the Information Security Oversight
Office, or ISOO? -Correct Answer ✔To oversee and manage the information
security
program, under the guidance of the National Security Council, or NSC.
What is the responsibility of the National Security Council, or NSC? -Correct
Answer ✔To provide the overall policy direction for the Information Security
Program. It assists the President in developing and issuing National Security
Policies, and it guides and directs the implementation and application of the
Executive Order. The NSC exercises its guidance primarily through the ISOO.
What is the USD(I) and their responsibility? -Correct Answer ✔The Under
Secretary of Defense for Intelligence has the primary responsibility for providing
guidance, oversight, and approval authority of policies and procedures that govern
the DoD Information Security Program (by issuing the DoD Instruction 5200.01)
The three levels of classified information are designated by what
executive order? -Correct Answer ✔EO 13526
What are the 5 requirements for Derivative Classification? -Correct Answer ✔1)
Observe and respect the OCAs original class determination.
2) Apply the required markings
3) Only use authorized sources
4) Use caution when paraphrasing
5) Always take the appropriate steps to resolve any doubts you have
What are the 4 types of Declassification Systems? -Correct Answer ✔Scheduled,
automatic, mandatory, and systematic.
Security Fundamentals Professional Certification
,Security Fundamentals Professional Certification
What is Scheduled Declassification? -Correct Answer ✔Instructions consist of
either a date or event for declassification.
What is Automatic Declassification? -Correct Answer ✔Classified records that
have been determined to have permanent historical value, will be automatically
declassified on December 31st of the year which is 25 years from the date of its
original classification. (There are 9 categories of information that may be classified
beyond 25 years. You can easily identify this information by the use of a 25X
instruction for declassification. The exemptions are annotated as 25X with the
category number following the X, for example, 25X1 or 25X9.)
What is Mandatory Declassification Review, or MDR? -Correct Answer ✔It is
another method of declassifying information, based on requesting a review of the
information to see if classification is still necessary.
What is Systematic Declassification? -Correct Answer ✔A program to review
classified records after a certain age.
What are the options an OCA has when determining declassification? -Correct
Answer ✔Specific Date, Specific Event, or by the 50X1- HUM Exemption
What type of information does not provide declassification instructions? -Correct
Answer ✔Restricted Data and Formerly Restricted Data
What are the purposes of the SF701 and SF 702? -Correct Answer ✔The SF 701,
or the Activity Security Checklist, is used to record your End of Day checks.
The SF 702, or the Security Container Check Sheet, is used to record the opening
and closing of your security container.
What does the term Information System refer to? -Correct Answer ✔Refers to a set
of information resources organized for the collection, storage, processing,
Security Fundamentals Professional Certification
, Security Fundamentals Professional Certification
maintenance, use, sharing, dissemination, disposition, display, or transmission of
information.
What is COMSEC? -Correct Answer ✔Communications Security, or COMSEC, is
defined as the protection resulting from all measures designed to deny
unauthorized persons, information of value that might be
derived from the possession and study of telecommunications, and to ensure the
authenticity of such communications. COMSEC includes crypto security, emission
security, transmission security, and physical security of COMSEC material and
information.
How is classified information prepared for transportation? -Correct Answer
✔Classified material needs to be prepared for shipment, packaged, and sealed in
ways that minimize risk of accidental exposure and facilitates detection of
tampering.
Requirements to Hand Carry classified information -Correct Answer ✔1) Should
only be done as a last resort
2) Written authorization is required
3) Courier must be briefed
What must be included in a Courier Briefing? -Correct Answer ✔1) Courier's
liability for the materials
2) Material cannot be left unattended
3) Should not be opened en route (unless customs)
4) No public discussion
5) Follow an authorized travel route and schedule
6) In case of ER, protect classified material
7) All travel documents must be valid and current
When can Secret information can be sent via USPS? -Correct Answer ✔Only when
it is the most effective means considering security, time, cost, and accountability.
Security Fundamentals Professional Certification
