JKO Force Protection Module 4 Study Guide: FPCON, RAM, And Physical Security Standards (2026 Edition)

This guide provides an analytical review of the operational security concepts tested in the Joint Knowledge Online (JKO) JS-US007-14 Antiterrorism Level I Awareness Training, specifically focusing on Module 4 (FPCON, physical security, and Random Antiterrorism Measures). This publication-ready resource is designed for Department of Defense (DoD) personnel, active service members, and authorized contractors preparing for the annual force protection pretest in 2026.

Core Focus of Module 4: Demystifying FPCON Levels and Operational Security

Force Protection Conditions (FPCON) constitute a progressive system designed to standardize protective measures across all DoD installations and activities. Under DoD Instruction 2000.16, the determination of FPCON levels relies on threat severity, vulnerability assessments, and the potential impact of an attack. Understanding the distinct operational triggers and mandatory actions of each FPCON level is critical to passing the Module 4 pretest.

The FPCON system is divided into five distinct states of readiness. These states are not merely bureaucratic markers; they dictate physical access, personnel requirements, and guard postures globally.

FPCON Normal

This state is maintained continuously as a baseline posture. It applies when there is a general global threat of terrorist activity, but no credible, specific threat is directed against personnel or installations. Security actions at this level represent standard operational procedures.

FPCON Alpha

This level is declared when there is an increased, general threat of possible terrorist activity directed against personnel or facilities. The nature and extent of this threat are unpredictable. Measures in FPCON Alpha must be capable of being sustained indefinitely without disrupting local operations.

FPCON Bravo

This condition is implemented when an increased or more predictable threat of terrorist activity exists. Under FPCON Bravo, security measures are heightened, requiring closer coordination with local civilian authorities and more stringent identification checks at all installation Access Control Points (ACPs).

FPCON Charlie

This condition is enacted when an incident occurs, or when intelligence is received indicating that some form of terrorist action or targeting against personnel or facilities is imminent. Implementing FPCON Charlie measures introduces significant hardship and affects the daily operations of the unit or installation.

FPCON Delta

The highest security posture, FPCON Delta, applies in the immediate area where a terrorist attack has occurred, or when intelligence indicates that terrorist action against a specific location or person is imminent. Normally, FPCON Delta is declared as a localized condition and is not sustained for extended periods due to its extreme restrictiveness on movement and resources.

Analyzing Random Antiterrorism Measures (RAM) and Surveillance Detection

Random Antiterrorism Measures (RAM) are the most effective tool available to installation commanders to disrupt terrorist planning cycles. Terrorist organizations typically rely on detailed pre-operational surveillance to identify vulnerabilities, assess response times, and map guard movements.

Because adversaries seek predictability, the strategic implementation of RAMs introduces variability into the installation's security posture. By constantly changing gate hours, alternating search frequencies, deploying working dog assets at irregular intervals, and executing spontaneous identification checks, security forces eliminate predictable windows of opportunity.

To detect surveillance, personnel must remain vigilant for specific indicators. These indicators include:

• Detailed observation: Individuals drawing maps, taking photos, or using binoculars near installation perimeters.
• Inconsistent behavior: People loitering near key infrastructure points without a clear or logical purpose.
• Probing attempts: Unauthorized individuals testing security limits, asking probing questions about shift rotations, or deliberately entering restricted zones to gauge security response times.

2026 Reference Matrix: FPCON Classifications and Action Protocols

The following matrix provides a technical breakdown of the FPCON levels, threat triggers, and mandatory actions required under current DoD Joint physical security guidelines.

Comprehensive Module 4 Pretest Concept Map & Verified Q&A Scenarios

To help you prepare for the JKO pretest without relying on unverified flashcard sites, the following scenarios represent the operational logic and exact concepts tested in the JKO JS-US007-14 exam database.

Scenario 1: The Role of the Individual in Force Protection

• Question: What is the primary responsibility of an individual regarding Force Protection and threat reporting?
• Correct Answer: Individuals must remain aware of their surroundings, recognize indicators of threat activity or surveillance, and report suspicious behavior immediately to unit security officers or law enforcement.
• Explanation: Personal vigilance serves as the first line of defense. Knowing what looks out of place in your workspace or housing area allows for rapid notification before a threat materializes.

Scenario 2: Identifying the Authority behind FPCON Shifts

• Question: Who holds the authority to declare or modify FPCON levels for a specific military installation?
• Correct Answer: Installation Commanders and Geographic Combatant Commanders.
• Explanation: While threat intelligence may originate from national agencies, the local commander possesses the ultimate authority to adjust security levels based on localized risks and mission requirements.

Scenario 3: Understanding the Practical Purpose of RAMs

• Question: Why are Random Antiterrorism Measures implemented even during times of low localized threat?
• Correct Answer: To deny adversaries a predictable security baseline and to complicate their pre-operational surveillance efforts.
• Explanation: Terrorists require predictable schedules to plan successful operations. RAMs keep the security profile dynamic and unpredictable, which acts as a powerful deterrent.

Scenario 4: Cyber and Physical Security Integration

• Question: How does the protection of personally identifiable information (PII) on social media impact physical force protection?
• Correct Answer: Restricting personal details prevents adversaries from harvesting actionable intelligence for targeting, physical tracking, or kidnapping.
• Explanation: Physical security starts online. Geotagged photos, travel itineraries, and detailed family posts can easily be used by hostile actors to plan physical attacks.

Physical Security, Access Control, and Individual Protective Actions

Physical security is a collective responsibility that extends beyond the military police or security forces at the gate. Guarding against unauthorized access requires strict adherence to physical security protocols within every office, hangar, and command post.

Preventing Access Exploits

Tailgating, also known as piggybacking, occurs when an unauthorized person closely follows an authorized cardholder through a secured door or turnstile. Combatting this vulnerability requires every individual to swipe or tap their Common Access Card (CAC) or security badge for entry, regardless of rank or familiarity. Never hold secured doors open for personnel who have not scanned their credentials.

Workplace Security Hygiene

Every service member and civilian employee must secure their physical space daily. This includes locking unattended terminals, securing classified documents in approved GSA-safes, and shredding sensitive but unclassified documents (FOUO/CUI) that could be used in social engineering attacks.

Suspicious Packages and Mail Handling

Mail-borne threats remain a persistent concern for DoD facilities. Security personnel look for specific anomalies, such as oily stains, excessive wrapping tape, strange odors, protruding wires, or lack of a return address. If a suspicious package is identified:

1. Do not handle, shake, or open the item.
2. Evacuate the immediate area and warn others.
3. Call 911 or physical security dispatch immediately from a safe distance (do not use cell phones near suspected radio-triggered devices).

Navigating JKO JS-US007-14: Tips to Pass on Your First Attempt

The JKO Force Protection exam tests your ability to apply logical security protocols to practical scenarios. To successfully complete the training and earn your certificate, keep these test-taking strategies in mind:

• Complete the Pretest Thoroughly: The JKO platform allows users to take a pretest. Scoring 80% or higher on the pretest can satisfy the annual training requirement, allowing you to bypass the full courseware. Focus heavily on understanding FPCON transitions and individual protection measures before launching the pretest.
• Read Scenario Details Carefully: Pretest questions often describe a service member traveling abroad or encountering suspicious activity at a local hotel. Pay close attention to the specific physical security breaches described in the scenario, as they will directly point to the correct protective action.
• Avoid Over-Sharing Online: Many questions focus on Operations Security (OPSEC). Remember that the correct answer regarding social media use is always the most restrictive option.

Frequently Asked Questions About the JKO Force Protection Module 4 Exam

What is the passing score for the JKO Force Protection pretest?

Answer: You must achieve a minimum score of 80% on the pretest to successfully pass and bypass the mandatory course modules.

If you fail to meet the 80% threshold on the pretest, the system will direct you to complete the individual modules, including Module 4, before allowing you to take the final course exam.

Can local commanders lower the FPCON level set by a Geographic Combatant Commander?

Answer: No, local commanders cannot lower the baseline FPCON level set by higher authority, but they can implement more stringent measures.

Local commanders possess the authority to raise the FPCON level for their specific installation if local intelligence indicates an increased threat, but they must always meet or exceed the minimum baseline established by their chain of command.

How often must DoD personnel complete the JS-US007-14 Antiterrorism Level I training?

Answer: This training is a mandatory annual requirement for all DoD military personnel, civilian employees, and designated contractors.

Annual completion ensures that personnel remain up to date on evolving global threat vectors, cyber-physical integration threats, and updated emergency response procedures.

What should you do if you detect someone taking photos of an installation gate?

Answer: Immediately report the individual's description, vehicle license plate, and actions to installation security forces or the military police.

Do not attempt to confront the individual yourself. Capture as many descriptive details as possible (make, model, color of the vehicle, direction of travel, physical features) to assist law enforcement in their investigation.

What is the difference between FPCON Charlie and FPCON Delta?

Answer: FPCON Charlie indicates that an attack is imminent or highly likely, while FPCON Delta is implemented when an attack has actually occurred or is actively underway at a specific location.

While Charlie involves significant physical barriers and severe delays, Delta involves a complete lockdown of operations, severe restriction of movement, and the immediate deployment of response forces to contain the situation.

Maintain Operational Security and Readiness Daily

Achieving a passing score on your annual Force Protection training is only the first step. True force protection requires daily diligence, constant situational awareness, and a commitment to protecting our military communities. Ensure your unit is prepared by sharing updated security resources and strictly enforcing physical security protocols at your workstation. If you witness any suspicious behavior or physical security lapses, report them immediately through your chain of command or to your local physical security office.