ISP Physical Security & Facility Protection 5

Question 1

In the context of industrial security, what is a 'security baseline'?

Accepted Answer

The minimum acceptable level of security measures required across all facility areas

Answer

A security baseline defines the minimum set of security controls and measures that must be in place at all times to meet regulatory, organizational, or risk-based requirements.

Question 2

Which assessment methodology involves attempting to defeat security measures through simulated unauthorized access attempts, often unannounced to site staff?

Accepted Answer

Red team / adversarial penetration test

Answer

A red team or penetration test simulates real-world attacks against physical and procedural controls, often without staff foreknowledge, to reveal actual vulnerabilities under realistic conditions.

Question 3

A facility security officer (FSO) must ensure visitor escort procedures are followed. What is the MINIMUM requirement for escorting an uncleared visitor in a controlled industrial area?

Accepted Answer

A cleared, authorized employee must accompany the visitor at all times within the controlled area

Answer

Cleared, authorized personnel must escort uncleared visitors continuously within controlled or restricted areas to prevent unauthorized access to sensitive information or assets.

Question 4

What is the primary function of a 'security operations center' (SOC) in a large industrial facility?

Accepted Answer

Centrally monitoring alarms, cameras, and access control events and coordinating security responses

Answer

An SOC serves as the nerve center for real-time monitoring of all security systems and coordinating responses to alarms, incidents, and anomalies across the facility.

Question 5

Under ISP principles, 'target hardening' refers to:

Accepted Answer

Making an asset more difficult or costly to attack by adding physical and procedural barriers

Answer

Target hardening involves increasing physical and procedural barriers—locks, reinforced doors, access controls, lighting—to raise the effort and risk required for an attacker to succeed.

(ISP) Industrial Security Professional Certification Practice Test

(ISP) Industrial Security Professional Certification Practice Test

ISP Physical Security & Facility Protection 5