SFPC Security Incidents, Infractions and Violations

Question 1

What best distinguishes a security violation from a security infraction?

Accepted Answer

A violation is a knowing, willful, or negligent action that could cause or does cause compromise, while an infraction is a lesser rule breach without loss or compromise

Answer

Infractions are security rule failures that do not result in loss, compromise, or suspected compromise. Violations are knowing, willful, or negligent actions that could reasonably be expected to result in, or do result in, compromise of classified information.

Question 2

What is the first purpose of a preliminary inquiry after a possible loss or compromise of classified information?

Accepted Answer

To determine whether a loss, compromise, or suspected compromise actually occurred

Answer

The preliminary inquiry establishes the facts quickly: whether classified information was actually lost or compromised, and the circumstances. If it finds compromise, a more formal investigation and damage assessment may follow. Discipline is a later, separate step.

Question 3

You find a classified document left unattended on a desk after hours. What should you do first?

Accepted Answer

Take custody and safeguard it, then immediately report to the security office

Answer

Protect the material by keeping it under control until it can be secured, then report the discovery right away to security. Never leave it, copy it, or move it off-site. Reporting lets security begin the inquiry.

Question 4

A contractor facility discovers that classified material is missing. Under NISP rules, when must it be reported to the cognizant security agency?

Accepted Answer

Immediately

Answer

Cleared contractors must report loss, compromise, or suspected compromise of classified information immediately to the CSA. They must not wait until a compromise is confirmed.

Question 5

What is a 'compromise' of classified information?

Accepted Answer

The disclosure of classified information to a person who does not have an authorized need for access

Answer

A compromise is an unauthorized disclosure of classified information to someone who lacks the required clearance, authorization, or need to know. Marking errors alone are infractions unless they lead to unauthorized disclosure.

SFPC - Security Fundamentals Professional Certification Practice Test

SFPC - Security Fundamentals Professional Certification Practice Test

SFPC Security Incidents, Infractions and Violations