SPeD SFPC (Security Fundamentals Professional Certification) Q&A

SPeD SFPC (Security Fundamentals Professional Certification) Q&A SF 311 - CORRECT ANSWER-Agency Security Classification Management Program Data ISOO 32 CFR Parts 2001 and 2003 - CORRECT ANSWER-Classified National Security Information Final Rule Provides guidance to all government agencies on classification, downgrading, declassification, and safeguarding of classified national security information DoD Instruction 5200.01 - CORRECT ANSWER-Information Security Program and Protection of Sensitive Compartmented Information Establishes the basic information security policies for the DoD and provides a high-level framework for DoD implementation of national policy on classified national security information Authorizes the publication of DoDM 5200.01 Vol 1-4, the DoD Information Security Program DoD 5200-1.H - CORRECT ANSWER-Handbook for Writing Security Classification Guidance Provides detailed information on how to develop security classification guidance 3 levels of classification - CORRECT ANSWER-TS - grave damage to national security S - serious damage to national security C - damage to national security Original Classification - CORRECT ANSWER-This is defined as an initial determination that information requires, in the interest of national security, protection against unauthorized disclosure. Original Classification Authority - CORRECT ANSWER-Request for OCA contains mission justification and position title Delegated in writing by the president to the occupant of the position, not to an individual by name, not able to delegate further unless "acting" Specifies the highest level of the OCA can classify a piece of information and their jurisdiction Must go through training prior to exercising their authority and at least 1x a year A demonstrable and continuing need for such authority at least 2x a year 6 steps to OCA decision process - CORRECT ANSWER-Gov't Info - Determine if the information is official government information or has it already been classified by another OCA Eligibility - determine if the information is eligible for classification (not a smokescreen)Impact/harm - determine if potential for damage to national security if release occurs Designation - assign a level of classification Duration - determine duration of classification Guidance - communicate decision via SCG or properly marked source document SCG Format - CORRECT ANSWER-General instructions Overall efforts Performance and capabilities Specifications Critical elements Vulnerabilities and weaknesses Administrative data Hardware 5 Requirements of Derivative Classification - CORRECT ANSWER-1. Observe and respect OCAs original classification determination 2. Apply the required markings 3. Only use authorized sources 4. Use caution when paraphrasing 5. Take appropriate steps to resolve any doubts