CAL — Certified Automotive Locksmith — Questions and Answers
Question 1: When desoldering an EEPROM chip for off-board programming, which technique minimizes the risk of PCB damage?
- Using a high-wattage soldering iron at maximum temperature for speed
- Using hot air rework station with appropriate temperature and airflow settings (Correct answer)
- Prying the chip off with a flathead screwdriver
- Using a standard soldering iron with flux only on pin 1
Correct answer: Using hot air rework station with appropriate temperature and airflow settings
A hot air rework station with properly calibrated temperature and airflow settings provides even heating that minimizes the risk of PCB trace or component damage.
Question 2: Which ignition key type uses a round, hollow shaft and is associated with motorcycles, desks, and some older vehicles?
- Laser cut key
- Tubular key (Correct answer)
- Sidewinder key
- Valet key
Correct answer: Tubular key
Tubular (barrel) keys have a hollow cylindrical tip with cuts around the circumference and operate tubular pin tumbler locks found on motorcycles and other applications.
Question 3: A locksmith is called to rekey a Ford ignition that uses an 8-cut key. How many different depth positions are typically available per cut on most Ford 8-cut systems?
- 3
- 4
- 6 (Correct answer)
- 10
Correct answer: 6
Ford's standard 8-cut key system uses 6 depth levels (0–5 or 1–6 depending on the generation), giving a large number of possible key combinations.
Question 4: When an automotive ECU is described as 'virginized,' what has been done to it?
- The ECU's security has been permanently locked
- The ECU has been updated to the latest firmware version
- All vehicle-specific data has been erased, returning it to an unprogrammed factory state (Correct answer)
- The mileage data has been reset to zero
Correct answer: All vehicle-specific data has been erased, returning it to an unprogrammed factory state
Virginizing an ECU erases all vehicle-specific data from its EEPROM, returning it to an unprogrammed factory state ready for fresh programming.
Question 5: A locksmith is working on an older Toyota in an 'All Keys Lost' situation. The standard OBDII key programmer is unable to reset the immobilizer. What set of specialized tools will the locksmith most likely need to proceed by reading the immobilizer data directly?
- A key impressioning file, scope, and blank keys
- An air wedge, long reach tool, and mechanical code grabber
- A soldering iron, EEPROM reader/programmer, and a computer (Correct answer)
- A Lishi pick, key cutter, and OBDII programmer
Correct answer: A soldering iron, EEPROM reader/programmer, and a computer
When OBD programming fails or isn't an option, the locksmith must perform 'EEPROM work'. This involves physically removing the immobilizer's EEPROM chip, which requires a soldering iron, reading its data with a dedicated programmer connected to a computer, and then using that data to generate a new key file.
Question 6: What does 'NASTF Vehicle Security Professional (VSP) registration' allow automotive locksmiths to access?
- OEM security data, key codes, and programming procedures for modern vehicles (Correct answer)
- Access to manufacturer recall databases
- Direct dealer wholesale parts pricing
- Free OEM diagnostic tools for all makes
Correct answer: OEM security data, key codes, and programming procedures for modern vehicles
NASTF VSP registration grants vetted professionals access to OEM security information including key codes and immobilizer programming procedures.
Question 7: When sourcing a replacement ignition lock cylinder by key code, the locksmith must verify which additional detail to ensure the cylinder will match?
- The vehicle's paint color code
- The cylinder's application (year, make, model) and keyway profile (Correct answer)
- The odometer reading for wear estimation
- The number of door lock cylinders on the vehicle
Correct answer: The cylinder's application (year, make, model) and keyway profile
Key codes alone are not sufficient; the cylinder must match the specific keyway profile and application to physically accept the key and fit the column housing.
Question 8: When a locksmith uses an 'all-keys-lost' procedure on a modern vehicle, what is a critical prerequisite before programming new keys?
- The old key codes must be physically cut out of the BCM
- The vehicle must be running during the entire procedure
- The steering wheel must be in the locked position
- The vehicle battery must be fully charged or a battery support unit must be connected (Correct answer)
Correct answer: The vehicle battery must be fully charged or a battery support unit must be connected
Programming procedures draw significant power and communicate with sensitive ECUs; low voltage during programming can corrupt module data or cause incomplete key writes.
Question 9: When using a code cutting machine, what is the 'bitting list' used for?
- Selecting the correct key blank from inventory
- Identifying the sequence and depth values for each key cut based on the key code (Correct answer)
- Logging customer information for compliance
- Ordering replacement lock cylinders
Correct answer: Identifying the sequence and depth values for each key cut based on the key code
A bitting list (or bitting code) provides the specific depth values for each cut position on a key, allowing the code cutter to produce the correct key from the key code alone.
Question 10: What is 'key relearning' (also called 'key registration') in the context of high-security automotive systems?
- Teaching a locksmith the steps to cut a key from code
- Programming a remote's buttons to new functions
- The process by which the vehicle's immobilizer stores a new transponder's credentials (Correct answer)
- Re-cutting a worn key to restore its original bitting
Correct answer: The process by which the vehicle's immobilizer stores a new transponder's credentials
Key relearning/registration is the procedure where the vehicle's immobilizer ECU is instructed to recognize and save the cryptographic identity of a new transponder.
Question 11: A Philips PCF7936 (ID46) transponder operates in which frequency range?
- 433 MHz
- 2.4 GHz
- 315 MHz
- 125 kHz (Correct answer)
Correct answer: 125 kHz
The PCF7936 and most automotive transponder chips operate at 125 kHz, the standard low-frequency range for passive RFID ignition transponders.
Question 12: In most US states, automotive locksmiths are required to hold which type of license to legally operate?
- A general contractor's license
- A federal business permit only
- A state-issued locksmith or security services license (Correct answer)
- A mechanic's ASE certification
Correct answer: A state-issued locksmith or security services license
Most US states require locksmiths to obtain a state-issued locksmith or security services license before legally performing locksmith services.
Question 13: Which organization offers the CAL (Certified Automotive Locksmith) certification in the United States?
- NASTF (National Automotive Service Task Force)
- ALOA Security Professionals Association (Correct answer)
- ASE (Automotive Service Excellence)
- AAA (American Automobile Association)
Correct answer: ALOA Security Professionals Association
ALOA Security Professionals Association administers the CAL certification, which is widely recognized as the professional standard for automotive locksmiths.
Question 14: An automotive locksmith in the US who copies a high-security key for a customer without verifying ownership could potentially be held liable under which legal concept?
- Federal telecommunications violations
- Only minor regulatory fines
- Civil liability and potentially criminal accessory charges (Correct answer)
- No liability since the customer assumed all responsibility
Correct answer: Civil liability and potentially criminal accessory charges
Failing to verify ownership before duplicating keys can expose a locksmith to civil lawsuits and criminal accessory charges if the key is used in a theft.
Question 15: Which of the following best describes the 'under-the-door' technique for vehicle entry?
- Accessing the lock cylinder through a hole drilled under the door handle
- Removing the door threshold trim to expose the lock linkage
- Using a flexible reach tool inserted through the bottom weather seal gap to operate interior controls (Correct answer)
- Sliding a flat bar under the door sill to pop the lock rod upward
Correct answer: Using a flexible reach tool inserted through the bottom weather seal gap to operate interior controls
The under-door technique uses a flexible rod inserted through the rubber weather seal gap at the door base to reach up and operate the interior lock button or handle.
Question 16: On a tilt/telescoping steering column, what additional precaution must a locksmith take before removing the ignition lock cylinder?
- Engage the tilt lock before beginning work
- Disconnect the negative battery terminal and allow SRS capacitors to discharge (Correct answer)
- Remove the steering wheel before cylinder extraction
- Extend the column to full length to access the retaining pin
Correct answer: Disconnect the negative battery terminal and allow SRS capacitors to discharge
Tilt columns often have side-impact airbag systems near the column; disconnecting the battery and waiting for SRS capacitors to discharge prevents accidental airbag deployment.
Question 17: What is 'key impressioning' in the context of automotive lock cylinder service?
- Casting a key using silicone molding compound
- A technique of inserting a blank key and using it to identify tumbler contact points, then filing the blank until it operates the lock (Correct answer)
- Electronically cloning a key's transponder signal
- Photographing a key to measure its bitting remotely
Correct answer: A technique of inserting a blank key and using it to identify tumbler contact points, then filing the blank until it operates the lock
Key impressioning involves marking a blank key with tumbler contact points, then filing each position incrementally until the key operates the lock without disassembly.
Question 18: A 2019 Honda Civic lockout customer says the car has a hidden key slot near the door handle. What does this typically indicate?
- A mechanical key slot concealed by a cover, used when the smart key battery is dead (Correct answer)
- A secondary keypad requiring a PIN code
- A factory anti-theft lock hidden behind a snap-off cap over the door handle
- A service port for dealer-only diagnostic tools
Correct answer: A mechanical key slot concealed by a cover, used when the smart key battery is dead
Many modern smart-key vehicles conceal a mechanical key slot behind a removable cover near the handle, intended for use when the proximity key battery is depleted.
Question 19: What is the purpose of a 'tension wrench' (also called a tension bar or turning tool) when picking an automotive lock?
- It holds the vehicle door open during lockout service
- It tests the electrical resistance of transponder chips
- It cuts new key patterns into a blank
- It applies rotational pressure to the plug while pick tools manipulate the pins or wafers (Correct answer)
Correct answer: It applies rotational pressure to the plug while pick tools manipulate the pins or wafers
A tension wrench applies light rotational pressure to the lock plug so that when each pin or wafer is manipulated to the shear line, it sets in place, ultimately allowing the plug to rotate and open the lock.
Question 20: What does the term 'slam latch' refer to in automotive trunk systems?
- A latch requiring manual key operation every time the trunk is closed
- A latch that engages automatically when the trunk lid is pressed closed (Correct answer)
- A safety latch that locks the trunk above a certain vehicle speed
- An electronic latch that opens only via a dashboard button
Correct answer: A latch that engages automatically when the trunk lid is pressed closed
A slam latch (auto-latch) uses spring tension to engage automatically when the trunk lid is closed, eliminating the need to manually turn a key to secure it.
Question 21: A 'warded pick' is specifically designed for use on:
- Automotive wafer tumbler ignition locks
- Electronic RFID locks
- High-security disc detainer locks
- Simple warded locks that use obstructions (wards) in the keyway to limit key entry (Correct answer)
Correct answer: Simple warded locks that use obstructions (wards) in the keyway to limit key entry
Warded picks are shaped to bypass the wards (obstructions) in warded locks, which are relatively simple locks with limited security found on some older vehicles and cabinets.
Question 22: A customer's Toyota has a locked ECU due to failed key programming attempts. Which approach is most appropriate?
- Perform an EEPROM dump to extract and reset the attempt counter, then retry programming (Correct answer)
- Attempt 100 more key programming cycles to unlock it automatically
- Submit the vehicle to the dealership as the only option
- Replace the ignition switch and try again
Correct answer: Perform an EEPROM dump to extract and reset the attempt counter, then retry programming
Performing an EEPROM dump to locate and reset the attempt counter is the professional approach to recovering from a locked ECU state.
Question 23: On many GM vehicles, the PassLock II system sends a resistance value from the ignition lock cylinder sensor to the BCM. What happens if a new key is cut correctly but the cylinder sensor is faulty?
- The vehicle will produce a P0513 trouble code but still start
- The ignition cylinder will physically lock up and require drilling
- The key will crank the engine but the fuel injectors will not pulse (Correct answer)
- The transponder chip will become permanently deactivated
Correct answer: The key will crank the engine but the fuel injectors will not pulse
PassLock II uses a resistance signal rather than a transponder chip; a faulty sensor sends the wrong resistance, causing the BCM to cut fuel delivery even when the key turns normally.
Question 24: Which tool is commonly used to unlock a car door without a key?
- Long-reach tool (Correct answer)
- Soldering iron
- Sledgehammer
- Torque wrench
Correct answer: Long-reach tool
A long-reach tool allows locksmiths to access the internal door mechanism and unlock the vehicle without damaging the lock.
Question 25: Which of the following is a critical safety step before cutting a key by code for a customer?
- Check that the key blank is manufactured domestically
- Confirm the vehicle has no active recall notices
- Lubricate the key cutter blades
- Verify the customer is the vehicle owner through proper identification (Correct answer)
Correct answer: Verify the customer is the vehicle owner through proper identification
Verifying ownership before cutting a key by code is a critical ethical and legal responsibility to prevent unauthorized vehicle access.
Question 26: What is the significance of the 'seed and key' algorithm in automotive security systems?
- It describes the pairing sequence between a TPMS sensor and the vehicle ECU
- It refers to the physical key blank seed code used to order the correct key profile
- It is the process of seeding a new transponder chip at the factory before sale
- It is a two-step challenge-response protocol where the ECU sends a random seed and the tool must return the correct computed response to gain programming access (Correct answer)
Correct answer: It is a two-step challenge-response protocol where the ECU sends a random seed and the tool must return the correct computed response to gain programming access
Seed-key (also Security Access in UDS/ISO 14229) requires the diagnostic tool to pass a cryptographic challenge before the ECU unlocks protected functions like key programming.
CAL — Certified Automotive Locksmith
The CAL is ALOA's entry-level automotive specialist certification, testing knowledge of vehicle entry, key cutting and programming, lock cylinder and ignition service, transponder/immobilizer systems, automotive tools, and business and legal practices.
Exam Rules
- You can skip questions and return to them later
- Flag questions for review before submitting
- No feedback shown until you submit the entire exam
- Unanswered questions count as wrong — answer everything
- 10 pretest questions are mixed in and don't affect your score
- Timer auto-submits when time runs out
- Your progress is auto-saved every 30 seconds