ALOA Certified Professional Locksmith (CPL) — Questions and Answers

Question 1: What does 'total position change' (TPC) refer to in key system design?

The total number of master key levels
The number of unique change keys possible in a system (Correct answer)
The maximum depth a cut can be made on any key
The number of pins in the deepest pin stack

Correct answer: The number of unique change keys possible in a system

Total position change (TPC) is the total number of unique individual change key combinations available in a master key system.

Question 2: Which document should a locksmith review first when beginning a security assessment for a commercial facility?

The building permit records
The facility's existing security policy and risk management plan (Correct answer)
The manufacturer's installation guides for existing locks
The building's electrical schematics

Correct answer: The facility's existing security policy and risk management plan

Reviewing the existing security policy establishes the baseline and objectives against which current vulnerabilities are measured.

Question 3: In most U.S. states, a locksmith who operates without a required license may face:

A mandatory training course with no penalty
Only a written warning
Fines and possible criminal charges (Correct answer)
Loss of tools only

Correct answer: Fines and possible criminal charges

Unlicensed locksmith practice in states with licensing laws can result in fines, civil liability, and in some cases criminal prosecution.

Question 4: A Ford vehicle displays 'No Key Detected' but the blade cuts are correct. What should be checked first?

Replace the ignition cylinder
Verify the transponder is programmed to the vehicle's PATS system (Correct answer)
Check the door lock actuators
Re-cut the key blade

Correct answer: Verify the transponder is programmed to the vehicle's PATS system

Ford's PATS (Passive Anti-Theft System) requires the transponder chip to be programmed to the vehicle; correct cuts alone won't allow starting.

Question 5: When installing a padlock hasp, where should the screws be positioned relative to the hasp body when closed?

On the back of the door
Exposed on the outside for easy access
In the door frame only
Concealed under the hasp body when the hasp is closed (Correct answer)

Correct answer: Concealed under the hasp body when the hasp is closed

Hasp screws must be concealed under the closed hasp body to prevent an intruder from removing the screws to defeat the lock.

Question 6: What is the function of the 'anti-drill' plate found in some high-security lock cylinders?

Blocks key duplication
Protects against drilling attacks by containing hardened steel inserts (Correct answer)
Prevents picking of the lock
Prevents bumping attacks

Correct answer: Protects against drilling attacks by containing hardened steel inserts

Anti-drill plates contain hardened steel pins or inserts that cause drill bits to skip and wear out, protecting the cylinder from drilling attacks.

Question 7: When evaluating an outswing door during a security survey, which hinge-related factor represents the greatest security vulnerability?

Having only two hinges installed rather than three
The finish color matching the other door hardware
The brand and manufacturer of the hinges installed
Exposed exterior hinges with removable pins that allow the door to be lifted off (Correct answer)

Correct answer: Exposed exterior hinges with removable pins that allow the door to be lifted off

On outswing doors, exposed hinges with removable pins are a critical vulnerability because an attacker can remove the pins to lift the door off its frame without defeating the lock.

Question 8: What is a 'proximity key' or 'smart key' system, and how does it differ from a standard transponder key?

It communicates passively without requiring key insertion, enabling push-button start (Correct answer)
It uses a higher-frequency transponder chip only
It stores the VIN number in the key
It uses rolling codes for blade cuts

Correct answer: It communicates passively without requiring key insertion, enabling push-button start

Proximity (smart) keys use low-frequency signals to communicate with the vehicle passively; the driver can start the vehicle without inserting the key, as long as the fob is inside.

Question 9: What is 'tailgating' (also called piggybacking) in physical security terminology?

Bypassing a lock cylinder by manipulation
Cloning an access card wirelessly
Intercepting Wiegand data on the wiring
An unauthorized person following an authorized person through a controlled door (Correct answer)

Correct answer: An unauthorized person following an authorized person through a controlled door

Tailgating occurs when an unauthorized individual gains entry by following closely behind an authorized cardholder before the door closes.

Question 10: According to industry standards, what is the minimum recommended deadbolt bolt throw (projection) for a residential door?

1/2 inch
1 inch (Correct answer)
3/4 inch
1-1/4 inch

Correct answer: 1 inch

A minimum 1-inch bolt throw is the industry standard for deadbolts, providing adequate engagement into the strike to resist forced entry.

Question 11: A smart lock app requires the locksmith to 'pair' the lock during installation. What is the purpose of this pairing process?

To test the lock's motor torque
To register the lock's warranty with the manufacturer
To update the lock's firmware before use
To establish a trusted, encrypted communication channel between the lock and the authorized device (Correct answer)

Correct answer: To establish a trusted, encrypted communication channel between the lock and the authorized device

Pairing creates a secure, authenticated link between the smart lock and the controlling device so that only authorized devices can communicate with the lock.

Question 12: Which condition describes 'overset' pins during single-pin picking?

All pins simultaneously pushed to the shear line
A pin stack set too high, with the driver pin above the shear line and the key pin crossing it, blocking rotation (Correct answer)
A spring that is compressed beyond its elastic limit
A driver pin lodged permanently in the plug

Correct answer: A pin stack set too high, with the driver pin above the shear line and the key pin crossing it, blocking rotation

An overset pin occurs when too much upward force pushes a key pin across the shear line, causing it to block the plug instead of the driver pin.

Question 13: An electromagnetic lock (maglock) requires continuous power to remain locked. What is this locking mode called?

Fail-passive
Fail-secure
Fail-open
Fail-safe (Correct answer)

Correct answer: Fail-safe

Fail-safe (also called fail-open) means the lock releases when power is lost, allowing free egress during emergencies such as fire alarms.

Question 14: What minimum fence height is typically recommended for commercial property perimeter security?

6 feet
8 feet (Correct answer)
10 feet
4 feet

Correct answer: 8 feet

An 8-foot fence is commonly recommended as the minimum for commercial perimeter security because it is difficult to climb without specialized equipment.

Question 15: Which ANSI/BHMA grade rating indicates the highest level of security performance for residential door hardware?

Grade 1 (Correct answer)
Grade 3
Grade 0
Grade 2

Correct answer: Grade 1

ANSI/BHMA Grade 1 is the highest security rating for door hardware, indicating the strongest performance and greatest durability under standardized testing.

Question 16: Which manipulation technique involves slowly rotating the dial while applying light pressure to the handle to detect changes in resistance?

Pressure manipulation (Correct answer)
Rapping
Contact point graphing
Single-wheel manipulation

Correct answer: Pressure manipulation

Pressure manipulation involves applying light handle pressure while rotating the dial, feeling for the point where gate alignment reduces bolt resistance.

Question 17: What is the primary purpose of a physical security survey?

To install new locks throughout a facility
To identify vulnerabilities and recommend security improvements (Correct answer)
To test emergency exit procedures
To create a master key system for a building

Correct answer: To identify vulnerabilities and recommend security improvements

A physical security survey identifies weaknesses in a facility's security and recommends improvements to reduce overall risk.

Question 18: A biometric fingerprint reader fails to recognize an enrolled user's finger. What type of error is this?

Equal Error Rate condition
False Reject Rate error (Correct answer)
False Accept Rate error
Crossover Error Rate condition

Correct answer: False Reject Rate error

A False Reject Rate (FRR) error occurs when a legitimate enrolled user is denied access, also called a Type I error in biometrics.

Question 19: Which ANSI/BHMA grade rating indicates the highest performance level for electrified hardware?

Grade 3
Grade 1 (Correct answer)
Grade 2
Grade 0

Correct answer: Grade 1

ANSI/BHMA Grade 1 is the highest performance classification, required for high-traffic commercial and institutional applications.

Question 20: Which organization offers the CPL (Certified Professional Locksmith) credential in the United States?

ALOA Security Professionals Association (Correct answer)
Associated Locksmiths of North America (ALOA only by legacy name)
National Locksmith Guild
U.S. Bureau of Labor Statistics

Correct answer: ALOA Security Professionals Association

ALOA Security Professionals Association administers the CPL and other professional locksmith certifications in the United States.

Question 21: When installing a mortise lock, which measurement is critical for ensuring proper operation of the lock body within the door?

Door height
Door width
Mortise pocket depth (Correct answer)
Hinge spacing

Correct answer: Mortise pocket depth

The mortise pocket depth must exactly match the lock body dimensions to ensure the lock sits flush and operates correctly within the door.

Question 22: Which type of insurance is most critical for a professional locksmith running a service business?

General liability insurance (Correct answer)
Health insurance only
Life insurance
Collision insurance only

Correct answer: General liability insurance

General liability insurance protects the locksmith against claims of property damage or bodily injury arising from their work.

Question 23: An installer is terminating a Wiegand reader cable. Which color wire typically carries the DATA0 line per standard Wiegand convention?

Black
Red
Green (Correct answer)
White

Correct answer: Green

By industry convention, the green wire carries DATA0 and the white wire carries DATA1 in a standard Wiegand interface cable.

Question 24: Which code requirement mandates that doors in certain occupancies must unlock automatically when a fire alarm is triggered?

NFPA 72 Alarm Output
UL 294 Standard
ADA Title III
IBC Section 1010 (Correct answer)

Correct answer: IBC Section 1010

IBC Section 1010 (and related Life Safety Code NFPA 101) requires that electrified locking systems release upon fire alarm activation to allow free egress.

Question 25: What is the primary purpose of maintaining a job log or service record for each locksmith call?

To track tool inventory
To document proof of authorization and services rendered (Correct answer)
To record customer credit scores
To log vehicle mileage only

Correct answer: To document proof of authorization and services rendered

A detailed job log documents authorization, services performed, and protects the locksmith from liability disputes.

Question 26: When designing a master key system, what does 'total bitting list' (TBL) analysis help prevent?

Worn keys from operating multiple locks
Key duplication by unauthorized locksmiths
Duplicate key cuts that would cause unintended cross-keying (Correct answer)
High-security cylinders from being installed

Correct answer: Duplicate key cuts that would cause unintended cross-keying

A total bitting list analysis compiles all key bittings in the system to identify and eliminate duplicate or conflicting bitting combinations that could cause cross-keying.

Question 27: When recommending strike plate hardware during a security survey for a wood-frame door, what screw length is recommended to resist kick-in attacks?

Lag bolts only
1-inch wood screws
3-inch wood screws (Correct answer)
2-inch wood screws

Correct answer: 3-inch wood screws

3-inch screws penetrate through the door jamb into the wall stud, providing structural resistance against the kick-in forces that typically split the frame at the strike.

Question 28: What is the main advantage of a power-over-Ethernet (PoE) door controller compared to a traditionally wired controller?

Higher security encryption
Allows wireless card credentials
Provides greater read range
Eliminates the need for a separate power supply at the door (Correct answer)

Correct answer: Eliminates the need for a separate power supply at the door

PoE delivers both data and electrical power over a single Ethernet cable, simplifying installation by eliminating separate low-voltage power runs.

Question 29: When is a locksmith legally and ethically justified in refusing a service request?

Whenever the job is difficult
Only when the requestor is rude
When the requestor cannot provide sufficient proof of authorization or ownership (Correct answer)
When the tools required are unavailable

Correct answer: When the requestor cannot provide sufficient proof of authorization or ownership

Lack of sufficient proof of authorization is the primary ethical and legal basis for declining a locksmith service request.

Question 30: Which practice best protects a locksmith business from false accusations after completing a residential lock-out?

Leave a business card at the property
Ask a neighbor to witness verbally
Record a voice memo only
Photograph the door and lock area before and after service and retain signed authorization (Correct answer)

Correct answer: Photograph the door and lock area before and after service and retain signed authorization

Before/after photographs combined with signed authorization create a clear evidentiary record protecting against false property damage claims.

Question 31: What does 'MACS' stand for in key system design?

Maximum Adjacent Cut Specification (Correct answer)
Master Access Control Standard
Minimum Allowable Cut Spacing
Master Architecture Coding System

Correct answer: Maximum Adjacent Cut Specification

MACS stands for Maximum Adjacent Cut Specification, defining the greatest allowable difference between two adjacent cuts on a key to ensure the key can be cut and operate properly.

Question 32: What term describes the security principle of using multiple overlapping layers of protection to safeguard an asset?

Security redundancy
Zone partitioning
Layered access control
Defense in depth (Correct answer)

Correct answer: Defense in depth

Defense in depth applies multiple security layers so that if one barrier fails, others continue to protect the asset against unauthorized access.

Question 33: When installing an electric door strike in a hollow metal frame, which consideration is most critical?

Using stainless steel screws only
Matching the strike lip depth to the lockset (Correct answer)
Ensuring proper voltage drop across the wire run
Selecting the correct paint color

Correct answer: Matching the strike lip depth to the lockset

The strike lip must match the depth and projection of the latchbolt to ensure proper engagement and smooth mechanical operation.

Question 34: In an emergency entry scenario involving a double-cylinder deadbolt with no interior thumb turn, what is the BEST non-destructive approach?

Pick the lock cylinder (Correct answer)
Remove the door hinge pins
Cut the door panel
Drill the lock core

Correct answer: Pick the lock cylinder

Picking the lock cylinder is the preferred non-destructive method when no thumb turn exists and the lock must remain functional.

Question 35: During an emergency entry on a door with a high-security lock featuring anti-drill hardened steel inserts, the locksmith should:

Attempt destructive picking only
Shim the latch
Use a carbide-tipped drill bit and slow RPM (Correct answer)
Use an air wedge exclusively

Correct answer: Use a carbide-tipped drill bit and slow RPM

Carbide-tipped bits at low RPM can penetrate hardened steel inserts that would destroy standard drill bits.

Question 36: What does 'forced entry resistance' testing primarily measure in physical security evaluation?

A lock cylinder's resistance to picking and manipulation attacks
How quickly an authorized key can open a lock under stress
The psychological deterrence value of visible security hardware
The time and tools required to defeat a barrier or locking device by force (Correct answer)

Correct answer: The time and tools required to defeat a barrier or locking device by force

Forced entry resistance testing quantifies how long and what tools are needed to breach a barrier, establishing its protective rating against physical attacks.

Question 37: What is the primary ethical obligation of a CPL professional when a conflict of interest arises during commercial security solutions activities?

Disclose the conflict to all relevant parties and recuse from the decision if necessary (Correct answer)
Resolve the conflict privately without informing stakeholders
Ignore the conflict if it does not directly affect the current task
Proceed while favoring the outcome that benefits the professional personally

Correct answer: Disclose the conflict to all relevant parties and recuse from the decision if necessary

The primary ethical obligation when a conflict of interest arises in commercial security solutions is to disclose it to all relevant parties and, if necessary, recuse from the decision. This maintains professional integrity and stakeholder trust.

Question 38: Which ethical obligation does a locksmith have when a law enforcement officer verbally requests access to a premises without a warrant?

Provide access only if the officer is in uniform
Always comply immediately with any law enforcement verbal request
Refuse all law enforcement requests regardless of documentation
Request to see proper written authorization or warrant before providing access (Correct answer)

Correct answer: Request to see proper written authorization or warrant before providing access

Without proper legal documentation, a locksmith should request written authorization to avoid civil liability for unauthorized entry.

Question 39: Which access control topology stores all access decisions locally at the door controller without communicating with a central server?

Online (networked) topology
Cloud-managed topology
Distributed peer-to-peer topology
Offline standalone topology (Correct answer)

Correct answer: Offline standalone topology

Offline standalone controllers store credential databases and schedules in local memory, making access decisions without any network connection.

Question 40: A locksmith is asked to install an access-controlled door that must comply with ADA requirements. Which hardware selection is mandatory?

Round knob cylinders on the exterior
Standard deadbolt with thumbturn on egress side
Keypad requiring two-hand entry
Lever handles or push/pull hardware requiring no tight grasping or twisting (Correct answer)

Correct answer: Lever handles or push/pull hardware requiring no tight grasping or twisting

ADA requires operable parts to be usable with one hand without tight grasping, pinching, or twisting, mandating lever-style or push/pull hardware.

Question 41: Which organization publishes the Grade 1, 2, and 3 ratings used for door hardware security performance in the US?

UL (Underwriters Laboratories)
ALOA (Associated Locksmiths of America)
NFPA (National Fire Protection Association)
ANSI/BHMA (American National Standards Institute / Builders Hardware Manufacturers Association) (Correct answer)

Correct answer: ANSI/BHMA (American National Standards Institute / Builders Hardware Manufacturers Association)

ANSI/BHMA establishes and publishes the performance grading standards (Grade 1, 2, 3) for door hardware security and durability.

Question 42: Which standard governs the testing and certification of access control system units in the United States?

NFPA 101
ANSI A156.25
UL 294 (Correct answer)
ISO 9001

Correct answer: UL 294

UL 294 is the Underwriters Laboratories standard for access control system units, covering construction, performance, and marking requirements.

Question 43: When a locksmith creates a key for a customer, which record-keeping practice is considered best professional practice?

Store only the key code with no customer data
Record nothing to protect customer privacy
Log the key code, date, customer ID, and authorization verification (Correct answer)
Only record the customer's name

Correct answer: Log the key code, date, customer ID, and authorization verification

Comprehensive records including authorization verification protect the locksmith legally and demonstrate professional due diligence.

Question 44: On a standard key cutting machine, the 'depth gauge' setting controls which dimension of the cut?

The vertical depth of each individual cut (Correct answer)
The horizontal position of the cut along the blade
The speed of the cutting wheel
The angle of the cutting wheel

Correct answer: The vertical depth of each individual cut

The depth gauge on a key cutting machine controls how deep each cut is made into the key blade.

Question 45: What is the recommended minimum age for a locksmith apprentice in most U.S. state licensing frameworks?

25 years old
18 years old (Correct answer)
21 years old
16 years old

Correct answer: 18 years old

Most U.S. states set the minimum age for locksmith licensing or apprenticeship registration at 18, aligning with adult contractual capacity.

Question 46: A school district wants a key system where custodians can access all classrooms but teachers can only open their own room. What system structure achieves this?

Change keys for teachers and a master key for custodians (Correct answer)
Interchangeable core system with no master keying
Grand master key with only one level below
Single master key with no change keys

Correct answer: Change keys for teachers and a master key for custodians

Issuing teachers individual change keys and custodians a master key creates a two-level hierarchy that matches the access requirements.

Question 47: What is the purpose of a 'threat assessment' in the physical security planning process?

To identify and evaluate potential threats and their likelihood of occurrence (Correct answer)
To determine the budget required for new security equipment
To schedule routine maintenance for existing lock hardware
To test employee response during a simulated security incident

Correct answer: To identify and evaluate potential threats and their likelihood of occurrence

A threat assessment identifies potential adversaries, their capabilities, and the likelihood they would target the facility, helping prioritize protective measures.

Question 48: What is the purpose of a 'paracentric' keyway design in high-security lock systems?

To make picking more difficult by obstructing the insertion of pick tools into the keyway (Correct answer)
To accommodate oversized key blanks
To increase the number of key cuts
To allow reversible key insertion

Correct answer: To make picking more difficult by obstructing the insertion of pick tools into the keyway

Paracentric keyways have complex, winding profiles with projections that physically obstruct picking tools while still allowing the correct key to pass.

Question 49: Which wireless protocol operates on the 908.42 MHz frequency band and is commonly used in smart locks to avoid Wi-Fi interference?

Bluetooth Low Energy
Zigbee
Z-Wave (Correct answer)
Thread

Correct answer: Z-Wave

Z-Wave operates at 908.42 MHz in North America, which avoids the crowded 2.4 GHz band used by Wi-Fi and Bluetooth.

Question 50: What does the acronym 'CPTED' stand for in physical security planning?

Commercial Property Threat Evaluation and Detection
Certified Professional Training for Entry Defense
Crime Prevention Through Environmental Design (Correct answer)
Comprehensive Protection Technology and Entry Deterrence

Correct answer: Crime Prevention Through Environmental Design

CPTED (Crime Prevention Through Environmental Design) uses design elements such as lighting, landscaping, and sight lines to deter criminal activity.

Question 51: What is the purpose of a locksmith surety bond?

To replace general liability insurance
To guarantee the lowest price
To insure the locksmith's tools
To provide financial protection to customers if the locksmith commits fraud or fails to complete work (Correct answer)

Correct answer: To provide financial protection to customers if the locksmith commits fraud or fails to complete work

A surety bond protects customers by ensuring financial recourse if the locksmith performs dishonestly or incompletely.

Question 52: When a deadbolt thumb turn is visible through a mail slot or cat flap, a locksmith may use:

A plug spinner
An air wedge
A loid
A long bent tool to rotate the thumb turn (Correct answer)

Correct answer: A long bent tool to rotate the thumb turn

A long bent tool inserted through an opening can reach and rotate an interior thumb turn to retract the deadbolt.

Question 53: Which physical characteristic of a door frame most significantly affects its resistance to kick-in forced entry?

The gauge of metal reinforcement in the jamb and the fastener penetration depth into the wall stud (Correct answer)
The depth and profile of the door stop molding
The color and finish applied to the door frame surface
The species and grain direction of the wood used in the door frame

Correct answer: The gauge of metal reinforcement in the jamb and the fastener penetration depth into the wall stud

A reinforced door jamb with long fasteners penetrating 3 or more inches into the wall stud is the critical factor in resisting kick-in forces, which typically split the jamb at the strike plate.

Question 54: Which technology allows contactless card reading at distances of up to 10 cm and operates at 13.56 MHz?

125 kHz proximity (Prox)
Bluetooth Low Energy (BLE)
High-Frequency (HF) RFID / NFC (Correct answer)
RFID UHF long-range

Correct answer: High-Frequency (HF) RFID / NFC

High-frequency RFID at 13.56 MHz (including NFC-compatible MIFARE and DESFire cards) is used for contactless access control at short read ranges.

Question 55: What is the purpose of biometric security systems?

To ensure no one can lock a door
To verify identity using physical traits (Correct answer)
To create digital keys
To track movement in a building

Correct answer: To verify identity using physical traits

The primary purpose of biometric security systems is to verify an individual's identity by analyzing their unique physical or behavioral traits. This includes characteristics like fingerprints, facial features, iris patterns, or voice. Biometric authentication offers a high level of security because these traits are difficult to forge or replicate, providing a robust and personalized form of access control.

Question 56: What type of perimeter lighting is generally considered most effective for deterring crime while minimizing energy costs?

Motion-activated LED lighting (Correct answer)
Continuous incandescent floodlights on timer switches
Continuous high-pressure sodium vapor lighting
Infrared lighting paired with night-vision cameras

Correct answer: Motion-activated LED lighting

Motion-activated LED lighting deters criminals by unexpectedly illuminating their activity while consuming significantly less energy than continuous lighting systems.

Question 57: Which federal law most directly impacts locksmiths who work on vehicles and must handle personal identifying information?

The Clean Air Act
The Fair Housing Act
Gramm-Leach-Bliley Act and state privacy statutes (Correct answer)
The Brady Handgun Violence Prevention Act

Correct answer: Gramm-Leach-Bliley Act and state privacy statutes

State privacy statutes and federal data protection laws govern how customer personal and vehicle information must be stored and protected.

Question 58: Which component in a pin tumbler cylinder directly contacts the key cuts?

Key pins (bottom pins) (Correct answer)
Driver pins
Bible
Springs

Correct answer: Key pins (bottom pins)

Key pins, also called bottom pins, rest directly on the key blade and are lifted by the key cuts to different heights.

Question 59: Which wireless lock communication technology offers the longest read range and is used in vehicle gate and parking access systems?

Bluetooth Classic
UHF RFID (900 MHz) (Correct answer)
NFC (13.56 MHz)
125 kHz HID Prox

Correct answer: UHF RFID (900 MHz)

UHF RFID operating around 900 MHz achieves read ranges of several meters, making it suitable for drive-through vehicle access control applications.

Question 60: Which regulation requires federal facilities and their contractors to use FIPS 201-compliant smart cards for physical access control?

NIST SP 800-53
HSPD-12 / PIV standard (Correct answer)
FedRAMP
FISMA

Correct answer: HSPD-12 / PIV standard

Homeland Security Presidential Directive 12 (HSPD-12) mandates use of Personal Identity Verification (PIV) credentials meeting FIPS 201 for federal facility access.

Question 61: A business owner wants to rekey multiple locks so a terminated employee's key no longer works. What is the locksmith's most efficient first step?

Identify the key system and affected cylinders (Correct answer)
Issue new keys to all employees first
Replace all locks immediately
Install new master key system before rekeying

Correct answer: Identify the key system and affected cylinders

Identifying the key system and which cylinders the terminated employee's key operates allows targeted, efficient rekeying.

Question 62: What term describes the practice of using multiple independent security technologies together to protect a facility?

Security redundancy
Multi-factor authentication
Defense in depth (Correct answer)
Security clustering

Correct answer: Defense in depth

Defense in depth uses layered, overlapping security measures so that failure of any single system does not compromise overall protection.

Question 63: What is an electronic locking system?

A type of padlock
A locking system operated using electricity (Correct answer)
A traditional mechanical lock
A lock that uses only a key

Correct answer: A locking system operated using electricity

An electronic locking system is a type of lock that relies on electrical power for its operation, rather than purely mechanical means. These systems use electronic signals to control the locking mechanism, enabling features like keycard access, biometric authentication, remote control, and integration with broader access control systems. This allows for more flexible and sophisticated security management.

Question 64: What feature is essential for smart locks?

Simpler lock mechanisms
Mechanical keys only
Multiple manual override mechanisms
Remote access via apps or voice commands (Correct answer)

Correct answer: Remote access via apps or voice commands

A defining and essential feature for smart locks is their capability for remote access and control. This allows users to lock or unlock doors, grant temporary access to guests, and receive real-time notifications about door activity from anywhere via smartphone applications or voice commands. This remote functionality significantly enhances convenience, flexibility, and security management.

Question 65: In physical security, what is a 'security vulnerability'?

A newly installed high-security lock requiring special keys
A door with a self-closing and self-latching mechanism
An alarm system with a rapid response time
A weakness that could be exploited to gain unauthorized access (Correct answer)

Correct answer: A weakness that could be exploited to gain unauthorized access

A vulnerability is any weakness—physical, procedural, or environmental—that could be exploited by an attacker to breach security.

Question 66: In CPTED-based security surveys, what is the significance of 'sight lines'?

The line-of-sight required for electronic key fobs to communicate with readers
The cable routing path for security camera installations
Unobstructed views that enable natural surveillance of an area (Correct answer)
The maximum distance at which a lock brand can be visually identified

Correct answer: Unobstructed views that enable natural surveillance of an area

Clear sight lines support natural surveillance by allowing occupants and passersby to observe and deter suspicious activity, a foundational CPTED principle.

Question 67: Under NFPA 101 Life Safety Code, how many means of egress are generally required for a commercial occupancy with more than 500 occupants?

Three (Correct answer)
Two
Four
One

Correct answer: Three

NFPA 101 requires a minimum of three means of egress for occupancies exceeding 500 persons to ensure safe evacuation.

Question 68: A locksmith discovers during a service call that the lock they are opening appears to have been previously tampered with. The best course of action is to:

Ignore it and complete the job quickly
Call law enforcement immediately without noting it on the work order
Document the observation, inform the customer, and note it on the work order (Correct answer)
Refuse all future service to this customer

Correct answer: Document the observation, inform the customer, and note it on the work order

Documenting observed tampering protects the locksmith from liability and informs the customer of potential security issues.

Question 69: What does the term 'key section' refer to?

The cross-sectional profile of the key blade that matches the keyway (Correct answer)
The bow or head of the key used for gripping
The portion of the key blade that contains the cuts
The tip of the key blade

Correct answer: The cross-sectional profile of the key blade that matches the keyway

The key section is the cross-sectional shape of the key blade, designed to fit only matching keyway profiles in the cylinder.

Question 70: What is the purpose of a 'handing' specification when ordering a lockset?

Specifies which side of the door the handle is on and which way the door swings (Correct answer)
Indicates the lock grade
Defines the keyway profile
Indicates the finish color of the lock

Correct answer: Specifies which side of the door the handle is on and which way the door swings

Handing identifies whether a door is left-hand or right-hand swing and which face is exterior, ensuring the lockset is configured for proper installation.

Question 71: Which communication protocol is most commonly used by access control panels to communicate with card readers in commercial installations?

RS-232
SPI
Wiegand (Correct answer)
I2C

Correct answer: Wiegand

Wiegand is the industry-standard protocol for connecting card readers to access control panels, transmitting card data as a series of pulses.

Question 72: In an access control security assessment, what does 'credential management' refer to?

The process of verifying and renewing a locksmith's professional certifications
The process of duplicating physical keys for all building tenants
The installation and programming of electronic locks and card readers
The system for issuing, tracking, and revoking access credentials throughout their lifecycle (Correct answer)

Correct answer: The system for issuing, tracking, and revoking access credentials throughout their lifecycle

Credential management encompasses the full lifecycle of access credentials—issuing them to authorized users, auditing who has access, and promptly revoking credentials when access is no longer needed.

Question 73: Which standard specifically addresses the requirements for high-security padlocks used in government and critical infrastructure applications in the U.S.?

ASTM F883
ANSI/BHMA A156.30
UL 768
Federal Specification FF-P-110 (Correct answer)

Correct answer: Federal Specification FF-P-110

Federal Specification FF-P-110 establishes requirements for high-security padlocks used in federal government and critical infrastructure applications.

Question 74: What is the primary ethical obligation of a CPL professional when a conflict of interest arises during pin tumbler & cylinder mechanisms activities?

Resolve the conflict privately without informing stakeholders
Disclose the conflict to all relevant parties and recuse from the decision if necessary (Correct answer)
Ignore the conflict if it does not directly affect the current task
Proceed while favoring the outcome that benefits the professional personally

Correct answer: Disclose the conflict to all relevant parties and recuse from the decision if necessary

The primary ethical obligation when a conflict of interest arises in pin tumbler & cylinder mechanisms is to disclose it to all relevant parties and, if necessary, recuse from the decision. This maintains professional integrity and stakeholder trust.

Question 75: A 'code series' in automotive key cutting refers to:

The sequence in which cuts must be made on the key machine
The VIN number sequence used to order keys
The serial number stamped on the key blank
A range of code numbers assigned to a specific vehicle manufacturer and model group (Correct answer)

Correct answer: A range of code numbers assigned to a specific vehicle manufacturer and model group

A code series identifies a group of key codes applicable to a specific manufacturer, model, and year range of vehicles.

Question 76: When a building manager requests a 'key audit,' what does a locksmith typically do?

Test every key in every lock to confirm operation
Cut new keys for all authorized personnel
Verify all issued keys are accounted for by comparing issuance records to returned keys (Correct answer)
Rekey all locks in the facility simultaneously

Correct answer: Verify all issued keys are accounted for by comparing issuance records to returned keys

A key audit reconciles key issuance records against physical keys on hand to identify unaccounted or missing keys.

Question 77: What is the primary purpose of a written security survey report delivered to a client after an assessment?

To serve as a marketing document promoting additional security upgrades
To document the locksmith's liability limitations for future security incidents
To provide prioritized vulnerability findings, recommendations, and estimated costs (Correct answer)
To certify that the building meets all applicable local security codes

Correct answer: To provide prioritized vulnerability findings, recommendations, and estimated costs

A security survey report documents identified vulnerabilities, prioritizes recommendations by risk level, and provides cost estimates to help the client make informed security investment decisions.

Question 78: What distinguishes a locksmith from a security consultant under most state licensing laws?

There is no legal distinction in any U.S. state
Security consultants can install locks without a license
Locksmiths perform hands-on mechanical installation and opening services, while security consultants primarily provide advisory services (Correct answer)
Locksmiths must have higher education degrees

Correct answer: Locksmiths perform hands-on mechanical installation and opening services, while security consultants primarily provide advisory services

Most state licensing laws define locksmiths by the physical service of installing, repairing, and opening locks, separate from consulting-only roles.

Question 79: A locksmith's advertising that guarantees a flat rate but then charges additional fees at the job site may violate:

UL listing requirements
ANSI/BHMA grading standards
OSHA safety standards
Federal Trade Commission (FTC) guidelines on deceptive advertising (Correct answer)

Correct answer: Federal Trade Commission (FTC) guidelines on deceptive advertising

The FTC enforces rules against deceptive advertising, and bait-and-switch pricing by locksmiths has been a subject of FTC action.

Question 80: A restricted key system's security relies heavily on which of the following?

Contractual and legal control over who can purchase key blanks (Correct answer)
The number of cuts on the key blade
The weight and thickness of the key blade
Using only electronic locks alongside mechanical ones

Correct answer: Contractual and legal control over who can purchase key blanks

Restricted key systems derive their security from patented keyways and distribution agreements that legally limit who can obtain blanks.

Question 81: A customer calls requesting a key duplication for a 'do not duplicate' stamped key. What should a professional locksmith do?

Charge double the fee and duplicate without verification
Refuse all service permanently
Require additional authorization from the key system owner before duplicating (Correct answer)
Duplicate it freely since the stamp is not legally binding

Correct answer: Require additional authorization from the key system owner before duplicating

While 'do not duplicate' is not universally legally binding, professional ethics require verifying authorization before duplicating restricted keys.

Question 82: What type of lock is most commonly used in high-security electronic systems?

Padlocks
Electric strike locks and magnetic locks (Correct answer)
Combination locks
Pin tumbler locks

Correct answer: Electric strike locks and magnetic locks

In high-security electronic systems, electric strike locks and magnetic locks (maglocks) are commonly used due to their robust nature and seamless integration capabilities. Electric strikes work with existing mechanical locksets to electronically release the latch, while maglocks use powerful electromagnets to secure doors, offering strong resistance to forced entry when powered. Both provide reliable and controlled access in secure environments.

Question 83: Which UL listing is most relevant when evaluating the security rating of safes during a commercial security assessment?

UL 687 (Burglary-Resistant Safes) (Correct answer)
UL 768 (Combination Locks)
UL 437 (Key Locks)
UL 2050 (Central Station Monitoring)

Correct answer: UL 687 (Burglary-Resistant Safes)

UL 687 covers testing and rating standards for burglary-resistant safes, making it the primary standard for evaluating safe security in a commercial assessment.

Question 84: What is 'tailgating' or 'piggybacking' as a physical security threat?

A technique used to pick a pin tumbler lock without a key
Following an authorized person through a secured entry without presenting credentials (Correct answer)
Monitoring employee access patterns to identify insider threats
Installing a secondary lock on a door that already has one

Correct answer: Following an authorized person through a secured entry without presenting credentials

Tailgating occurs when an unauthorized person follows an authorized user through a secured door, bypassing access control without detection.

Question 85: What is the primary purpose of a door position switch (DPS) in an access control system?

To power the electric strike
To control the door closer speed
To monitor whether the door is open or closed (Correct answer)
To read proximity cards

Correct answer: To monitor whether the door is open or closed

A door position switch provides real-time status of whether a door is open or closed, enabling door-held-open alarms and audit logging.

Question 86: When installing a surface-mounted rim lock, the screws securing the lock body should be tightened to the door:

Into the door frame jamb
From the interior side through the back plate (Correct answer)
Into the door edge mortise
From the exterior side through the lock body

Correct answer: From the interior side through the back plate

Rim lock bodies are secured from the interior side through the back plate, ensuring tamper resistance from the exterior.

Question 87: A locksmith is asked to open a safe deposit box at a bank after the renter has lost both the renter key and the renter's copy of the box number. What is the legally and professionally correct first step?

Verify the renter's identity and confirm legal authorization (such as a court order or bank officer approval) before any work begins (Correct answer)
Use a try-out key set to open the box without further verification
Contact the box manufacturer for a master key
Begin immediately with drilling since both keys are lost

Correct answer: Verify the renter's identity and confirm legal authorization (such as a court order or bank officer approval) before any work begins

Safe deposit box contents are private property protected by law; verifying identity and obtaining proper authorization is required before a locksmith may open the box.

Question 88: When disposing of old key codes or customer records, a professional locksmith should:

Discard in regular trash for convenience
Shred or securely destroy documents to prevent unauthorized key cutting from discarded codes (Correct answer)
Donate old records to training programs
Keep all records indefinitely with no destruction policy

Correct answer: Shred or securely destroy documents to prevent unauthorized key cutting from discarded codes

Secure destruction of key codes and customer records prevents criminals from obtaining key-cutting information from discarded materials.

Question 89: What does REX stand for in the context of access control systems?

Remote Entry Exchange
Restricted Entry eXit
Relay Exit
Request to Exit (Correct answer)

Correct answer: Request to Exit

REX (Request to Exit) sensors detect when someone approaches a door from the secure side, shunting the alarm and unlocking the door for egress.

Question 90: A hotel that uses a card-based electronic key system wants to add mechanical key backup. Which concern is most important for the locksmith to address?

Installing deadbolts instead of knob locks for the backup
Ensuring mechanical keys are also restricted to prevent unauthorized duplication (Correct answer)
Using the longest key blade available for the lock brand
Matching card reader aesthetics to door hardware finish

Correct answer: Ensuring mechanical keys are also restricted to prevent unauthorized duplication

Mechanical backup keys must be restricted keyways to prevent unauthorized duplication that would bypass the electronic access control.

Question 91: How often must a CPL certification holder renew their credential under ALOA guidelines?

Every four years with continuing education requirements (Correct answer)
Every ten years with no continuing education
Every year with a written exam
Only once at initial certification

Correct answer: Every four years with continuing education requirements

ALOA requires CPL holders to renew every four years by completing continuing education units (CEUs) to maintain current knowledge.

Question 92: What is a 'false gate' in a combination lock wheel, and how does it affect manipulation?

A damaged notch that prevents normal dialing
An extra notch added during reconditioning
A shallow indentation designed to mislead manipulation attempts by mimicking a true gate (Correct answer)
A secondary locking gate added for high-security locks

Correct answer: A shallow indentation designed to mislead manipulation attempts by mimicking a true gate

False gates are shallow milled indentations on wheels that produce similar tactile feedback as true gates, making manipulation more difficult and time-consuming.

Question 93: When documenting activities related to pin tumbler & cylinder mechanisms, which practice is considered essential for CPL certification holders?

Recording only outcomes while omitting the methods and processes used
Completing documentation only when requested by auditors or supervisors
Maintaining comprehensive records that include procedures, observations, results, and any anomalies (Correct answer)
Keeping documentation in personal notes that are not accessible to other team members

Correct answer: Maintaining comprehensive records that include procedures, observations, results, and any anomalies

Comprehensive documentation that includes procedures, observations, results, and any anomalies is essential in pin tumbler & cylinder mechanisms. This supports quality assurance, enables peer review, and satisfies regulatory and audit requirements.

Question 94: Which device is used to protect access control system wiring from electrical surges caused by lightning or power fluctuations?

Transformer
End-of-line resistor
Surge protector / transient voltage suppressor (Correct answer)
Relay module

Correct answer: Surge protector / transient voltage suppressor

Transient voltage suppressors (TVS) or surge protectors clamp voltage spikes before they can damage sensitive access control electronics.

Question 95: Which type of electric strike is designed to work with mortise locksets and allows the latchbolt to retract without turning the lever?

Latch-retracting strike (Correct answer)
Deadlatch strike
Keeper strike
Solenoid strike

Correct answer: Latch-retracting strike

A latch-retracting electric strike uses a powered mechanism to retract the latchbolt, enabling egress without mechanical lever actuation.

Question 96: A locksmith is asked to expand an existing master key system. What is the first step recommended before adding new cylinders?

Install high-security cylinders throughout the system
Re-key all existing locks to a new master key
Order new key blanks in the existing keyway
Obtain and review the original bitting list to avoid cross-keying conflicts (Correct answer)

Correct answer: Obtain and review the original bitting list to avoid cross-keying conflicts

Reviewing the original bitting list before expansion ensures new key bittings are chosen to avoid duplicating or conflicting with existing combinations.

Question 97: What is the role of an access control panel in security systems?

To control and grant access to doors (Correct answer)
To maintain physical locks
To monitor all physical security cameras
To record the time of day

Correct answer: To control and grant access to doors

The access control panel serves as the central processing unit or 'brain' of an electronic security system. It receives input from various access devices like card readers or keypads, processes this information against programmed access rules, and then sends commands to electric locks. Its role is crucial for accurately controlling and granting or denying access to specific doors and areas within a facility.

Question 98: In the context of commercial security solutions, what role does continuous professional development play for CPL practitioners?

It serves primarily as a networking opportunity with no practical benefit
It ensures practitioners remain current with evolving standards, technologies, and best practices (Correct answer)
It is required only during the first year of certification
It is optional and only needed for career advancement

Correct answer: It ensures practitioners remain current with evolving standards, technologies, and best practices

Continuous professional development is essential in commercial security solutions because it ensures CPL practitioners remain current with evolving standards, technologies, and best practices, maintaining competency throughout their careers.

Question 99: Which of the following is a fundamental principle of safe manipulation & lock opening as it applies to Certified Professional Locksmith?

Prioritizing speed of completion over accuracy and compliance
Relying solely on personal experience without reference to guidelines
Avoiding documentation to streamline workflow efficiency
Systematic evaluation and adherence to established industry standards (Correct answer)

Correct answer: Systematic evaluation and adherence to established industry standards

A fundamental principle of safe manipulation & lock opening in Certified Professional Locksmith is the systematic evaluation and adherence to established industry standards, which ensures consistency, quality, and regulatory compliance across all professional activities.

Question 100: Which document should a locksmith require before performing a lock-out service on a residence?

A credit card only
A signed blank work order
Proof of ownership or authorization (Correct answer)
A verbal statement

Correct answer: Proof of ownership or authorization

Locksmiths must obtain proof of ownership or legal authorization before granting entry to protect against facilitating unauthorized access.

ALOA Certified Professional Locksmith (CPL)

The CPL is the second tier of ALOA's locksmith certification pathway, requiring mastery of advanced locksmithing topics including key systems, physical security, electronic locking, and business practices across a series of elective examinations.

100

Questions

120 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds