Physical Security Professional (PSP) Certification Exam — Questions and Answers

Question 1: Compared with H.264, what is the main advantage of H.265 (HEVC) video compression?

About the same quality at roughly half the bitrate (Correct answer)
Better compatibility with analog cameras
Higher latency for better security
No need for a recorder

Correct answer: About the same quality at roughly half the bitrate

H.265 delivers similar image quality using much less bandwidth and storage than H.264.

Question 2: How long must employers generally retain OSHA 300 injury and illness logs?

5 years following the end of the calendar year (Correct answer)
3 years
Permanently
1 year

Correct answer: 5 years following the end of the calendar year

OSHA recordkeeping rules require the 300 log, 300A summary, and 301 forms to be kept for five years.

Question 3: Who is ultimately responsible for approving a locking arrangement that deviates from standard life safety egress requirements?

The security vendor
The Authority Having Jurisdiction (AHJ) (Correct answer)
The access control integrator
The building owner's insurer

Correct answer: The Authority Having Jurisdiction (AHJ)

The AHJ, usually the local fire marshal or building official, approves code variances and special locking arrangements.

Question 4: Which ICS position serves as the point of contact for representatives of assisting and cooperating agencies?

Public Information Officer
Liaison Officer (Correct answer)
Safety Officer
Planning Section Chief

Correct answer: Liaison Officer

The Liaison Officer coordinates with outside agency representatives not included in Unified Command.

Question 5: How should professionals apply applied methods and techniques in daily practice?

Apply principles selectively based on convenience
Consistently integrate best practices into every aspect of professional work (Correct answer)
Only when being evaluated
Follow standards only for complex tasks

Correct answer: Consistently integrate best practices into every aspect of professional work

Consistent application of professional standards ensures quality outcomes and builds professional credibility.

Question 6: Which risk formula is most commonly used in security risk assessments?

Risk = Threat × Vulnerability × Consequence (Correct answer)
Risk = Likelihood + Response time
Risk = Threat ÷ Vulnerability
Risk = Asset value − Countermeasure cost

Correct answer: Risk = Threat × Vulnerability × Consequence

Risk is widely modeled as a function of threat, vulnerability, and consequence.

Question 7: An employee is fired at 3 PM. What is the best access control practice?

Ask the employee to stop using the badge
Revoke the credential in the system right away (Correct answer)
Change the facility's master key next quarter
Collect the badge at the end of the week

Correct answer: Revoke the credential in the system right away

Deactivating the credential immediately in the access control system stops any further use, even if the physical badge is never returned.

Question 8: Which item is most useful as evidence of attending a live security conference session?

A personal social media post
A photo of the venue lobby
A hotel parking receipt
A certificate of attendance or registration record showing the session and hours (Correct answer)

Correct answer: A certificate of attendance or registration record showing the session and hours

Official attendance records identify the activity, date, and hours, which is what auditors need.

Question 9: What is the main purpose of an access control system's audit trail?

To record who accessed which door and when, for investigations (Correct answer)
To speed up door unlocking
To store video footage
To encrypt reader traffic

Correct answer: To record who accessed which door and when, for investigations

The audit trail logs every access event and alarm, which supports investigations, compliance, and accountability.

Question 10: An employee with authorized access steals proprietary components over several months. What type of threat does this represent?

Technological hazard
Natural hazard
External opportunistic threat
Insider threat (Correct answer)

Correct answer: Insider threat

An insider threat comes from people with legitimate access who misuse it.

Question 11: In a PACE communications plan, what does the 'C' stand for?

Command
Central
Contingency (Correct answer)
Coordinated

Correct answer: Contingency

PACE stands for Primary, Alternate, Contingency, and Emergency communication methods.

Question 12: Emergency lighting along means of egress is generally required to operate for at least how long after normal power fails?

4 hours
60 minutes
90 minutes (Correct answer)
30 minutes

Correct answer: 90 minutes

NFPA 101 requires emergency illumination for a minimum of 1.5 hours (90 minutes).

Question 13: Which of the following is a key indicator of potential insider threat activity?

Accessing systems and areas outside normal job duties (Correct answer)
Working overtime regularly
Participating in company wellness programs
Requesting vacation time

Correct answer: Accessing systems and areas outside normal job duties

Accessing systems or areas beyond an employee's role is a classic behavioral indicator of insider threat activity.

Question 14: Why should a certificant keep certificates of attendance and agendas for continuing education activities?

They are needed to qualify for vendor discounts
They provide proof of completion if the recertification application is audited (Correct answer)
They replace the need to report credits
They are required to renew a driver's license

Correct answer: They provide proof of completion if the recertification application is audited

Certifying bodies may audit recertification claims, and supporting documentation proves the credits were earned.

Question 15: What is the first step in risk management for physical security?

Determine the level of surveillance required.
Analyze employee feedback.
Evaluate the financial investment needed.
Identify potential threats and vulnerabilities (Correct answer)

Correct answer: Identify potential threats and vulnerabilities

The foundational first step in any robust risk management process for physical security is to thoroughly identify what could go wrong. This involves pinpointing potential threats, such as theft, vandalism, or natural disasters, and recognizing existing vulnerabilities in the current security infrastructure, like weak entry points or outdated systems. Without this initial identification, effective risk assessment and mitigation cannot occur.

Question 16: How should communication and documentation knowledge be maintained and updated?

Through continuous professional development, current literature review, and professional networking (Correct answer)
Knowledge updates are only needed every five years
Initial training provides lifelong competence
Learning stops after certification

Correct answer: Through continuous professional development, current literature review, and professional networking

Professional competence requires ongoing development through education, literature review, and engagement with the professional community.

Question 17: A video management system (VMS) is configured to send an alert when a person enters a restricted zone after hours. What capability is this?

Video analytics (intrusion or line-crossing detection) (Correct answer)
Video compression
Frame-rate throttling
Digital zoom

Correct answer: Video analytics (intrusion or line-crossing detection)

Analytics rules such as line-crossing or zone intrusion detection automatically flag events instead of relying on constant human watching.

Question 18: Why should security incident reports be written promptly and factually?

To make the writer look good
To preserve accurate, credible records that may be used in legal or administrative proceedings (Correct answer)
To avoid having to speak with investigators
To meet word-count requirements

Correct answer: To preserve accurate, credible records that may be used in legal or administrative proceedings

Timely, factual reports keep details accurate and hold up when reviewed by courts, insurers, or management.

Question 19: What is the main benefit of using standardized report templates across a security department?

They make reports shorter than one paragraph
They remove the need for officer training
They ensure consistent, complete information that is easier to analyze for trends (Correct answer)
They allow officers to skip narrative sections

Correct answer: They ensure consistent, complete information that is easier to analyze for trends

Standard templates collect consistent data, improving completeness and trend analysis.

Question 20: An access control system logs a door held open for 10 minutes at night. What should the responding officer document?

Only the name of the employee who was nearby
The time, location, cause found, actions taken, and the condition when cleared (Correct answer)
Nothing if no intruder was found
Only that the alarm was acknowledged

Correct answer: The time, location, cause found, actions taken, and the condition when cleared

A complete record of time, cause, actions, and outcome supports follow-up and trend analysis.

Question 21: How do alarm systems integrate with access control systems?

By disabling access control systems.
By triggering alarms for unauthorized access (Correct answer)
By monitoring employee movements only.
By providing surveillance footage of employees.

Correct answer: By triggering alarms for unauthorized access

Alarm systems integrate with access control to provide an immediate and active response to security breaches. If an access control system detects an unauthorized attempt to enter a restricted area, or if a door is forced open, the alarm system is triggered. This immediate alert notifies security personnel of a potential threat, allowing for rapid intervention and minimizing the window of opportunity for intruders.

Question 22: When a security officer receives a bomb threat by phone, what should be documented?

Only the time of the call
Nothing until police arrive
Only the caller ID number
As many details as possible using a bomb threat checklist, such as exact words, voice traits, and background noise (Correct answer)

Correct answer: As many details as possible using a bomb threat checklist, such as exact words, voice traits, and background noise

A bomb threat checklist captures the details investigators need to assess and trace the threat.

Question 23: When documenting a witness statement, the officer should:

Include only the details that support the officer's findings
Paraphrase the witness to make it more professional
Combine statements from several witnesses into one account
Record the witness's own words and have the witness review and sign it (Correct answer)

Correct answer: Record the witness's own words and have the witness review and sign it

Statements in the witness's own words, reviewed and signed, keep accuracy and evidentiary value.

Question 24: An officer discovers a stored fire exit route blocked by pallets. Under OSHA exit route rules, what is required?

Obstructions are acceptable during business hours only
Exit routes may be blocked if an alternate exists
Only the fire marshal may require removal
Exit routes must be kept free and unobstructed at all times (Correct answer)

Correct answer: Exit routes must be kept free and unobstructed at all times

OSHA 29 CFR 1910.37 requires exit routes to be kept free and unobstructed by materials or equipment.

Question 25: When evaluating video surveillance cameras for a large US facility, which specification is most important for identifying individuals at building entrances?

Sufficient resolution (e.g., 2MP or higher) with appropriate lens focal length to capture identifiable facial features at the target distance (Correct answer)
Wide dynamic range (WDR) only
Infrared range for total darkness
Vandal-resistant housing color

Correct answer: Sufficient resolution (e.g., 2MP or higher) with appropriate lens focal length to capture identifiable facial features at the target distance

Adequate resolution combined with the correct focal length ensures cameras capture sufficient detail to identify individuals at entry points, which is the primary identification requirement.

Question 26: Why is it important to assess potential security threats?

To identify vulnerabilities and prioritize security measures (Correct answer)
To comply with regulatory requirements.
To increase security costs.
To reduce the need for security personnel.

Correct answer: To identify vulnerabilities and prioritize security measures

Assessing potential security threats involves identifying possible dangers or attacks that could compromise an organization's assets. This process helps pinpoint weaknesses in existing security systems and infrastructure. By understanding the nature and likelihood of various threats, organizations can then prioritize and allocate resources to implement the most effective security measures, mitigating risks proactively.

Question 27: Which NIMS concept allows multiple agencies with jurisdictional responsibility to jointly manage an incident without giving up their authority?

Multiagency Coordination Group
Area Command
Unified Command (Correct answer)
Single Resource Command

Correct answer: Unified Command

Unified Command lets agencies share leadership and develop a single set of objectives while retaining their own authority.

Question 28: How should safety and compliance knowledge be maintained and updated?

Initial training provides lifelong competence
Through continuous professional development, current literature review, and professional networking (Correct answer)
Knowledge updates are only needed every five years
Learning stops after certification

Correct answer: Through continuous professional development, current literature review, and professional networking

Professional competence requires ongoing development through education, literature review, and engagement with the professional community.

Question 29: A data center requires two authorized staff to badge in within a short time window before the vault door opens. What control is this?

Tailgate detection
Anti-passback
Two-person (dual) authorization (Correct answer)
Multi-factor authentication

Correct answer: Two-person (dual) authorization

Two-person authorization requires two separate authorized people, so no single insider can get access alone.

Question 30: What is 'tailgating' in physical security and how does technology help prevent it?

An unauthorized person following an authorized person through a secured door; prevented by mantrap portals or anti-passback access control (Correct answer)
Employees using personal devices; prevented by Wi-Fi blocking
Package delivery without sign-off; prevented by delivery lockers
Unauthorized vehicle following; prevented by speed bumps

Correct answer: An unauthorized person following an authorized person through a secured door; prevented by mantrap portals or anti-passback access control

Tailgating is when an unauthorized individual follows an authorized person through a secured entry; mantrap portals and anti-passback features in access control systems help prevent this.

Question 31: What is the primary purpose of conducting a technology assessment before upgrading a physical security system?

To identify which vendor offers the lowest price
To create a list of new employee hires needed
To evaluate existing systems, identify gaps, and determine what technology best meets current and future security requirements (Correct answer)
To satisfy insurance requirements only

Correct answer: To evaluate existing systems, identify gaps, and determine what technology best meets current and future security requirements

A technology assessment evaluates the current security posture, identifies capability gaps, and ensures new technology investments align with organizational security requirements.

Question 32: Which of the following best describes 'defense in depth'?

Placing all security resources at the main entrance
Using multiple, layered security measures so failure of one does not compromise the asset (Correct answer)
Relying on a single high-quality barrier
Concentrating guards inside the building only

Correct answer: Using multiple, layered security measures so failure of one does not compromise the asset

Defense in depth uses concentric layers of detection, delay, and response.

Question 33: Which phase of emergency management includes activities that reduce or eliminate long-term risk, such as installing blast-resistant glazing?

Response
Mitigation (Correct answer)
Recovery
Preparedness

Correct answer: Mitigation

Mitigation lessens the impact of hazards before they occur through structural or nonstructural measures.

Question 34: In path analysis, what is the critical detection point (CDP)?

The point where the adversary reaches the target
The last point on a path where detection still leaves enough remaining delay for the response force to interrupt (Correct answer)
The first sensor an adversary encounters on the site boundary
The location with the highest sensor probability of detection

Correct answer: The last point on a path where detection still leaves enough remaining delay for the response force to interrupt

Detection after the CDP comes too late because remaining delay is shorter than response force time.

Question 35: Which combination counts as true multi-factor authentication?

A card and a fingerprint (Correct answer)
A fingerprint and a palm scan
A PIN and a password
A card and a second card

Correct answer: A card and a fingerprint

A card (something you have) plus a fingerprint (something you are) combines two different factor categories.

Question 36: A mass notification system message during an emergency should ideally be:

Sent only to management
Clear, concise, and state the hazard and required action (Correct answer)
Delayed until all facts are confirmed
Long and detailed to cover every contingency

Correct answer: Clear, concise, and state the hazard and required action

Effective emergency messages are brief, specific about the threat, and tell recipients exactly what to do.

Question 37: In CPTED, which type of lighting is MOST effective for supporting natural surveillance in outdoor spaces?

Decorative accent lighting emphasizing architectural features
High-intensity spotlights focused on building facades
Uniform, consistent low-glare illumination covering the entire area (Correct answer)
Intermittent motion-activated floodlights throughout the space

Correct answer: Uniform, consistent low-glare illumination covering the entire area

Uniform, consistent low-glare illumination eliminates dark shadows and contrast zones where criminal activity can occur undetected, making it the most effective for natural surveillance.

Question 38: What is 'access control anti-passback' designed to prevent?

Employees from accessing social media during work hours
Delivery personnel from accessing loading docks
Unauthorized vehicles from entering a parking lot
A cardholder from using their credential to let another person in after they have already entered, or re-entering without first exiting (Correct answer)

Correct answer: A cardholder from using their credential to let another person in after they have already entered, or re-entering without first exiting

Anti-passback rules in access control systems prevent a credential from being used to re-enter a zone without a corresponding exit event, deterring tailgating and credential sharing.

Question 39: Why do many sites choose dual-technology motion sensors that combine PIR and microwave?

They cost less than single-technology sensors
They work only outdoors
Both technologies must trigger, which reduces false alarms (Correct answer)
They do not need a power supply

Correct answer: Both technologies must trigger, which reduces false alarms

Requiring both detection methods to agree filters out nuisance triggers that would fool only one technology.

Question 40: A security officer observes a coworker sleeping on post during a night shift. What is the appropriate professional action?

Post a photo on social media as a warning
Wake the coworker and agree to keep it quiet
Report it through the proper supervisory channel (Correct answer)
Ignore it to maintain team loyalty

Correct answer: Report it through the proper supervisory channel

Sleeping on post creates a security gap, and professional standards require reporting through established channels.

Question 41: Delay is most effective when it is placed where in relation to detection?

Delay placement does not matter
Only at the outer perimeter with no sensors
After the point of detection (Correct answer)
Before any detection occurs

Correct answer: After the point of detection

Delay that occurs after detection is useful because the response is already underway; undetected delay adds little value.

Question 42: How should professionals apply industry best practices in daily practice?

Only when being evaluated
Apply principles selectively based on convenience
Follow standards only for complex tasks
Consistently integrate best practices into every aspect of professional work (Correct answer)

Correct answer: Consistently integrate best practices into every aspect of professional work

Consistent application of professional standards ensures quality outcomes and builds professional credibility.

Question 43: How does physical access control contribute to security?

By reducing the need for surveillance equipment.
By allowing unrestricted access to critical areas.
By increasing the number of security guards on-site.
By limiting access to authorized personnel only (Correct answer)

Correct answer: By limiting access to authorized personnel only

Physical access control systems are fundamental to security as they regulate who can enter specific areas within a facility. By requiring authentication, such as keycards, biometrics, or PINs, these systems prevent unauthorized individuals from gaining entry to sensitive or restricted zones. This controlled access significantly reduces the risk of theft, vandalism, and other security breaches, protecting valuable assets and personnel.

Question 44: How should professionals apply core concepts and principles in daily practice?

Follow standards only for complex tasks
Apply principles selectively based on convenience
Only when being evaluated
Consistently integrate best practices into every aspect of professional work (Correct answer)

Correct answer: Consistently integrate best practices into every aspect of professional work

Consistent application of professional standards ensures quality outcomes and builds professional credibility.

Question 45: How should applied methods and techniques knowledge be maintained and updated?

Learning stops after certification
Initial training provides lifelong competence
Knowledge updates are only needed every five years
Through continuous professional development, current literature review, and professional networking (Correct answer)

Correct answer: Through continuous professional development, current literature review, and professional networking

Professional competence requires ongoing development through education, literature review, and engagement with the professional community.

Question 46: Which of the following is a best practice for maintaining security technology systems?

Perform scheduled preventive maintenance, firmware updates, and regular testing to ensure systems remain operational and current (Correct answer)
Allow only vendors to access systems without internal oversight
Only service equipment when it visibly fails
Replace all systems every year regardless of condition

Correct answer: Perform scheduled preventive maintenance, firmware updates, and regular testing to ensure systems remain operational and current

Scheduled preventive maintenance, firmware updates, and regular functional testing are essential best practices to ensure security technology systems perform reliably.

Question 47: A request-to-exit (REX) motion sensor above a door is triggered by someone sliding an object through the gap under the door from outside. What is the best countermeasure?

Add a door sweep or threshold and adjust the sensor's detection pattern (Correct answer)
Switch the lock to fail-safe
Turn up the sensor sensitivity
Remove the door position switch

Correct answer: Add a door sweep or threshold and adjust the sensor's detection pattern

Closing the gap and aiming the sensor's coverage away from the door stops outsiders from setting off the REX.

Question 48: What does a duress code on an access control keypad do?

Denies access and sounds a local siren
Resets the user's PIN
Locks down the entire facility immediately
Grants access while silently alerting security (Correct answer)

Correct answer: Grants access while silently alerting security

A duress code opens the door normally but sends a silent alarm, so a coerced user is not put in more danger.

Question 49: Placing hidden cameras in restrooms or locker rooms for theft investigations is generally:

Permitted with a manager's approval
Prohibited because those areas carry a reasonable expectation of privacy (Correct answer)
Allowed if footage is deleted after 24 hours
Permitted if employees signed a handbook

Correct answer: Prohibited because those areas carry a reasonable expectation of privacy

Many state laws prohibit surveillance in restrooms and changing areas because occupants have a reasonable expectation of privacy.

Question 50: What is the role of communication in risk management?

To increase employee productivity.
To monitor security equipment usage.
To ensure all team members are informed and coordinated in managing risks (Correct answer)
To reduce operational costs.

Correct answer: To ensure all team members are informed and coordinated in managing risks

Effective communication is a cornerstone of successful risk management in physical security. It ensures that all relevant stakeholders, from security personnel to management, are aware of identified risks, mitigation strategies, and incident protocols. Clear and timely communication facilitates coordinated responses, prevents misunderstandings, and allows for informed decision-making during both proactive planning and reactive incident handling.

Question 51: Which assessment approach assigns ratings such as 'high', 'medium', and 'low' instead of numeric probabilities and dollar values?

Qualitative assessment (Correct answer)
Actuarial analysis
Quantitative assessment
Statistical sampling

Correct answer: Qualitative assessment

Qualitative methods use descriptive scales when precise numeric data is unavailable or impractical.

Question 52: What is the role of surveillance systems in physical security planning?

They focus on controlling costs.
They replace the need for physical security personnel.
They help employees track working hours.
They monitor premises, provide evidence, and deter threats (Correct answer)

Correct answer: They monitor premises, provide evidence, and deter threats

Surveillance systems, including CCTV cameras and monitoring equipment, are integral to physical security planning. They provide continuous oversight of premises, allowing security personnel to detect suspicious activities in real-time and respond quickly to incidents. Additionally, recorded footage serves as crucial evidence for investigations, and the visible presence of cameras acts as a significant deterrent to potential intruders or criminals.

Question 53: Which activity would most directly support continuing education for a professional focused on physical security design and integration?

A personal fitness training program
A general office productivity software tutorial
A course on access control system architecture and integration (Correct answer)
A course on retail merchandising

Correct answer: A course on access control system architecture and integration

Continuing education should relate to the certification's body of knowledge, such as security system design and integration.

Question 54: An assessor walks the perimeter at night to verify lighting coverage and camera image quality. Why is this step important?

Daytime surveys are prohibited by ASIS
Night surveys are required only for retail sites
Conditions such as lighting and visibility differ significantly between day and night (Correct answer)
Cameras only operate at night

Correct answer: Conditions such as lighting and visibility differ significantly between day and night

Many vulnerabilities, such as dark spots and poor camera performance, appear only after dark.

Question 55: Which standard is used to crash-test and rate perimeter vehicle barriers in the United States?

UL 752
NFPA 730
ASTM F2656 (Correct answer)
ANSI/BHMA A156.13

Correct answer: ASTM F2656

ASTM F2656 rates vehicle barriers by vehicle weight, impact speed, and penetration distance, for example M50.

Question 56: Which NFPA standard (now consolidated into NFPA 1660) historically addressed disaster/emergency management and business continuity programs?

NFPA 72
NFPA 101
NFPA 1600 (Correct answer)
NFPA 730

Correct answer: NFPA 1600

NFPA 1600 was the standard on continuity, emergency, and crisis management, consolidated into NFPA 1660.

Question 57: Why should security procedures and post orders be reviewed and updated on a regular schedule?

To keep them aligned with current risks, facility changes, and regulations (Correct answer)
Because officers must sign them monthly by law
To reduce the number of posts needed
To increase the length of training sessions

Correct answer: To keep them aligned with current risks, facility changes, and regulations

Regular review keeps procedures accurate as threats, layouts, and requirements change.

Question 58: On a biometric system, raising the sensitivity threshold usually has which effect?

Has no effect on error rates
Raises FAR and lowers FRR
Lowers both FAR and FRR
Lowers FAR and raises FRR (Correct answer)

Correct answer: Lowers FAR and raises FRR

A stricter threshold lets fewer impostors through (lower FAR) but rejects more legitimate users (higher FRR).

Question 59: A facility's response force arrives in 6 minutes. After first detection, the adversary needs 4 minutes to reach and complete the task. What does this indicate?

The response force is overstaffed
The adversary will likely finish before interruption, so delay or detection must be improved (Correct answer)
The system is effective because detection happened
No change is needed as long as cameras record the event

Correct answer: The adversary will likely finish before interruption, so delay or detection must be improved

Interruption needs remaining adversary time to exceed response force time, and 4 minutes is less than 6.

Question 60: In a common risk formula used in security assessments, risk is a function of which three elements?

Threat, vulnerability, and consequence (Correct answer)
Cost, schedule, and scope
Staffing, training, and equipment
Detection, delay, and deterrence

Correct answer: Threat, vulnerability, and consequence

Risk rises with the likelihood of a threat, the vulnerability to it, and the impact if it succeeds.

Question 61: If the SLE for a theft event is $10,000 and the annualized rate of occurrence (ARO) is 0.5, what is the annualized loss expectancy (ALE)?

$5,000 (Correct answer)
$20,000
$2,000
$10,500

Correct answer: $5,000

ALE equals SLE × ARO, so $10,000 × 0.5 = $5,000 per year.

Question 62: How should challenges in core concepts and principles be addressed?

Ignore challenges until they resolve themselves
Avoid challenges and stick to familiar tasks
Apply systematic problem-solving, seek expert guidance when needed, and document decisions (Correct answer)
Delegate all challenges to supervisors

Correct answer: Apply systematic problem-solving, seek expert guidance when needed, and document decisions

Systematic problem-solving combined with appropriate consultation and documentation ensures challenges are addressed effectively.

Question 63: In CPTED, which principle is applied by designing windows and lighting so occupants can easily observe parking areas?

Access control
Maintenance
Natural surveillance (Correct answer)
Territorial reinforcement

Correct answer: Natural surveillance

Natural surveillance maximizes visibility so legitimate users can observe activity.

Question 64: Security metrics presented to senior management are MOST effective when they:

List every alarm activation without context
Focus only on officer hours worked
Use technical jargon to show expertise
Link security activities to business outcomes such as loss reduction or risk reduction (Correct answer)

Correct answer: Link security activities to business outcomes such as loss reduction or risk reduction

Metrics tied to business outcomes show the value of security to leadership.

Question 65: A certificant moves from a security consulting role to a corporate security manager role mid-cycle. What happens to the continuing education requirement?

It is waived because the job changed
The certificant must start a new cycle from zero
It continues to apply; credits earned in either role still count if relevant (Correct answer)
All prior credits are erased

Correct answer: It continues to apply; credits earned in either role still count if relevant

Continuing education obligations follow the certificant, not the employer or job title.

Question 66: Which standard is widely referenced for the installation and performance of electronic security systems in the US?

OSHA 1926
ANSI Z400
NFPA 731 (Standard for the Installation of Electronic Premises Security Systems) (Correct answer)
ISO 9001

Correct answer: NFPA 731 (Standard for the Installation of Electronic Premises Security Systems)

NFPA 731 provides guidelines for the installation of electronic premises security systems, including intrusion, access control, and video surveillance components.

Question 67: Which evaluation approach judges a security program by how well it actually stops adversaries rather than by checking whether required features exist?

Checklist audit
Performance-based evaluation (Correct answer)
Compliance-based evaluation
Budget variance analysis

Correct answer: Performance-based evaluation

Performance-based evaluation measures how effective components are against the threat, while compliance-based evaluation only confirms requirements are met.

Question 68: A fail-secure electric strike is most appropriate for which application?

A stairwell door that must unlock during fire alarms
A server room door where security must be maintained during power loss, with free mechanical egress (Correct answer)
A main exit door in an assembly occupancy
A door with no mechanical egress hardware

Correct answer: A server room door where security must be maintained during power loss, with free mechanical egress

Fail-secure hardware stays locked on power loss and is suitable where free egress is provided mechanically from the secure side.

Question 69: Which factor most directly determines how many days of video a network video recorder (NVR) can keep?

Number of door readers
Storage capacity together with bitrate (resolution, frame rate, compression) (Correct answer)
Lens focal length
Camera housing type

Correct answer: Storage capacity together with bitrate (resolution, frame rate, compression)

Retention depends on total storage divided by the combined data rate, which is driven by resolution, frame rate, and compression.

Question 70: In the DORI standard for camera performance, which level needs the highest pixel density on the target?

Identification (Correct answer)
Detection
Observation
Recognition

Correct answer: Identification

Identification, meaning confirming who a specific person is beyond reasonable doubt, needs far more pixels per foot than detection, observation, or recognition.

Question 71: Which CPTED strategy involves designing pedestrian and vehicle pathways to funnel people through monitored areas?

Maintenance
Territorial reinforcement
Natural access control (Correct answer)
Natural surveillance

Correct answer: Natural access control

Natural access control uses design elements such as walkways, lighting, and landscaping to guide movement and discourage access to restricted areas.

Question 72: For a PPS to successfully interrupt an adversary, which condition must hold after the first detection?

Remaining adversary delay time must exceed the response force time (Correct answer)
Delay must be placed before detection
Detection must occur at the target
Response force time must exceed delay time

Correct answer: Remaining adversary delay time must exceed the response force time

Responders must arrive before the adversary finishes the remaining tasks on the path.

Question 73: What is the role of security audits in risk management?

To assess the financial status of the organization.
To evaluate and improve security measures (Correct answer)
To focus on the physical appearance of the premises.
To monitor employee performance only.

Correct answer: To evaluate and improve security measures

Security audits are an indispensable tool in risk management, serving as periodic reviews of an organization's physical security posture. They systematically assess the effectiveness of existing security measures, identify gaps or weaknesses, and ensure compliance with policies and regulations. The findings from audits are then used to refine and enhance security protocols, leading to continuous improvement and a stronger defense against threats.

Question 74: Shelter-in-place is generally the preferred protective action for which event?

A structure fire on the floor below
An outdoor chemical release plume (Correct answer)
A gas leak inside the building
A bomb threat naming a specific floor

Correct answer: An outdoor chemical release plume

Sheltering in place with HVAC shut down limits exposure to airborne hazards outside the building.

Question 75: What is the foundational principle of continuing education requirements in the Physical Security Certification field?

Avoiding all challenging situations
Following the easiest path available
Maintaining competence, integrity, and service to stakeholders (Correct answer)
Maximizing personal advancement

Correct answer: Maintaining competence, integrity, and service to stakeholders

The foundational principles of continuing education requirements in Physical Security Certification center on maintaining competence, integrity, and quality service.

Question 76: A guard sees a 'door forced open' alarm, but no card was read and the request-to-exit device did not trigger. What does this most likely mean?

The reader is in maintenance mode
A normal authorized entry
Possible unauthorized entry or a failed door contact (Correct answer)
A duress code was entered

Correct answer: Possible unauthorized entry or a failed door contact

A door opening with no valid credential and no REX signal means either an intrusion or faulty hardware, and it should be investigated.

Question 77: A certificant teaches a new security risk assessment course for the first time. How is this usually viewed under continuing education rules?

It earns unlimited credit each time it is repeated
It only counts if the course is taught for free
It can earn credit, often for preparation and initial presentation, subject to program limits (Correct answer)
It cannot earn credit because teaching is not learning

Correct answer: It can earn credit, often for preparation and initial presentation, subject to program limits

Most security certification programs recognize instruction as a professional development activity, typically with caps and limits on repeated presentations.

Question 78: Why is OSDP preferred over the Wiegand protocol for connecting readers to controllers?

It only works with magnetic stripe cards
It supports bidirectional, encrypted, supervised communication (Correct answer)
It needs no wiring
It eliminates the need for a controller

Correct answer: It supports bidirectional, encrypted, supervised communication

OSDP (especially with Secure Channel) encrypts traffic and supervises the reader link, while Wiegand sends unencrypted data in one direction only.

Question 79: A security manager notices an employee is downloading large volumes of data just before their resignation date. This behavior is best described as:

A technical error requiring IT support
A potential data exfiltration insider threat indicator (Correct answer)
Normal pre-departure housekeeping
An HR matter only

Correct answer: A potential data exfiltration insider threat indicator

Bulk data downloads prior to departure are a recognized behavioral indicator of potential data exfiltration by a departing insider.

Question 80: Which statement best describes 'criticality' in loss event analysis?

The likelihood that a loss event will occur
The cost of the countermeasure
The number of threats targeting an asset
The impact or severity of a loss if it occurs (Correct answer)

Correct answer: The impact or severity of a loss if it occurs

Criticality measures the effect or consequence of a loss on the organization.

Question 81: A certificant attends a 90-minute webinar on lock and key control systems, including a 30-minute break-out of unrelated announcements. How should they report it?

Claim only the time spent on relevant educational content (Correct answer)
Claim nothing because webinars never count
Claim the full 90 minutes
Claim double time because it was online

Correct answer: Claim only the time spent on relevant educational content

Credit should reflect actual relevant instructional time, excluding unrelated portions.

Question 82: Which technology is commonly used for perimeter protection in outdoor environments?

Smart locks
Fingerprint readers
Microwave or infrared perimeter detection sensors (Correct answer)
Facial recognition cameras

Correct answer: Microwave or infrared perimeter detection sensors

Microwave and infrared sensors are widely used for outdoor perimeter detection because they can sense movement across large open areas in various weather conditions.

Question 83: A security officer witnesses discriminatory treatment of visitors based on ethnicity by a fellow officer. What is the most appropriate action?

Join in to fit in with the team
Report the behavior to a supervisor or through the designated reporting channel (Correct answer)
Ignore it because it is not their responsibility
Confront the officer physically

Correct answer: Report the behavior to a supervisor or through the designated reporting channel

Discriminatory conduct violates law and ethical standards and should be reported through proper channels.

Question 84: What is the benefit of using CCTV systems in conjunction with access control?

It controls employee schedules.
It provides a backup solution to the access control system.
It allows for reviewing incidents and verifying access events (Correct answer)
It improves the appearance of the security system.

Correct answer: It allows for reviewing incidents and verifying access events

The combination of CCTV and access control systems significantly strengthens physical security by providing a comprehensive audit trail. When an access event occurs, whether authorized or unauthorized, the corresponding CCTV footage can be linked and reviewed. This allows security personnel to visually verify who accessed an area, investigate suspicious activities, and gather crucial evidence for incident analysis and resolution.

Question 85: An employee badges into a secured area, then passes the card back to a coworker, who uses it to enter as well. Which feature is designed to stop this?

Door-held alarm
Anti-passback (Correct answer)
Duress code
Elevator control

Correct answer: Anti-passback

Anti-passback rejects a credential that is presented for entry again without first being used to exit.

Question 86: What should be considered when designing an access control system?

The need for surveillance cameras.
The level of security, number of users, and layout of the premises (Correct answer)
The cost of each access control device.
The location of employee offices only.

Correct answer: The level of security, number of users, and layout of the premises

Designing an effective access control system requires a holistic approach that considers several critical factors. The desired level of security dictates the technology and protocols needed, while the number of users impacts system scalability and management. Furthermore, the physical layout of the premises, including entry points, sensitive areas, and traffic flow, must be carefully assessed to ensure optimal placement and coverage of access points.

Question 87: Requiring two authorized people to be present to open a vault applies which control?

Anti-passback
Separation of duties only
Least privilege
Two-person (dual control) rule (Correct answer)

Correct answer: Two-person (dual control) rule

Dual control means no single person can access the protected asset alone.

Question 88: Theft, fire, and natural disasters that offer only a chance of loss and no chance of gain are examples of what kind of risk?

Pure risk (Correct answer)
Residual risk
Dynamic risk
Speculative risk

Correct answer: Pure risk

Pure risk involves only the possibility of loss or no loss, which is the focus of security management.

Question 89: A certificant earns all required continuing education credits but forgets to submit the recertification application before the deadline. What is the most likely result?

The certificant must retake the exam immediately with no other option
The certification renews automatically
The credits are doubled for the next cycle
The certification may lapse or be placed in a grace/suspended status until the process is completed (Correct answer)

Correct answer: The certification may lapse or be placed in a grace/suspended status until the process is completed

Earning credits is not enough; the recertification must be formally submitted, or the credential risks lapsing.

Question 90: Probability of interruption (PI) in a physical protection system evaluation refers to which concept?

The likelihood of a power outage interrupting operations
The probability that the response force arrives in time to stop the adversary (Correct answer)
The chance an alarm system will produce a nuisance alarm
The odds that an adversary abandons the attack

Correct answer: The probability that the response force arrives in time to stop the adversary

PI is the probability that responders interrupt the adversary before the attack is completed.

Question 91: A security manager wants a camera that can automatically track a moving intruder across a large parking lot. Which camera type fits best?

PTZ (pan-tilt-zoom) (Correct answer)
Pinhole covert
Fixed bullet with a wide-angle lens
Fixed dome

Correct answer: PTZ (pan-tilt-zoom)

PTZ cameras can pan, tilt, and zoom, often with auto-tracking, to follow a target across a wide area.

Question 92: What quality assurance measure supports industry best practices?

Quality only matters for new practitioners
Quality checks are unnecessary for experienced professionals
Annual review is sufficient
Regular self-assessment, peer review, and adherence to established standards (Correct answer)

Correct answer: Regular self-assessment, peer review, and adherence to established standards

Ongoing quality assurance through self-assessment, peer review, and standards adherence ensures continuous improvement.

Question 93: In physical security technology, what does 'UPS' stand for and why is it important?

Uninterruptible Power Supply — to keep security systems operational during power outages (Correct answer)
Universal Patrol System — to coordinate guard rounds
User Permission Settings — to manage access levels
Unified Protection Software — to centralize security management

Correct answer: Uninterruptible Power Supply — to keep security systems operational during power outages

An Uninterruptible Power Supply (UPS) provides backup power to keep critical security systems such as cameras and access control online during power outages.

Question 94: Which statement best describes a recertification cycle?

An optional program for retired certificants only
A defined period during which required continuing education must be earned to maintain the credential (Correct answer)
A monthly check of employer training records
A one-time requirement completed right after passing the exam

Correct answer: A defined period during which required continuing education must be earned to maintain the credential

A recertification cycle is a fixed time window in which the certificant must meet continuing education requirements.

Question 95: Trimming hedges to under 3 feet and raising tree canopies to about 6-8 feet primarily supports which CPTED principle?

Target hardening
Maintenance only
Natural surveillance (Correct answer)
Territorial reinforcement

Correct answer: Natural surveillance

Clear sightlines let legitimate users observe activity, increasing the perceived risk to offenders.

Question 96: What ethical standard governs industry best practices practice?

Ethics are personal opinions, not professional requirements
Adherence to the profession's code of ethics and applicable laws and regulations (Correct answer)
Ethics only apply in academic settings
Ethical standards are optional for certified professionals

Correct answer: Adherence to the profession's code of ethics and applicable laws and regulations

Professional ethics codes and applicable laws provide the framework for ethical practice in every professional field.

Question 97: What quality assurance measure supports professional standards and ethics?

Annual review is sufficient
Quality only matters for new practitioners
Regular self-assessment, peer review, and adherence to established standards (Correct answer)
Quality checks are unnecessary for experienced professionals

Correct answer: Regular self-assessment, peer review, and adherence to established standards

Ongoing quality assurance through self-assessment, peer review, and standards adherence ensures continuous improvement.

Question 98: A security professional is asked to perform a technical assessment outside their area of competence. What should they do?

Accept and learn on the job without telling the client
Accept but charge a lower fee
Accept and copy a report from another site
Decline or bring in a qualified expert and disclose this to the client (Correct answer)

Correct answer: Decline or bring in a qualified expert and disclose this to the client

Professional standards require working only within one's competence or getting qualified help with full disclosure.

Question 99: Which of the following best describes 'layered security' or 'defense in depth'?

Using multiple overlapping security controls so that if one fails, others remain effective (Correct answer)
Relying entirely on perimeter fencing
Using only one highly advanced security measure
Installing as many cameras as possible

Correct answer: Using multiple overlapping security controls so that if one fails, others remain effective

Defense in depth uses multiple overlapping layers of security controls so that a failure in one layer does not result in a complete security breach.

Question 100: What should be included in a physical security assessment report?

A description of the building's architectural design.
A list of security personnel on duty.
Identified risks, vulnerabilities, recommendations, and mitigation plans (Correct answer)
Only the security budget.

Correct answer: Identified risks, vulnerabilities, recommendations, and mitigation plans

A comprehensive physical security assessment report serves as a critical document for understanding an organization's security posture. It must detail specific risks and vulnerabilities discovered during the assessment, offering a clear picture of potential threats. Crucially, it also includes actionable recommendations and concrete mitigation plans to address these weaknesses, guiding future security improvements.

Question 101: In a security risk assessment, which formula best represents how risk is commonly expressed?

Risk = Threat + Cost
Risk = Vulnerability - Countermeasures
Risk = Likelihood x Consequence (impact) (Correct answer)
Risk = Asset value / Threat

Correct answer: Risk = Likelihood x Consequence (impact)

Risk is typically a function of how likely an event is and how severe its impact would be.

Question 102: Under a robust offboarding process, which action is the MOST critical from a physical security perspective?

Sending a farewell email to the team
Arranging a going-away party
Collecting the employee's desk plant
Revoking all access credentials, collecting physical badges, and conducting an exit interview (Correct answer)

Correct answer: Revoking all access credentials, collecting physical badges, and conducting an exit interview

Revoking credentials, recovering access media, and conducting an exit interview ensures a clean break and reduces residual access risk.

Question 103: What is the role of a PSIM (Physical Security Information Management) system?

To design building floor plans
To integrate data from multiple disparate security systems into a unified interface for real-time situational awareness (Correct answer)
To process payroll for security personnel
To manage vendor contracts

Correct answer: To integrate data from multiple disparate security systems into a unified interface for real-time situational awareness

A PSIM integrates inputs from various security systems — cameras, alarms, access control — into a single interface, enhancing situational awareness and response coordination.

Question 104: A security professional holding a certification is found to have falsified their experience on the application. What is the likely consequence?

A warning letter only, regardless of severity
An automatic upgrade to a higher credential
Revocation of the certification by the certifying body (Correct answer)
No consequence once the certification is issued

Correct answer: Revocation of the certification by the certifying body

Certifying bodies may revoke credentials obtained through misrepresentation because it violates their ethics requirements.

Question 105: How should continuing education requirements knowledge be maintained and updated?

Through continuous professional development, current literature review, and professional networking (Correct answer)
Initial training provides lifelong competence
Knowledge updates are only needed every five years
Learning stops after certification

Correct answer: Through continuous professional development, current literature review, and professional networking

Professional competence requires ongoing development through education, literature review, and engagement with the professional community.

Question 106: What is the primary function of an intrusion detection system (IDS) in physical security?

To manage employee scheduling
To automatically lock all doors during an alarm
To detect unauthorized entry or movement within a protected area and generate an alert (Correct answer)
To control lighting levels in secured zones

Correct answer: To detect unauthorized entry or movement within a protected area and generate an alert

An IDS detects unauthorized intrusion or movement and triggers alerts so security personnel can respond appropriately.

Question 107: What is the first step in a physical security assessment?

Prepare a budget for security enhancements.
Identify the assets that need protection (Correct answer)
Identify the type of security personnel required.
Assess the current security technologies in place.

Correct answer: Identify the assets that need protection

The foundational step in any physical security assessment is to clearly define what needs protection. Identifying critical assets, whether they are people, data, equipment, or intellectual property, allows security professionals to prioritize their efforts effectively. Without knowing what is valuable, it's impossible to accurately determine threats or implement appropriate security measures.

Question 108: Why should security records containing personal information be subject to a records retention policy?

To ensure all records are kept forever
To allow records to be deleted whenever convenient
To balance legal, regulatory, and litigation needs with privacy and storage limits (Correct answer)
To allow officers to take records home

Correct answer: To balance legal, regulatory, and litigation needs with privacy and storage limits

Retention policies set how long records are kept to meet legal needs while protecting privacy.

Question 109: Which device on a controlled door reports to the access control panel whether the door is physically open or closed?

Card reader
Electric strike
Request-to-exit sensor
Door position switch (Correct answer)

Correct answer: Door position switch

A door position switch (door contact) monitors the door's state, so the system can detect door-forced and door-held-open events.

Question 110: Probability of detection for an alarm system is best described as the product of which two factors?

Delay time and response time
Probability of interruption and probability of neutralization
Threat likelihood and consequence severity
Probability of sensing and probability of assessment (Correct answer)

Correct answer: Probability of sensing and probability of assessment

An alarm counts as a detection only when a sensor activates and the alarm is correctly assessed.

Question 111: In a security risk assessment, which step should normally come FIRST?

Select countermeasures
Identify and value assets (Correct answer)
Train guard staff
Calculate return on investment

Correct answer: Identify and value assets

You must know what you are protecting and its value before analyzing threats and vulnerabilities.

Question 112: Which door lock configuration should be used on a stairwell door that must allow fire department re-entry when the fire alarm activates?

Fail-safe lock tied to the fire alarm system (Correct answer)
Mechanical deadbolt
Double-cylinder lock
Fail-secure electric strike

Correct answer: Fail-safe lock tied to the fire alarm system

Fail-safe locks unlock when power is removed, allowing re-entry and egress during a fire alarm event.

Question 113: What is the primary security concern when integrating physical security systems with IP networks?

Higher maintenance costs
Reduced camera resolution
Increased electricity consumption
Exposure to cyber vulnerabilities such as unauthorized remote access or data interception (Correct answer)

Correct answer: Exposure to cyber vulnerabilities such as unauthorized remote access or data interception

Connecting physical security devices to IP networks introduces cybersecurity risks, including unauthorized remote access, firmware exploits, and data interception.

Question 114: During a vulnerability assessment, what does an Adversary Sequence Diagram (ASD) primarily model?

The order of steps in an incident report
Guard shift rotation schedules
Physical areas, protection layers, and path elements an adversary must pass to reach a target (Correct answer)
The organizational chart of the security department

Correct answer: Physical areas, protection layers, and path elements an adversary must pass to reach a target

An ASD maps layers and path elements so analysts can find the most vulnerable adversary paths.

Question 115: What does 'false positive' mean in the context of intrusion detection systems?

An alarm triggered by a non-threatening condition, such as an animal or wind movement (Correct answer)
A system correctly identifying a real intrusion
A camera with a faulty lens
A system that fails to detect a real intrusion

Correct answer: An alarm triggered by a non-threatening condition, such as an animal or wind movement

A false positive occurs when an IDS generates an alarm in the absence of an actual threat, such as from wildlife, weather, or equipment vibration.

Question 116: A camera needs to monitor a perimeter fence line at night with no visible lighting. What is the most suitable choice?

A standard color camera with no illumination
A higher frame rate
A wider-angle lens
A camera with an infrared illuminator or a thermal camera (Correct answer)

Correct answer: A camera with an infrared illuminator or a thermal camera

IR illumination or thermal imaging lets the camera see in darkness without visible light that would alert intruders.

Question 117: An officer who is off duty but in uniform makes offensive public comments that are recorded and shared online. Why is this a professional standards issue?

Off-duty conduct never matters
Conduct while identifiable as security staff reflects on the employer and the profession (Correct answer)
It is only an issue if the officer is arrested
It matters only if the comments mention a client by name

Correct answer: Conduct while identifiable as security staff reflects on the employer and the profession

Behavior while identifiable as security personnel affects public trust in the employer and the profession.

Question 118: Which of the following BEST represents the CPTED principle of 'image and aesthetics'?

Displaying prominent security company logos and warning signs
Selecting aesthetically pleasing locks that blend with door hardware
Maintaining a clean, well-kept environment that signals active ownership and care (Correct answer)
Ensuring security camera housings match the building's exterior color scheme

Correct answer: Maintaining a clean, well-kept environment that signals active ownership and care

Image and aesthetics in CPTED refers to maintaining a well-kept environment that signals active ownership, psychologically deterring criminal activity through visible signs of care.

Question 119: What is the most likely weakness of a legacy 26-bit Wiegand proximity credential?

It cannot be read by any reader
It only works outdoors
It requires biometric enrollment
Its small, unencrypted ID can be read and cloned easily (Correct answer)

Correct answer: Its small, unencrypted ID can be read and cloned easily

26-bit prox cards send a short static number with no encryption, so cheap devices can capture and copy it.

Question 120: What role do biometric systems play in access control?

They use unique physical traits to verify identity (Correct answer)
They allow employees to log into their computers.
They monitor social media accounts.
They track the performance of security guards.

Correct answer: They use unique physical traits to verify identity

Biometric systems enhance access control by utilizing distinct biological or behavioral characteristics for identity verification. Instead of relying on cards or passwords, these systems scan unique traits like fingerprints, facial features, or iris patterns, which are extremely difficult to forge or steal. This method provides a highly secure and reliable way to ensure that only the legitimate individual gains access.

Question 121: A pre-employment background investigation for a sensitive position should include which of the following?

Social media follower count
Favorite hobbies and interests
Political party affiliation
Criminal history, employment verification, and reference checks (Correct answer)

Correct answer: Criminal history, employment verification, and reference checks

Comprehensive background investigations for sensitive roles typically include criminal history, employment verification, and professional reference checks.

Question 122: An officer must describe a fleeing suspect over the radio. What order is generally recommended?

Shoes first, then head, then clothing
General to specific: sex, race, age, height, build, then clothing from head to toe (Correct answer)
Clothing color only
Only the direction of travel

Correct answer: General to specific: sex, race, age, height, build, then clothing from head to toe

Going from general features to specific clothing, head to toe, gives responders a usable description fast.

Question 123: Which NFPA standard provides guidance specifically on premises security?

NFPA 13
NFPA 1600
NFPA 72
NFPA 730 (Correct answer)

Correct answer: NFPA 730

NFPA 730 is the Guide for Premises Security, with NFPA 731 covering electronic premises security system installation.

Question 124: Guiding pedestrians toward a single main entrance using walkways and landscaping is an example of what?

Organized surveillance
Natural access control (Correct answer)
Mechanical access control
Target displacement

Correct answer: Natural access control

Natural access control uses design elements to channel people without relying on guards or locks.

Question 125: A building setback from the street is considered a CPTED enhancement primarily because it:

Improves the building's curb appeal and aesthetic value
Creates a standoff distance that limits vehicle-borne threats and provides reaction time (Correct answer)
Reduces heating and cooling costs for the building
Reduces noise and vibration from street traffic

Correct answer: Creates a standoff distance that limits vehicle-borne threats and provides reaction time

A building setback creates standoff distance that provides security personnel additional reaction time and reduces the blast and impact radius of vehicle-borne threats.

Physical Security Professional (PSP) Certification Exam

This exam certifies individuals in the knowledge and skills required to conduct physical security vulnerability assessments, apply appropriate countermeasures, and manage physical security projects.

125

Questions

150 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds

These practice questions were written with AI tools. They are not real exam questions. We have not yet matched this exam's facts to an official source, so confirm fees, dates and rules with the exam body. Not reviewed by a subject-matter expert. Editorial policy