SFPC Security Education, Training, and Awareness (SETA) 5

Question 1

A DoD civilian has been a derivative classifier for three years. An audit finds their last derivative classification training was 26 months ago, and they have kept marking products during the lapse. Under 32 CFR 2001.70 and DoDM 5200.01, what is the required outcome?

Accepted Answer

Their authority to apply derivative classification markings is suspended until they complete the training, unless the agency head or senior agency official grants a temporary waiver

Answer

Derivative classifiers must be trained at least once every 2 years. If they miss it, their authority to apply derivative classification markings is suspended until they complete the training. The only exception is a waiver from the agency head or senior agency official for unavoidable circumstances, and it lasts no more than 6 months. The clearance itself is not revoked. There is no automatic grace period and no co-signature workaround.

Question 2

An Original Classification Authority (OCA) was deployed for most of the calendar year and could not complete the required annual OCA training. Which statement correctly describes the remedy available under 32 CFR 2001.70?

Accepted Answer

The agency head or senior agency official can grant a waiver of up to 6 months for unavoidable circumstances; without a waiver, the OCA's authority is suspended

Answer

OCAs must be trained before they first exercise the authority and at least once every calendar year after that. If they miss it, their authority is suspended unless the agency head or senior agency official grants a waiver for unavoidable circumstances, which may last no more than 6 months. OCA authority cannot be redelegated. Derivative training does not substitute for OCA training, and waivers are never automatic.

Question 3

A security manager must report to leadership whether the activity's SETA program actually works. Which metric gives the strongest evidence of program effectiveness?

Accepted Answer

Trends in security incidents, infractions, and inspection findings measured against the specific behaviors the training targeted

Answer

DoD guidance calls for performance-based security education, meaning training that changes how people act on the job. Completion rates, quiz scores, and distribution counts measure activity or short-term recall, not behavior. Tracking incidents, infractions, and inspection findings against the behaviors the training targeted is the best evidence that the program is reducing risk.

Question 4

Under the NISPOM (32 CFR Part 117), a contractor employee has just received a favorable eligibility determination and signed the SF 312. They have not yet completed the company's insider threat awareness training. What is the correct course of action?

Accepted Answer

Withhold access to classified information until the employee completes insider threat training, then require annual refresher training

Answer

32 CFR 117.12 requires cleared contractor employees to complete insider threat awareness training before they are granted access to classified information, and annually after that. The SF 312 is a nondisclosure agreement, not training. The NISPOM has no grace period and no option for partial access by classification level.

Question 5

An employee who held a Top Secret clearance is retiring. At the security debriefing, they refuse to sign the security termination statement. According to DoD policy, what should the security official do?

Accepted Answer

Give the debriefing anyway, remind them of their continuing obligations, document the refusal, and report it through security channels

Answer

The obligation to protect classified information comes from the SF 312 the person already signed, and it lasts for life. Refusing the termination statement does not end it. The official should still give the debriefing, remind the person of their obligations and the penalties for unauthorized disclosure, document the refusal, and report it through security channels. Security officials cannot hold up retirement over this, and a witness cannot sign on someone else's behalf.

SFPC - Security Fundamentals Professional Certification Practice Test

SFPC - Security Fundamentals Professional Certification Practice Test

SFPC Security Education, Training, and Awareness (SETA) 5