Mixed Deck — All PSC Topics Flashcards

An employee is terminated involuntarily. What is the best practice for that person's access credentials?

Answer: Deactivate them immediately, ideally at or before notification

Revoking access right away closes the window for retaliation or theft by a departing employee.

ADA standards require door hardware on accessible doors to be operable without which of the following?

Answer: Tight grasping, tight pinching, or twisting of the wrist

The ADA requires operable parts usable with one hand without tight grasping, pinching, or wrist twisting, favoring lever handles.

Why are dual-technology (e.g., PIR plus microwave) sensors commonly used?

Answer: To reduce nuisance alarms by requiring both technologies to activate

Requiring both technologies to agree filters out environmental causes that would trigger only one.

How should professional standards and ethics knowledge be maintained and updated?

Answer: Through continuous professional development, current literature review, and professional networking

Professional competence requires ongoing development through education, literature review, and engagement with the professional community.

A certificant moves from a security consulting role to a corporate security manager role mid-cycle. What happens to the continuing education requirement?

Answer: It continues to apply; credits earned in either role still count if relevant

Continuing education obligations follow the certificant, not the employer or job title.

When documenting a witness statement, the officer should:

Answer: Record the witness's own words and have the witness review and sign it

Statements in the witness's own words, reviewed and signed, keep accuracy and evidentiary value.

What does a UL TL-15 safe rating indicate?

Answer: The door resists common hand and power tools for 15 minutes of net working time

TL-15 means the door and front face resist an expert tool attack for 15 minutes of net working time.

A certificant earned more credits than required in the current cycle. What should they do first to know whether the excess can carry over?

Answer: Check the certifying body's current recertification handbook rules

Carry-over rules vary by program and change over time, so the official handbook is the authoritative source.

A security manager notices an employee is downloading large volumes of data just before their resignation date. This behavior is best described as:

Answer: A potential data exfiltration insider threat indicator

Bulk data downloads prior to departure are a recognized behavioral indicator of potential data exfiltration by a departing insider.

The DHS 'Run, Hide, Fight' guidance for an active shooter recommends fighting only when:

Answer: Life is in imminent danger and running or hiding is not possible

Fighting is the last resort when life is in imminent danger and escape or concealment is not possible.

Which statement best describes a 'functional test' of an intrusion sensor, as opposed to a full performance test?

Answer: It confirms the sensor is operating and reports an alarm, without measuring detection probability against defeat methods

Functional tests confirm basic operation, while performance tests measure effectiveness, such as P(D), under realistic conditions.

What distinguishes a security audit from a security survey?

Answer: An audit checks compliance with existing policies and standards, while a survey is a broader critical review of the security posture

Audits measure conformance to set criteria, while surveys assess threats, vulnerabilities, and recommendations more broadly.

A vehicle barrier rated M30 under ASTM F2656 has been tested to stop what?

Answer: A 15,000 lb medium-duty truck at about 30 mph

The M designation refers to a 15,000 lb medium-duty truck and 30 refers to an impact speed of about 30 mph.

A security director learns that a recent vulnerability assessment found serious flaws, but senior management wants the report softened. What is the most ethical course?

Answer: Present the findings accurately and explain the risk clearly

Truthfulness and integrity require accurate reporting of risks to decision-makers through proper channels.

What role does evacuation planning play in emergency response?

Answer: It helps ensure safe and efficient evacuation during an emergency

Evacuation planning is a critical component of emergency response, specifically designed to protect lives by guiding occupants to safety during a crisis. A well-developed plan outlines clear exit routes, assembly points, and procedures, minimizing confusion and panic. This systematic approach ensures that personnel can evacuate the premises safely and efficiently, reducing the risk of injury or loss of life.

What is the main purpose of a Design Basis Threat (DBT) in security evaluation?

Answer: To define the adversary attributes and capabilities the PPS must be designed and evaluated against

A DBT describes the adversary's numbers, tactics, weapons, tools, and insider help, which gives a fixed basis for design and evaluation.

When applying CPTED to retail environments, which approach is MOST effective at deterring shoplifting?

Answer: Placing cashier stations near exits with clear sightlines to the store

Cashier stations near exits with clear sightlines combine natural surveillance and natural access control, deterring theft by increasing the likelihood of observation and interception.

What is the purpose of incident documentation during emergencies?

Answer: To provide a record for legal purposes and future analysis

Incident documentation during emergencies is crucial for creating a detailed and accurate record of what transpired. This documentation serves multiple vital purposes: it provides evidence for potential legal or insurance claims, aids in post-incident analysis to identify lessons learned and improve future responses, and ensures accountability. Without thorough documentation, organizations lose valuable insights and may face challenges in recovery and compliance.

What is the primary purpose of access control systems?

Answer: To restrict access to authorized individuals only

The fundamental purpose of access control systems in physical security is to regulate who can enter specific areas or facilities. By verifying credentials and permissions, these systems ensure that only authorized personnel gain entry, preventing unauthorized access by intruders or individuals without proper clearance. This restriction is vital for protecting sensitive areas, assets, and personnel.

Which of the following is a key indicator of potential insider threat activity?

Answer: Accessing systems and areas outside normal job duties

Accessing systems or areas beyond an employee's role is a classic behavioral indicator of insider threat activity.