Vulnerability Assessment & Testing Flashcards
7 cards from real FSO practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Vulnerability Assessment & Testing flashcards as text
How often must a cleared contractor conduct a formal self-inspection of its security program under the NISP?
Answer: Annually
Cleared contractors must conduct formal self-inspections at intervals consistent with risk, and DCSA expects at least annual reviews.
Who must certify in writing that the self-inspection was completed and that senior management was briefed?
Answer: The Senior Management Official (SMO)
The SMO certifies the self-inspection and senior management review in writing.
Which DCSA security review rating is the highest?
Answer: Superior
DCSA ratings are Superior, Commendable, Satisfactory, Marginal and Unsatisfactory, with Superior the highest.
What is the primary purpose of a vulnerability assessment of a cleared facility?
Answer: Identify weaknesses that could lead to loss or compromise of classified information
Assessments identify and prioritize weaknesses so they can be corrected before classified information is compromised.
Which document is used to record the end-of-day checks of a security container's lock status?
Answer: SF-702
The SF-702 Security Container Check Sheet records opening, closing and checking of containers.
A DCSA review finds a vulnerability that has already resulted in loss, compromise or suspected compromise of classified information. How is it categorized?
Answer: Acute or critical vulnerability
Vulnerabilities that place classified information at imminent risk or have caused compromise are acute or critical.
During a self-inspection, which method best validates that employees actually understand security procedures?
Answer: Interviewing a sample of cleared employees
Employee interviews test real understanding beyond paperwork.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. We have not yet matched this exam's facts to an official source, so confirm fees, dates and rules with the exam body. Not reviewed by a subject-matter expert. Editorial policy