Physical Security Professional (PSP) Certification Exam — Questions and Answers

Question 1: Which PTZ camera operational mode automatically moves the camera to preset positions at specified time intervals to survey a wider area?

Guard tour / auto-patrol mode (Correct answer)
Preset-on-alarm mode
Auto-tracking mode
Privacy masking mode

Correct answer: Guard tour / auto-patrol mode

Guard tour mode programs the PTZ camera to automatically cycle through a series of preset positions on a defined schedule, allowing one camera to monitor multiple areas periodically.

Question 2: What is the MOST important outcome of a comprehensive risk management program?

Reduced headcount in the security department
Zero security incidents
Informed decision-making about security investments that align with organizational risk tolerance (Correct answer)
Complete elimination of all identified risks

Correct answer: Informed decision-making about security investments that align with organizational risk tolerance

Risk management enables evidence-based security decisions aligned with organizational priorities and acceptable risk levels.

Question 3: What is the recommended minimum distance between parallel rows of concertina wire on a high-security perimeter fence to slow intruder movement?

2 feet apart
The rows should not be parallel but staggered (Correct answer)
One strand is sufficient for most applications
6 inches apart

Correct answer: The rows should not be parallel but staggered

Staggering concertina wire rows in a pyramid or box configuration is more effective than parallel rows, as it entangles intruders more effectively and is harder to defeat.

Question 4: A security consultant is assessing an industrial facility and notes that bright security lights illuminate the parking lot but cast deep shadows behind large equipment stored near the perimeter fence. What term describes this lighting problem?

Light pollution
Shadow pooling / contrast shadow effect (Correct answer)
Spill light
Veiling glare

Correct answer: Shadow pooling / contrast shadow effect

Shadow pooling occurs when bright direct lighting creates deep, dark shadows behind objects, providing concealment opportunities that outweigh the benefits of the bright areas.

Question 5: What is the CPTED concept of 'activity support' and how does it improve security?

Providing technical support for security system maintenance
Installing security guard booths at key locations to support patrol activities
Programming legitimate activities and uses into spaces to increase natural surveillance through user presence (Correct answer)
Supporting criminal investigations through evidence collection activities

Correct answer: Programming legitimate activities and uses into spaces to increase natural surveillance through user presence

Activity support programs legitimate uses (benches, food carts, exercise areas) into otherwise empty or underused spaces to generate regular foot traffic, increasing natural surveillance and deterring crime.

Question 6: Which card technology offers the highest level of security for access control credentials?

Proximity (125 kHz)
Magnetic stripe
Smart card (contact/contactless) (Correct answer)
Wiegand wire

Correct answer: Smart card (contact/contactless)

Smart cards use encrypted microprocessors that make them significantly more resistant to cloning and counterfeiting compared to magnetic stripe or proximity technologies.

Question 7: According to FEMA and DoD perimeter security standards, what is the recommended minimum clear zone width on BOTH sides of an outer perimeter fence?

No specific requirement — determined by risk assessment
10 feet (3m) inside, 10 feet (3m) outside
20 feet (6m) inside, 20 feet (6m) outside (Correct answer)
50 feet (15m) inside, 20 feet (6m) outside

Correct answer: 20 feet (6m) inside, 20 feet (6m) outside

A 20-foot clear zone on both sides of the perimeter fence provides unobstructed surveillance and eliminates concealment cover for approaching intruders.

Question 8: For a parking garage security lighting design, what is the recommended minimum maintained horizontal illuminance at pavement level according to IES RP-20?

1.0 foot-candle (11 lux)
5.0 foot-candles (54 lux) (Correct answer)
10 foot-candles (108 lux)
0.5 foot-candles (5 lux)

Correct answer: 5.0 foot-candles (54 lux)

IES RP-20 recommends a minimum 5.0 foot-candles maintained horizontal illuminance at pavement level in parking garages to support both personal safety and camera surveillance effectiveness.

Question 9: Which IDS sensor is specifically designed to detect an attempt to break through walls, floors, or ceilings rather than entering through doors or windows?

Seismic/vibration sensor (Correct answer)
Glass break detector
Photoelectric beam sensor
Passive infrared motion detector

Correct answer: Seismic/vibration sensor

Seismic/vibration sensors detect the physical vibrations caused by drilling, sawing, or hammering through walls and structural elements, providing 'structural penetration' detection.

Question 10: What is the primary security advantage of using a 'credential + PIN' (something you have + something you know) access control system?

It is faster to process than single-factor authentication
It is required by all US federal facilities
It eliminates the need for audit logs
It provides multi-factor authentication, reducing risk from stolen or cloned credentials (Correct answer)

Correct answer: It provides multi-factor authentication, reducing risk from stolen or cloned credentials

Combining a physical credential with a PIN provides two-factor authentication, so a stolen or cloned card alone is insufficient to gain access.

Question 11: Which perimeter intrusion detection system (PIDS) technology is MOST susceptible to nuisance alarms caused by wind, animals, and debris?

Taut-wire fence sensor
Microwave beam sensor
Buried seismic/vibration sensor cable (Correct answer)
Ported coaxial leaky cable

Correct answer: Buried seismic/vibration sensor cable

Buried seismic/vibration sensors are highly sensitive to ground vibrations from any source, making them susceptible to nuisance alarms from wind-driven debris, animals, and nearby traffic.

Question 12: A physical security professional is conducting a tabletop exercise. What is the PRIMARY purpose of this type of exercise?

Validate communication systems during a live drill
Test equipment functionality under real conditions
Train first responders in physical intervention techniques
Discuss roles and responses to a hypothetical scenario without deploying resources (Correct answer)

Correct answer: Discuss roles and responses to a hypothetical scenario without deploying resources

Tabletop exercises are discussion-based sessions where participants talk through their roles and responses to a scenario without activating actual resources.

Question 13: What is the key difference between qualitative and quantitative risk assessment methods?

There is no meaningful difference between the two methods
Quantitative can only be performed by external consultants
Qualitative uses descriptive scales while quantitative assigns numerical values and calculates expected losses (Correct answer)
Qualitative is always more accurate than quantitative

Correct answer: Qualitative uses descriptive scales while quantitative assigns numerical values and calculates expected losses

Qualitative assessment uses categories like high/medium/low while quantitative assigns numerical probabilities and dollar values.

Question 14: What is the primary difference between a 'point' intrusion detection sensor and a 'line' or 'volumetric' sensor?

Point sensors are more expensive than volumetric sensors
Point sensors protect a single specific location (door/window), while volumetric sensors cover an entire area or zone (Correct answer)
Point sensors detect motion only while volumetric sensors detect heat
Point sensors require a wired connection while volumetric sensors are wireless

Correct answer: Point sensors protect a single specific location (door/window), while volumetric sensors cover an entire area or zone

Point sensors (magnetic door contacts, glass break detectors) protect a single discrete location, while volumetric sensors (PIR, microwave) detect intrusion throughout an entire protected volume or zone.

Question 15: What role does Crime Prevention Through Environmental Design (CPTED) play in asset protection?

It replaces the need for security personnel
It uses the built environment to reduce opportunities for crime against assets (Correct answer)
It eliminates the need for electronic security systems
It focuses exclusively on landscaping around facilities

Correct answer: It uses the built environment to reduce opportunities for crime against assets

CPTED modifies the physical environment to naturally reduce criminal opportunity and enhance asset protection.

Question 16: What is the minimum recommended fence height according to ASIS guidelines for a standard industrial security perimeter?

8 feet (2.4m)
6 feet (1.8m)
7 feet (2.1m) (Correct answer)
4 feet (1.2m)

Correct answer: 7 feet (2.1m)

ASIS guidelines recommend a minimum 7-foot (2.1m) fence height for industrial security perimeters, with additional topping for higher-security applications.

Question 17: In a CPTED second-generation (2nd Gen) assessment, what factor is evaluated in addition to the physical design elements assessed in 1st Gen CPTED?

Electronic security system effectiveness
Emergency response capability of the nearest police station
Building material strength and forced-entry resistance
Social dynamics, community cohesion, and the human behavioral dimension of space use (Correct answer)

Correct answer: Social dynamics, community cohesion, and the human behavioral dimension of space use

2nd Gen CPTED expands beyond physical design to include social dimensions — community programs, social cohesion, and behavioral norms that affect whether physical CPTED measures are effective.

Question 18: What is a Hazard Vulnerability Analysis (HVA) used for in emergency planning?

Establishing communication trees for key personnel
Documenting after-action lessons learned
Training staff in first-aid procedures
Identifying and prioritizing potential hazards based on likelihood and impact (Correct answer)

Correct answer: Identifying and prioritizing potential hazards based on likelihood and impact

An HVA systematically identifies potential hazards and evaluates them by likelihood and severity of impact to help prioritize emergency planning efforts.

Question 19: In CPTED principles, what does 'territorial reinforcement' mean and how is it applied?

Assigning security guards to enforce territorial boundaries
Using design features to create a sense of ownership and legitimate use that deters potential offenders (Correct answer)
Installing fences and barriers to define territory boundaries
Marking all facility boundaries with warning signs

Correct answer: Using design features to create a sense of ownership and legitimate use that deters potential offenders

Territorial reinforcement uses design elements (landscaping, walkways, signage, lighting) to distinguish private from public space, creating a psychological sense that the area is owned and monitored.

Question 20: The principle of 'shelter-in-place' is MOST appropriate in which scenario?

A fire is detected inside the building
A medical emergency occurs in the lobby
A power outage affects the entire campus
A hazardous material release occurs outside the facility (Correct answer)

Correct answer: A hazardous material release occurs outside the facility

Shelter-in-place is used when staying inside a sealed building provides more protection than evacuation, such as during an outdoor hazardous material release.

Question 21: According to ASTM standards, what does an 'F2656 M50 P1' anti-ram barrier rating indicate?

The barrier is rated for 50 mph with a P1 (positive) structural test result
The barrier stopped a 5,000 kg vehicle at 80 km/h with less than 1 meter of penetration (Correct answer)
The barrier stopped a 6,800 kg vehicle at 80 km/h with no penetration
The rating indicates bollard spacing of 50 cm with P1 profile height

Correct answer: The barrier stopped a 5,000 kg vehicle at 80 km/h with less than 1 meter of penetration

ASTM F2656 M50 P1 means the barrier stopped a 5,000 kg (Class M) vehicle at 80 km/h (50 mph) with 1 meter or less penetration (P1 = Penetration Level 1).

Question 22: A security manager notices that access logs show an employee's card being used to enter a server room while the same employee is simultaneously badged into the main lobby. This is BEST described as:

A time-zone configuration error
A duplicate credential or card cloning incident (Correct answer)
A system malfunction
An anti-passback violation

Correct answer: A duplicate credential or card cloning incident

Simultaneous use of a credential at two locations indicates either a cloned card or a duplicate credential issued to an unauthorized person.

Question 23: What is the primary security concern with open-plan office environments regarding asset protection?

Reduced ability to control access to sensitive assets and information (Correct answer)
Difficulty installing security cameras
Increased noise levels affecting productivity
Higher heating and cooling costs

Correct answer: Reduced ability to control access to sensitive assets and information

Open-plan designs inherently reduce the ability to restrict physical access to sensitive materials and equipment.

Question 24: What is the most important consideration when integrating fire alarm systems with access control?

Reducing the number of fire alarm pull stations needed
Connecting fire alarms to external speakers only
Eliminating manual fire alarm testing requirements
Ensuring access doors automatically unlock during fire alarms for safe egress (Correct answer)

Correct answer: Ensuring access doors automatically unlock during fire alarms for safe egress

Life safety requires that access-controlled doors unlock automatically during fire alarms to allow unimpeded emergency egress.

Question 25: When presenting risk assessment findings to executive management, what format is most effective?

Highly technical reports with detailed sensor specifications
Risk-based business cases showing potential losses, countermeasure costs, and return on security investment (Correct answer)
Verbal briefings with no written documentation
Compliance checklists with pass/fail ratings

Correct answer: Risk-based business cases showing potential losses, countermeasure costs, and return on security investment

Business-oriented presentations that quantify risk in financial terms resonate most effectively with executive decision-makers.

Question 26: Under the Americans with Disabilities Act (ADA) and US privacy law, which area is generally PROHIBITED for video surveillance installation in a workplace?

Parking lots and driveways
Loading docks and shipping areas
Break rooms and kitchens
Restrooms and changing rooms (Correct answer)

Correct answer: Restrooms and changing rooms

Video surveillance in restrooms and changing rooms is prohibited under US federal and state privacy laws because individuals have a reasonable expectation of privacy in these locations.

Question 27: Which fence type is recommended by ASIS for high-security applications due to its rigidity and resistance to cut-through attacks?

Welded wire mesh panel fence (Correct answer)
Chain-link fence (11-gauge)
Wooden privacy fence
Woven wire fence

Correct answer: Welded wire mesh panel fence

Welded wire mesh panel fences (such as 358 anti-cut mesh) offer superior resistance to cutting and climbing compared to chain-link due to their rigid construction and small aperture size.

Question 28: What is the primary purpose of a 'clear zone' (also called a buffer zone) at a facility's perimeter?

To provide parking for security personnel
To eliminate concealment and provide unobstructed surveillance of the perimeter (Correct answer)
To store emergency equipment near the fence line
To create a fire break around the facility

Correct answer: To eliminate concealment and provide unobstructed surveillance of the perimeter

A clear zone eliminates vegetation and objects that could provide concealment for intruders, improving detection capability for security personnel and electronic sensors.

Question 29: According to IES standards, what is the recommended Color Rendering Index (CRI) minimum for security lighting where human identification and camera performance are important?

CRI ≥ 65
CRI ≥ 50
CRI ≥ 80 (Correct answer)
CRI ≥ 90

Correct answer: CRI ≥ 80

IES recommends a minimum CRI of 80 for security applications where facial identification and camera color accuracy are required, as lower CRI distorts colors making identification harder.

Question 30: Which US federal regulation mandates specific access control requirements for facilities handling classified national security information?

NIST SP 800-116
NFPA 101 Life Safety Code
ICD 705 (Intelligence Community Directive 705) (Correct answer)
HIPAA Security Rule

Correct answer: ICD 705 (Intelligence Community Directive 705)

ICD 705 establishes the physical and technical security standards for Sensitive Compartmented Information Facilities (SCIFs), including strict access control requirements.

Question 31: What is the primary purpose of establishing a common command and control center for integrated security systems?

To reduce the number of security monitors needed
To provide centralized monitoring, correlation, and coordinated response across all security subsystems (Correct answer)
To satisfy building code requirements
To eliminate the need for field security officers

Correct answer: To provide centralized monitoring, correlation, and coordinated response across all security subsystems

A centralized command center enables operators to monitor all systems, correlate events, and coordinate responses from a single location.

Question 32: In asset classification for physical security purposes, what factor is LEAST important?

Criticality to business operations
Original purchase date of the asset (Correct answer)
Replacement cost of the asset
Attractiveness to potential thieves

Correct answer: Original purchase date of the asset

Original purchase date has minimal relevance to current security requirements compared to value, criticality, and theft attractiveness.

Question 33: What is the primary advantage of integrating access control with video surveillance systems?

Simplified system programming
Automatic visual verification of access events and the ability to review footage linked to specific credential uses (Correct answer)
Reduced cabling costs
Elimination of the need for security personnel

Correct answer: Automatic visual verification of access events and the ability to review footage linked to specific credential uses

Integration links access events directly to video footage, enabling immediate visual verification and streamlined incident investigation.

Question 34: Which lighting technology offers the BEST combination of energy efficiency, long lifespan, and instant-on capability for security applications, replacing older HID and fluorescent systems?

Fluorescent T8 lighting
LED (Light Emitting Diode) lighting (Correct answer)
High-pressure sodium (HPS) lighting
Metal halide (MH) lighting

Correct answer: LED (Light Emitting Diode) lighting

LED lighting offers 50,000-100,000+ hour lifespan, 60-80% energy savings over HID, instant full-brightness activation, and superior color rendering for camera performance.

Question 35: What is the purpose of an 'anti-passback' feature in an access control system?

To prevent credential sharing by requiring card-in and card-out sequences (Correct answer)
To prevent cards from being used after expiration
To deny access to terminated employees retroactively
To block entry from the rear of a facility

Correct answer: To prevent credential sharing by requiring card-in and card-out sequences

Anti-passback prevents a credential from being used to enter an area again until it has been properly used to exit, stopping users from passing their cards back to others.

Question 36: According to ASIS PSP guidelines, what is the recommended action when a lost or stolen access card is reported?

Immediately deactivate the reported credential in the access control system (Correct answer)
Change all facility access codes within 24 hours
Issue a new card and deactivate the old one within 30 days
Notify law enforcement before taking any system action

Correct answer: Immediately deactivate the reported credential in the access control system

Immediate deactivation of a lost or stolen credential is the first priority to prevent unauthorized use, regardless of whether the loss was accidental or malicious.

Question 37: According to CPTED principles, what is the recommended maximum height for foundation plantings (shrubs) near building entry points?

No restriction — natural screening is preferred
4 feet (1.2m) maximum (Correct answer)
2 feet (0.6m) maximum
6 feet (1.8m) maximum

Correct answer: 4 feet (1.2m) maximum

CPTED guidelines typically recommend shrubs near entries remain below 4 feet (1.2m) so they cannot provide concealment for a crouching person while still providing aesthetic landscaping.

Question 38: Which factor is MOST critical when selecting a network infrastructure for integrated security systems?

Using wireless connections for all security devices
Ensuring dedicated bandwidth, network segmentation, and Quality of Service (QoS) for security traffic (Correct answer)
Using the cheapest available network switches
Sharing the corporate network without any modifications

Correct answer: Ensuring dedicated bandwidth, network segmentation, and Quality of Service (QoS) for security traffic

Security systems require guaranteed bandwidth, network isolation, and traffic prioritization to ensure reliable operation.

Question 39: Which of the following is a common challenge when integrating security systems?

Reduction in system costs
Increased system speed
Compatibility issues between different systems (Correct answer)
Simplified user interface

Correct answer: Compatibility issues between different systems

A significant hurdle in integrating security systems is the inherent compatibility issues between different manufacturers' products. These systems often use varying communication protocols, hardware, and software, making it challenging to achieve seamless interoperability. Overcoming these differences typically requires specialized interfaces, middleware, or custom programming, adding complexity and cost to the integration project.

Question 40: What is the significance of establishing risk tolerance levels before conducting a risk assessment?

It satisfies insurance company requirements
It provides clear criteria for determining which risks require treatment and which can be accepted (Correct answer)
It eliminates the need for quantitative analysis
It reduces the cost of the assessment

Correct answer: It provides clear criteria for determining which risks require treatment and which can be accepted

Predefined risk tolerance levels provide objective criteria for determining acceptable versus unacceptable risk levels.

Question 41: In Wiegand access control protocol, which data format is most commonly used in North American installations?

ABA Track II
26-bit Wiegand (Correct answer)
64-bit Wiegand
OSDP v2

Correct answer: 26-bit Wiegand

The 26-bit Wiegand format is the de facto standard in North American access control installations, though its limited address space has prompted migration to longer formats.

Question 42: What should be done if a security alarm system repeatedly triggers false alarms?

Increase the sensitivity of the sensors
Ignore the alarms since they are false
Disable the alarm system temporarily
Schedule a maintenance check to diagnose and fix the issue (Correct answer)

Correct answer: Schedule a maintenance check to diagnose and fix the issue

Repeated false alarms indicate a malfunction or misconfiguration within the alarm system, which can lead to alarm fatigue and reduced response effectiveness. Scheduling a maintenance check is the appropriate action to diagnose the root cause of the false alarms and implement a permanent fix, restoring the system's reliability.

Question 43: Which NIMS component provides a standardized approach to incident management, allowing agencies to work together effectively?

Incident Command System (ICS) (Correct answer)
Continuity of Operations Plan (COOP)
National Response Framework (NRF)
Emergency Support Functions (ESF)

Correct answer: Incident Command System (ICS)

The Incident Command System (ICS) is the NIMS component that provides a standardized, on-scene management structure enabling agencies to coordinate effectively.

Question 44: Which access control system architecture processes authentication decisions at the door-level hardware rather than a central server?

Centralized access control
Distributed (edge) access control (Correct answer)
Cloud-based access control
Analog access control

Correct answer: Distributed (edge) access control

Distributed or edge access control systems store access rules locally at the door controller, allowing continued operation even when network connectivity to the central server is lost.

Question 45: According to ASIS guidelines, how long should alarm event logs be retained for commercial and industrial facilities?

Indefinitely
90 days minimum
30 days minimum
1 year minimum (Correct answer)

Correct answer: 1 year minimum

ASIS recommends retaining alarm event logs for a minimum of 1 year to support investigations, legal proceedings, and trend analysis of alarm patterns.

Question 46: A physical security professional is updating the facility's emergency plan. Which step should be performed FIRST?

Draft new evacuation procedures
Purchase new emergency communications equipment
Conduct a risk and hazard assessment of the facility (Correct answer)
Schedule training for all security staff

Correct answer: Conduct a risk and hazard assessment of the facility

A risk and hazard assessment must be conducted first to identify the specific threats and vulnerabilities that the emergency plan must address.

Question 47: What is a 'video analytics' false positive in the context of a security surveillance system?

The system fails to detect an actual intrusion event
The system incorrectly records footage at the wrong frame rate
The recorded video has compression artifacts that obscure faces
The system generates an alarm for a non-threatening event such as an animal or blowing debris (Correct answer)

Correct answer: The system generates an alarm for a non-threatening event such as an animal or blowing debris

A false positive (nuisance alarm) occurs when the analytics system triggers an alert for a benign event, such as a shadow, animal, or environmental condition, wasting operator attention.

Question 48: Which of the following is the first step in the risk management process?

Risk Identification (Correct answer)
Risk Assessment
Risk Monitoring
Risk Mitigation

Correct answer: Risk Identification

The risk management process begins with identifying potential risks. Before any other steps like assessment, mitigation, or monitoring can occur, an organization must first systematically discover and document what those potential threats and vulnerabilities are.

Question 49: What is 'glare projection' (or controlled lighting) in perimeter security lighting design?

Positioning lights to cast shadows into the facility to hide security activities
Using motion-activated lights to surprise and disorient intruders
Using floodlights aimed outward to blind potential intruders approaching the perimeter (Correct answer)
Installing lights inside the facility to illuminate windows for surveillance

Correct answer: Using floodlights aimed outward to blind potential intruders approaching the perimeter

Glare projection lighting aims bright lights outward from the perimeter to temporarily blind approaching intruders while keeping guards in relative darkness, giving defenders a tactical advantage.

Question 50: What is the primary benefit of maintaining a security system asset inventory with lifecycle tracking?

It enables proactive replacement planning before end-of-life failures create security gaps (Correct answer)
It helps negotiate bulk purchasing discounts
It reduces the number of maintenance staff needed
It satisfies tax depreciation requirements

Correct answer: It enables proactive replacement planning before end-of-life failures create security gaps

Lifecycle tracking allows planned replacement of aging equipment before it fails and creates security vulnerabilities.

Question 51: Which type of fence topping provides the greatest deterrent against climbing while complying with most US local ordinances?

Anti-climb paint
Electric fence topping
Barbed wire (three-strand outrigger)
Razor ribbon (concertina) wire (Correct answer)

Correct answer: Razor ribbon (concertina) wire

Razor ribbon wire (concertina) provides superior anti-climb deterrence compared to barbed wire, though it must be installed in compliance with local ordinances and liability considerations.

Question 52: What cybersecurity risk is MOST commonly exploited in IP surveillance camera systems in US critical infrastructure?

Physical tampering with camera housings
Use of H.265 compression format
PoE (Power over Ethernet) power source attacks
Default or weak manufacturer passwords left unchanged after installation (Correct answer)

Correct answer: Default or weak manufacturer passwords left unchanged after installation

Unchanged default credentials remain the most exploited vulnerability in IP camera systems, allowing attackers to access live feeds, disable recording, or use cameras as botnet nodes.

Question 53: Which of the following is an example of risk transfer?

Purchasing insurance (Correct answer)
Discontinuing a risky operation
Performing regular security audits
Implementing stronger access controls

Correct answer: Purchasing insurance

Risk transfer involves shifting the financial consequences of a risk to a third party. Purchasing insurance is a classic example, as it transfers the financial burden of potential losses (e.g., property damage, liability) from the organization to the insurance company in exchange for premiums.

Question 54: When should an organization conduct a full-scale emergency exercise?

At least annually or as required by regulation, involving real resources and personnel (Correct answer)
Only after an actual emergency has occurred
Every five years as part of long-term planning cycles
Only when mandated by external regulatory auditors

Correct answer: At least annually or as required by regulation, involving real resources and personnel

Full-scale exercises should be conducted at least annually (or per regulatory requirement) to validate plans and train personnel using actual resources and realistic scenarios.

Question 55: Why is it important to maintain calibration records for security sensors such as motion detectors?

To justify the sensor purchase to accounting
To ensure detection sensitivity remains within specifications and reduce false alarms or missed detections (Correct answer)
To track the sensor's market resale value
To satisfy the building inspector

Correct answer: To ensure detection sensitivity remains within specifications and reduce false alarms or missed detections

Calibration ensures sensors detect actual threats while minimizing false alarms, and records prove ongoing maintenance diligence.

Question 56: In CPTED (Crime Prevention Through Environmental Design), what principle is applied when using low-height landscaping near building windows and entrances?

Territorial reinforcement
Natural access control
Natural surveillance (Correct answer)
Target hardening

Correct answer: Natural surveillance

Using low-height landscaping near windows and entrances applies the natural surveillance principle by maintaining sightlines for occupants and passersby to observe criminal activity.

Question 57: What surveillance camera feature allows automatic adjustment of the iris aperture to maintain proper exposure as lighting conditions change throughout the day?

Auto Iris (AI) lens / Direct Drive Iris (DDI) (Correct answer)
Back Light Compensation (BLC)
Infrared Cut Filter (ICF)
Digital Noise Reduction (DNR)

Correct answer: Auto Iris (AI) lens / Direct Drive Iris (DDI)

An Auto Iris (AI) or Direct Drive Iris lens automatically adjusts its aperture in response to changing light levels, maintaining proper exposure from bright daylight to low-light evening conditions.

Question 58: What US standard or guideline provides specific maintained illuminance recommendations for security lighting in different facility zones (perimeter, parking, vehicle gates)?

ANSI/ASIS PSC.1
IES RP-33 (Recommended Practice for Lighting Exterior Environments) (Correct answer)
NFPA 101 Life Safety Code
OSHA 29 CFR 1926.56

Correct answer: IES RP-33 (Recommended Practice for Lighting Exterior Environments)

IES RP-33 provides detailed maintained illuminance recommendations for exterior security lighting zones including perimeters, parking areas, vehicle gates, and pedestrian pathways.

Question 59: What is 'credential harvesting' in the context of physical access control attacks?

Auditing all access logs for anomalies
Capturing credential data from cards using a concealed reader (Correct answer)
Gathering biometric data from enrolled users
Collecting expired access cards for disposal

Correct answer: Capturing credential data from cards using a concealed reader

Credential harvesting involves using a covert RFID/NFC reader to skim and copy card data from unsuspecting cardholders, enabling later cloning of the credential.

Question 60: During a security survey for asset protection, which area should be evaluated FIRST?

The outermost perimeter of the facility (Correct answer)
Interior storage rooms
Loading dock operations
Executive office suites

Correct answer: The outermost perimeter of the facility

Security surveys follow an outside-in approach, beginning with the outermost perimeter and working inward through successive layers.

Question 61: When protecting assets during transportation between facilities, which security measure provides the greatest risk reduction?

Implementing GPS tracking with tamper-evident seals and chain of custody documentation (Correct answer)
Varying routes randomly without documentation
Hiring armed escorts for every shipment
Using unmarked vehicles only

Correct answer: Implementing GPS tracking with tamper-evident seals and chain of custody documentation

Combined GPS tracking, tamper evidence, and chain of custody creates comprehensive protection during transit.

Question 62: Which security measure is most effective for protecting high-value assets stored in a warehouse environment?

Motion-activated exterior lighting
Layered security with access control, surveillance, and alarm systems (Correct answer)
Perimeter fencing alone
Security guard patrols only

Correct answer: Layered security with access control, surveillance, and alarm systems

Layered security (defense in depth) combines multiple countermeasures to create overlapping protection zones.

Question 63: What is the primary advantage of Wide Dynamic Range (WDR) cameras in physical security applications?

They are less expensive than standard IP cameras
They have a wider horizontal field of view than standard cameras
They operate in complete darkness without supplemental lighting
They capture usable images in scenes with extreme contrast between bright and dark areas (Correct answer)

Correct answer: They capture usable images in scenes with extreme contrast between bright and dark areas

WDR cameras use multiple exposures or sensor technology to capture detail in both very bright (e.g., exterior windows) and very dark areas simultaneously within the same frame.

Question 64: Which document captures the detailed objectives, tactics, and resource assignments for managing a specific incident during its operational period?

Incident Action Plan (IAP) (Correct answer)
Hazard Vulnerability Analysis
Emergency Operations Plan
Continuity of Operations Plan

Correct answer: Incident Action Plan (IAP)

An Incident Action Plan (IAP) documents the specific objectives, tactics, and resource assignments for each operational period of an active incident.

Question 65: Which document should be the foundation of any organizational asset protection program?

The employee handbook
The building floor plan
A comprehensive asset protection policy approved by senior management (Correct answer)
The annual budget report

Correct answer: A comprehensive asset protection policy approved by senior management

A formal policy approved by senior management establishes authority, scope, and accountability for the asset protection program.

Question 66: When conducting a risk assessment for a new facility, what should be evaluated FIRST?

The cost of security equipment
The threat environment including crime data, natural hazards, and geopolitical factors for the location (Correct answer)
The architectural design of the building
The number of employees who will work there

Correct answer: The threat environment including crime data, natural hazards, and geopolitical factors for the location

Understanding the threat environment establishes the context for all subsequent vulnerability and countermeasure assessments.

Question 67: In access control, what does the term 'two-person integrity rule' require?

Two supervisors must approve access requests
Two authorized individuals must be present to access a sensitive area (Correct answer)
Two separate authentication factors must be used
Two guards must patrol together at all times

Correct answer: Two authorized individuals must be present to access a sensitive area

The two-person integrity rule requires at least two authorized individuals to be present simultaneously when accessing sensitive areas or materials, reducing insider threat risk.

Question 68: Which access control model grants permissions based on a subject's clearance level and the sensitivity classification of the object?

Attribute-Based Access Control (ABAC)
Role-Based Access Control (RBAC)
Mandatory Access Control (MAC) (Correct answer)
Discretionary Access Control (DAC)

Correct answer: Mandatory Access Control (MAC)

Mandatory Access Control (MAC) enforces access based on security labels assigned to subjects and objects, commonly used in government and military environments.

Question 69: What is the purpose of a vulnerability assessment in risk management?

To identify weaknesses that could be exploited by threats (Correct answer)
To monitor ongoing security risks
To document security incidents
To measure the effectiveness of security controls

Correct answer: To identify weaknesses that could be exploited by threats

A vulnerability assessment specifically focuses on identifying weaknesses or flaws within a system, process, or environment. These vulnerabilities, if exploited by a threat, could lead to a security incident, making their identification crucial for understanding potential attack vectors and improving defenses.

Question 70: Which maintenance record is most critical for demonstrating due diligence in a security system program?

Purchase receipts for all equipment
Vendor marketing materials
Documented testing results, repair actions, and system status logs with timestamps (Correct answer)
Photographs of installed equipment

Correct answer: Documented testing results, repair actions, and system status logs with timestamps

Timestamped testing and repair documentation provides evidence that the security program was actively maintained and monitored.

Question 71: What is 'alarm fatigue' and how does it negatively impact physical security operations?

Physical exhaustion of security personnel from responding to alarms at night
Desensitization of operators to alarms due to high false alarm rates, causing genuine alarms to be ignored (Correct answer)
System degradation caused by excessive alarm activations stressing the hardware
Operators becoming resistant to alarm system upgrades

Correct answer: Desensitization of operators to alarms due to high false alarm rates, causing genuine alarms to be ignored

Alarm fatigue occurs when excessive false alarms cause security operators to become desensitized, leading to slower response or complete disregard of alarms — including genuine intrusion events.

Question 72: In a video surveillance system design, what is the '3-1-1 rule' or 'detect-observe-identify' methodology used for?

Establishing alarm response times for security operators
Setting minimum illumination levels for camera operation
Determining the camera resolution and field of view needed to meet specific surveillance objectives (Correct answer)
Calculating storage requirements for a 30-day retention system

Correct answer: Determining the camera resolution and field of view needed to meet specific surveillance objectives

The detect-observe-identify methodology sets pixel density requirements based on the surveillance objective: detect (lowest PPF), observe/monitor (medium PPF), or identify (highest PPF).

Question 73: What is the primary purpose of a preventive maintenance schedule for security systems?

To comply with manufacturer warranty requirements only
To ensure systems operate reliably and detect failures before they create security gaps (Correct answer)
To reduce the security department's budget
To provide work for maintenance technicians

Correct answer: To ensure systems operate reliably and detect failures before they create security gaps

Preventive maintenance identifies and corrects potential failures before they result in security system downtime.

Question 74: What testing methodology should be used to validate integrated security system performance?

Only testing during the annual maintenance visit
End-to-end scenario testing that verifies cross-system event correlation, notification, and response workflows (Correct answer)
Manufacturer bench testing before installation
Testing individual components separately is sufficient

Correct answer: End-to-end scenario testing that verifies cross-system event correlation, notification, and response workflows

End-to-end scenario testing validates that integrated systems work together correctly under realistic conditions.

Question 75: What is a 'shunt' in the context of an intrusion detection system, and when is it used?

An emergency override that disables the entire alarm system
A redundant communication path between the panel and monitoring center
A bypass of a specific sensor zone to allow legitimate access without triggering an alarm (Correct answer)
A metal shield protecting alarm wiring from electromagnetic interference

Correct answer: A bypass of a specific sensor zone to allow legitimate access without triggering an alarm

Shunting bypasses a specific sensor zone (such as a door used for deliveries) so that access can occur without triggering an alarm, while the rest of the system remains armed.

Question 76: What is the term for a designated safe location where employees assemble after evacuating a building so that headcounts can be performed?

Command Post
Staging Area
Assembly Area (Correct answer)
Triage Zone

Correct answer: Assembly Area

An Assembly Area (also called a muster point) is the pre-designated location where evacuees gather so accountability and headcounts can be confirmed.

Question 77: For a CCTV system used as evidence in US criminal prosecution, which chain of custody practice is MOST critical?

Deleting footage older than 30 days to prevent confusion
Using proprietary recording formats to prevent tampering
Documenting all access to and handling of recorded media from capture to court (Correct answer)
Storing footage on cloud servers only

Correct answer: Documenting all access to and handling of recorded media from capture to court

Maintaining a documented chain of custody for video evidence — recording who accessed it, when, and for what purpose — is essential for its admissibility in US court proceedings.

Question 78: What is the primary purpose of conducting routine inspections of security equipment?

To assess the value of the equipment
To identify and fix potential issues before they cause failures (Correct answer)
To document the age of the equipment
To replace old equipment with new models

Correct answer: To identify and fix potential issues before they cause failures

Routine inspections are proactive measures designed to detect wear and tear, malfunctions, or other potential problems with security equipment. By identifying and addressing these issues early, organizations can prevent unexpected failures, maintain optimal performance, and avoid costly disruptions to their security posture.

Question 79: How does the Open Supervised Device Protocol (OSDP) improve access control system integration?

It is exclusively used for elevator control integration
It provides encrypted bidirectional communication between readers and controllers, replacing legacy Wiegand protocol (Correct answer)
It only works with a single manufacturer's products
It eliminates the need for access control cards

Correct answer: It provides encrypted bidirectional communication between readers and controllers, replacing legacy Wiegand protocol

OSDP enables encrypted, bidirectional communication between access control readers and panels, overcoming Wiegand's security and functional limitations.

Question 80: A Business Continuity Plan (BCP) differs from an Emergency Response Plan (ERP) primarily in that a BCP:

Focuses on immediate life-safety actions
Establishes evacuation routes and assembly points
Defines roles for first responders on scene
Addresses restoration of critical business functions after a disruption (Correct answer)

Correct answer: Addresses restoration of critical business functions after a disruption

A BCP focuses on maintaining or restoring essential business functions during and after a disruption, whereas an ERP addresses immediate life-safety and incident response.

Question 81: What does 'IPVM pixel density calculator' methodology account for that simple megapixel ratings do NOT?

Infrared illumination range of the camera
Network bandwidth consumed by the camera stream
Camera mounting height and angle
The actual scene width covered by the camera, which determines how many pixels cover each foot of the scene (Correct answer)

Correct answer: The actual scene width covered by the camera, which determines how many pixels cover each foot of the scene

Scene width (field of view) is the critical variable — the same 4MP camera provides dramatically different pixel density depending on whether it covers 10 feet or 100 feet of scene width.

Question 82: In a CPTED assessment, a security professional observes that a building's main entrance is hidden from the street and from other building occupants. What CPTED deficiency does this represent?

Poor territorial reinforcement
Insufficient access control
Lack of natural surveillance / poor sightlines to entry (Correct answer)
Inadequate maintenance

Correct answer: Lack of natural surveillance / poor sightlines to entry

A hidden entrance lacks natural surveillance because neither passersby nor other building occupants can observe who is entering or loitering, creating opportunity for assault, theft, or unauthorized entry.

Question 83: What is the primary advantage of integrating security systems with building management systems (BMS)?

Lower installation costs
Improved coordination between security and facility operations (Correct answer)
Enhanced aesthetics of the building
Reduced energy consumption

Correct answer: Improved coordination between security and facility operations

Integrating security systems with Building Management Systems (BMS) fosters improved coordination between security and overall facility operations. This allows for a holistic response to events; for instance, a security alert could trigger specific HVAC or lighting adjustments, or a fire alarm could automatically unlock doors. Such integration optimizes resource management, enhances occupant safety, and creates a more efficient and responsive building environment.

Question 84: Which risk treatment strategy involves accepting the risk without taking any action to reduce its impact?

Risk Acceptance (Correct answer)
Risk Avoidance
Risk Mitigation
Risk Transfer

Correct answer: Risk Acceptance

Risk acceptance is a deliberate decision to acknowledge a risk and take no action to reduce its likelihood or impact. This strategy is typically chosen when the cost of mitigating the risk outweighs the potential cost of the risk occurring, or when the risk is deemed to be very low.

Question 85: In an alarm system, what does a 'supervisory circuit' monitor?

The integrity of wiring and sensors to detect tampering or sabotage (Correct answer)
The response time of the monitoring center
The battery backup level of the control panel
The identity of personnel arming and disarming the system

Correct answer: The integrity of wiring and sensors to detect tampering or sabotage

Supervisory circuits use end-of-line resistors or active monitoring to continuously verify sensor wiring integrity, generating an alarm if wires are cut, shorted, or tampered with.

Question 86: What is the primary security risk associated with allowing trees to grow tall near security lighting fixtures at a facility perimeter?

Tree branches can fall and damage lighting fixtures
Tall trees can provide climbing access over perimeter fences and block security lighting coverage (Correct answer)
Trees attract wildlife that triggers perimeter detection sensors
Tree roots can damage underground cable conduits

Correct answer: Tall trees can provide climbing access over perimeter fences and block security lighting coverage

Tall trees near the perimeter can be used as climbing aids to scale fences, and their canopies can block security lighting, creating dark zones that benefit intruders.

Question 87: Which IP camera compression standard provides the BEST image quality at the lowest bandwidth compared to older MPEG-4 and H.264 formats?

MJPEG
MPEG-2
H.265 (HEVC) (Correct answer)
H.264 AVC

Correct answer: H.265 (HEVC)

H.265 (HEVC) offers approximately 50% better compression efficiency than H.264, delivering the same image quality at half the bit rate or better quality at the same bit rate.

Question 88: What camera resolution is generally recommended for reliable facial identification in a video surveillance system according to ASIS and IPVM guidelines?

20 pixels per foot (PPF)
100 pixels per foot (PPF) or higher (Correct answer)
80 pixels per foot (PPF)
40 pixels per foot (PPF)

Correct answer: 100 pixels per foot (PPF) or higher

Facial identification (recognizing a specific individual from a database) typically requires 100 PPF or higher, while facial detection requires approximately 40 PPF.

Question 89: In layered physical security design, what term describes the space between the outer perimeter fence and an inner security fence around the most sensitive areas?

Dead zone
Annular space
No-man's land / controlled zone (Correct answer)
Buffer zone

Correct answer: No-man's land / controlled zone

The controlled zone (sometimes called no-man's land) between the outer and inner perimeters is a sterile area where any presence is considered unauthorized, triggering alarm response.

Question 90: Which approach best addresses the protection of intellectual property in a physical security context?

Encrypting all digital files
Controlling physical access to areas where sensitive information is processed and stored (Correct answer)
Installing bollards around the building
Hiring additional security guards

Correct answer: Controlling physical access to areas where sensitive information is processed and stored

Physical access control to sensitive areas prevents unauthorized individuals from viewing, copying, or stealing proprietary information.

Question 91: In asset protection, what does the term "layered security" refer to?

Using multiple security personnel
Securing only the most valuable assets
Implementing several security measures in succession (Correct answer)
Focusing on a single, strong security measure

Correct answer: Implementing several security measures in succession

Layered security, also known as "defense in depth," involves deploying multiple security measures in a series of overlapping layers. This approach ensures that if one security control fails or is bypassed, another layer is in place to provide continued protection, making it more difficult for threats to reach their target.

Question 92: Which of the following security systems is typically integrated with access control systems?

Fire alarms
CCTV surveillance cameras (Correct answer)
HVAC systems
Public address systems

Correct answer: CCTV surveillance cameras

CCTV surveillance cameras are frequently integrated with access control systems to provide visual verification of entry and exit events. When an access card is used or a door is opened, the CCTV system can automatically record or display the corresponding camera feed. This integration enhances security by linking physical access records with visual evidence, allowing for better incident investigation and deterrence.

Question 93: Which of the following is a deterrent to theft in a retail environment?

Inventory management software
Emergency exits
Visible surveillance cameras (Correct answer)
Employee training programs

Correct answer: Visible surveillance cameras

A deterrent is something that discourages or prevents an action. Visible surveillance cameras act as a strong deterrent to theft in a retail environment because potential thieves are less likely to commit a crime if they believe they are being watched and recorded, increasing their risk of being caught.

Question 94: In alarm system design, what is the 'defense in depth' approach to intrusion detection?

Installing multiple sensor types and layers so that an intruder must defeat several independent systems to reach the target undetected (Correct answer)
Placing all sensors deep inside the facility near the most valuable assets
Hiring additional security guards to supplement electronic detection
Using only the most expensive sensors available

Correct answer: Installing multiple sensor types and layers so that an intruder must defeat several independent systems to reach the target undetected

Defense in depth layers perimeter, exterior, interior, and point protection so that bypassing one detection layer still leaves additional layers that must be defeated, increasing detection probability.

Question 95: A passive infrared (PIR) detector is installed near an exterior glass wall. What is the MOST likely source of false alarms in this installation?

Nearby smoke detectors interfering with the PIR signal
Direct sunlight or headlights shining through the glass, causing rapid temperature changes in the detection zone (Correct answer)
Radio frequency interference from nearby equipment
High humidity condensation on the detector lens

Correct answer: Direct sunlight or headlights shining through the glass, causing rapid temperature changes in the detection zone

PIR detectors sense changes in infrared (heat) energy — sunlight or vehicle headlights shining through glass can rapidly heat objects in the detection zone, mimicking a human body and triggering false alarms.

Question 96: A security manager wants to detect unauthorized digging under the perimeter fence. Which sensor technology is MOST appropriate?

Passive infrared motion detector aimed at the fence base
Vibration sensor attached to the fence fabric
Microwave beam sensor at ankle height
Buried geophone or seismic sensor cable along the fence line (Correct answer)

Correct answer: Buried geophone or seismic sensor cable along the fence line

Buried geophone or seismic sensor cables detect the ground vibrations produced by digging, tunneling, or heavy footsteps underground, specifically designed for this type of sub-surface intrusion detection.

Question 97: During an emergency evacuation, which group should receive priority assistance according to standard life-safety protocols?

IT personnel protecting critical data
Employees nearest to exits
Persons with mobility impairments or disabilities (Correct answer)
Senior executives

Correct answer: Persons with mobility impairments or disabilities

Standard life-safety protocols prioritize persons with disabilities or mobility impairments who may need assistance evacuating safely.

Question 98: When performing an access control audit, which activity BEST identifies 'ghost accounts' (credentials belonging to former employees)?

Reviewing physical damage to card readers
Reconciling the active credential list against current HR employee records (Correct answer)
Inspecting cable terminations in the access control panels
Testing door hardware for forced-entry resistance

Correct answer: Reconciling the active credential list against current HR employee records

Reconciling active credentials against current HR records identifies credentials that belong to terminated, transferred, or otherwise ineligible individuals.

Question 99: Under UL 2050 standards for central station alarm monitoring, what is the maximum response time for a central station to call the subscriber after receiving an intrusion alarm signal?

90 seconds (Correct answer)
5 minutes
10 minutes
30 seconds

Correct answer: 90 seconds

UL 2050 requires central stations to attempt to contact the subscriber within 90 seconds of receiving an intrusion alarm signal to verify the event.

Question 100: A perimeter fence line must pass through a low-lying area prone to flooding. What is the BEST security solution to maintain perimeter integrity during flood events?

Raise the fence height to 12 feet in the flood-prone section
Install a flood gate or flap gate designed to allow water flow while deterring human intrusion (Correct answer)
Install a concrete barrier instead of fence in the flood zone
Use underwater ground sensors connected to the alarm system

Correct answer: Install a flood gate or flap gate designed to allow water flow while deterring human intrusion

Flood gates or anti-intrusion flap gates are designed to allow water to pass freely while physical barriers and sensors prevent human intrusion through drainage openings.

Question 101: What is the primary purpose of conducting an asset vulnerability assessment?

To satisfy regulatory compliance requirements
To create an inventory of all company assets
To determine insurance premiums
To identify weaknesses that could be exploited to compromise asset security (Correct answer)

Correct answer: To identify weaknesses that could be exploited to compromise asset security

Vulnerability assessments identify specific weaknesses in the security posture that could lead to asset loss or damage.

Question 102: What does the term 'pixel density' mean in CCTV camera planning, and why is it important?

The total megapixel count of the camera sensor
The frames-per-second rate of the recorded video
The monitor resolution used to display camera footage
The number of pixels covering a unit of space in the scene, determining the level of detail captured (Correct answer)

Correct answer: The number of pixels covering a unit of space in the scene, determining the level of detail captured

Pixel density (pixels per foot/meter in the scene) determines how much detail is captured about subjects, directly affecting whether the system meets identification, recognition, or detection requirements.

Question 103: According to ASIS Physical Security Principles, what is the recommended approach when camera placement must balance surveillance effectiveness with employee privacy concerns?

Post visible notices that surveillance is in use and focus cameras on work areas rather than personal spaces (Correct answer)
Require written employee consent for all surveillance
Install cameras only in exterior locations to avoid privacy issues
Always prioritize surveillance effectiveness over privacy

Correct answer: Post visible notices that surveillance is in use and focus cameras on work areas rather than personal spaces

Posting conspicuous notices of surveillance and focusing cameras on work processes and assets rather than personal spaces balances security needs with employee privacy expectations and legal requirements.

Question 104: A security assessment reveals that an 8-foot chain-link fence has a gate that takes 90 seconds to close and lock. What vulnerability does this represent?

Perimeter delay vulnerability — insufficient closure speed allows vehicle intrusion (Correct answer)
Technological vulnerability — the gate lacks electronic monitoring
Administrative vulnerability — inadequate access control policy
Structural vulnerability — the gate is too heavy for the hinge capacity

Correct answer: Perimeter delay vulnerability — insufficient closure speed allows vehicle intrusion

A slow-closing gate creates a perimeter delay vulnerability where a determined adversary can drive or run through before the gate secures, defeating the purpose of the barrier.

Question 105: What type of security lighting provides continuous, even illumination at night specifically designed to reveal intruders against a lighted background — even if the intruder attempts to extinguish individual lights?

Glare projection lighting
Standby lighting
Controlled lighting
Continuous lighting (Correct answer)

Correct answer: Continuous lighting

Continuous lighting provides steady, even illumination throughout a protected area all night, making intruders visible regardless of their attempts to use darkness as cover.

Question 106: Which environmental factor most commonly degrades outdoor security camera performance over time?

Fluctuations in internet bandwidth
Accumulated dirt, moisture, and UV exposure on lenses and housings (Correct answer)
Radio frequency interference from nearby buildings
Gravity pulling on the mounting bracket

Correct answer: Accumulated dirt, moisture, and UV exposure on lenses and housings

Environmental exposure to dirt, moisture, and UV radiation is the primary cause of degraded outdoor camera image quality.

Question 107: What is the purpose of the 'exit delay' and 'entry delay' in an intrusion alarm system?

Both delays are required by UL for all commercial alarm installations
Entry and exit delays reduce power consumption during non-business hours
Exit delay allows the last person to leave and disarm the system; entry delay allows an authorized user time to disarm before the alarm activates (Correct answer)
Exit delay silences external sounders while entry delay silences internal sounders

Correct answer: Exit delay allows the last person to leave and disarm the system; entry delay allows an authorized user time to disarm before the alarm activates

Exit delay gives the last authorized person time to leave after arming, while entry delay gives an authorized person time to reach the keypad and disarm after entering through a designated entry point.

Question 108: What is the purpose of access control systems in asset protection?

To ensure only authorized personnel can enter certain areas (Correct answer)
To record video footage
To monitor traffic flow
To detect fires

Correct answer: To ensure only authorized personnel can enter certain areas

Access control systems are designed to regulate who can enter specific areas, when they can enter, and under what conditions. Their primary purpose is to restrict entry to authorized individuals, thereby protecting sensitive areas, assets, and personnel from unauthorized access.

Question 109: What is the most important consideration when selecting a maintenance contractor for security systems?

Lowest bid price
The contractor's general reputation in the community
Proximity of the contractor's office to the facility
Background verification and security clearance of technicians who will access the systems (Correct answer)

Correct answer: Background verification and security clearance of technicians who will access the systems

Maintenance technicians have intimate knowledge of and access to security systems, making their trustworthiness paramount.

Question 110: Which of the following is a best practice when maintaining CCTV systems?

Adjusting camera angles daily
Cleaning camera lenses monthly (Correct answer)
Replacing cameras every year
Turning off cameras when not in use

Correct answer: Cleaning camera lenses monthly

Cleaning camera lenses monthly is a best practice for CCTV systems because dust, dirt, and smudges can significantly degrade image quality and obscure critical details. Regular cleaning ensures clear, high-quality footage, which is essential for effective surveillance and incident investigation.

Question 111: Why is cybersecurity a critical consideration in integrated physical security system design?

Cybersecurity only affects computer networks, not physical security
Networked security devices are potential entry points for cyberattacks that could disable physical security systems (Correct answer)
It is only important for government installations
Cybersecurity adds unnecessary cost with no security benefit

Correct answer: Networked security devices are potential entry points for cyberattacks that could disable physical security systems

Integrated networked security systems can be compromised through cyberattacks, potentially disabling physical protection measures.

Question 112: During scheduled maintenance of an access control system, which procedure ensures continued security?

Maintaining at least one operational entry point with manual monitoring while servicing others sequentially (Correct answer)
Disabling all access points simultaneously to speed up maintenance
Performing maintenance only at night when the building is empty
Leaving all doors unlocked during maintenance

Correct answer: Maintaining at least one operational entry point with manual monitoring while servicing others sequentially

Sequential maintenance with manual monitoring ensures continuous access control coverage throughout the maintenance period.

Question 113: Which detection technology is MOST appropriate for detecting an intruder who has defeated the outer perimeter but is moving very slowly to avoid triggering motion sensors?

Vibration sensor on the floor
Thermal imaging camera with video analytics (Correct answer)
Passive infrared (PIR) motion detector
Microwave Doppler motion detector

Correct answer: Thermal imaging camera with video analytics

Thermal cameras detect the heat signature of the human body regardless of movement speed — unlike Doppler (requires motion) or PIR (requires movement across detection zones), thermal imaging detects stationary or slow-moving intruders.

Question 114: What is the recommended minimum door thickness for a high-security access-controlled door to resist forced entry?

1 inch (25mm)
1-3/4 inches (44mm) (Correct answer)
1-3/8 inches (35mm)
2-1/4 inches (57mm)

Correct answer: 1-3/4 inches (44mm)

ANSI/SDI standards recommend a minimum 1-3/4 inch (44mm) solid-core door for high-security applications to provide adequate forced-entry resistance.

Question 115: In the PSP examination context, what does 'nuisance alarm rate' (NAR) measure in an intrusion detection system evaluation?

The ratio of false or nuisance alarms to actual intrusion detections over a given period (Correct answer)
The number of alarm zones that were in fault condition during an audit period
The average time it takes for an operator to acknowledge an alarm
The percentage of alarms caused by equipment malfunctions vs. human error

Correct answer: The ratio of false or nuisance alarms to actual intrusion detections over a given period

NAR measures the proportion of all alarm activations that are nuisance/false alarms versus genuine detections, serving as a key performance indicator for sensor selection and system tuning.

Question 116: What alarm transmission technology offers the MOST reliable path from premises to monitoring center against communication sabotage?

Cellular-only communication
Dual-path: cellular + broadband IP with automatic failover (Correct answer)
Broadband IP-only communication
Standard PSTN (phone line) with dial-up communicator

Correct answer: Dual-path: cellular + broadband IP with automatic failover

Dual-path communication using both cellular and broadband IP with automatic failover is most resistant to sabotage because cutting one path (phone/cable line) still leaves the cellular path active.

Question 117: What is the role of a central management system (CMS) in security system integration?

To increase the number of security cameras
To monitor and control integrated security systems from a single interface (Correct answer)
To physically connect all security devices
To replace the need for on-site security guards

Correct answer: To monitor and control integrated security systems from a single interface

A Central Management System (CMS) serves as the unified control center for all integrated security systems. It provides a single, intuitive interface through which security personnel can monitor alerts, manage access points, control cameras, and respond to incidents across the entire security infrastructure. This centralization streamlines operations, improves situational awareness, and enhances the efficiency of security management.

Question 118: What is the purpose of an NVR (Network Video Recorder) as compared to a DVR (Digital Video Recorder) in modern IP surveillance systems?

NVRs store video on tapes while DVRs use hard drives
NVRs are only used in outdoor applications
NVRs process and record IP camera streams via the network without requiring direct connection to each camera (Correct answer)
NVRs are analog while DVRs process IP camera streams

Correct answer: NVRs process and record IP camera streams via the network without requiring direct connection to each camera

An NVR receives pre-compressed IP video streams from cameras over the network, while a DVR connects directly to analog cameras and encodes the video itself, limiting scalability and placement flexibility.

Question 119: When a critical security system component fails, what should be the FIRST action taken?

File a maintenance request with the facilities department
Document the failure for the annual report
Order a replacement part
Implement compensating security measures while arranging repair (Correct answer)

Correct answer: Implement compensating security measures while arranging repair

Compensating measures must be implemented immediately to maintain security coverage while the failed component is repaired.

Question 120: Which type of motion detector is MOST resistant to false alarms caused by HVAC air currents, heat vents, and changes in ambient temperature?

Microwave (Doppler) detector
Passive infrared (PIR) detector
Dual-technology (PIR + microwave) detector (Correct answer)
Ultrasonic detector

Correct answer: Dual-technology (PIR + microwave) detector

Dual-technology detectors require BOTH PIR and microwave to simultaneously trigger before generating an alarm, dramatically reducing false alarms caused by environmental factors that typically affect only one technology.

Question 121: What is residual risk in the context of physical security planning?

The risk of a security system malfunctioning
The risk that existed before any security measures were implemented
The level of risk remaining after all planned security countermeasures have been applied (Correct answer)
The risk associated with terminated employees

Correct answer: The level of risk remaining after all planned security countermeasures have been applied

Residual risk is what remains after countermeasures are applied and must be formally accepted by management or further reduced.

Question 122: What is the recommended maximum spacing between fence posts for a standard 7-foot chain-link security fence to maintain structural integrity under attack?

10 feet (3m) (Correct answer)
12 feet (3.6m)
16 feet (4.8m)
6 feet (1.8m)

Correct answer: 10 feet (3m)

ASIS and DoD perimeter security guidelines recommend a maximum 10-foot (3m) post spacing to ensure the fence maintains structural integrity and cannot easily be pushed down.

Question 123: Which phase of emergency management focuses on reducing or eliminating the likelihood or impact of a disaster before it occurs?

Response
Preparedness
Mitigation (Correct answer)
Recovery

Correct answer: Mitigation

Mitigation involves actions taken before an emergency to reduce or eliminate the risk and potential impact of hazards.

Question 124: What does 'Grade' mean in the context of EN 50131 intrusion detection system standards used as reference in US security specifications?

The UL listing category of the alarm control panel
The installation quality rating given by the alarm installer
The number of communication paths from panel to monitoring center
The risk level classification (1-4) that determines required system performance and tamper resistance (Correct answer)

Correct answer: The risk level classification (1-4) that determines required system performance and tamper resistance

EN 50131 Grades 1-4 define increasing levels of risk and required system performance: Grade 1 for low risk, Grade 4 for high risk requiring the highest tamper resistance and redundancy.

Question 125: What does OSDP (Open Supervised Device Protocol) provide that legacy Wiegand does NOT?

Longer cable runs without signal loss
Encrypted, bidirectional communication between reader and controller (Correct answer)
Higher card read speed
Compatibility with magnetic stripe cards

Correct answer: Encrypted, bidirectional communication between reader and controller

OSDP provides AES-128 encrypted, bidirectional communication that enables mutual authentication between reader and controller, eliminating eavesdropping and relay attacks possible with Wiegand.

Physical Security Professional (PSP) Certification Exam

The Physical Security Professional (PSP) certification exam is administered by ASIS International and is designed for security practitioners responsible for conducting threat surveys, designing physical security systems, and implementing security measures. The exam covers physical security assessment, application of physical security measures, and implementation of security measures. Candidates must demonstrate expertise in risk management, access control, video surveillance, intrusion detection, perimeter security, CPTED principles, and security system integration.

125

Questions

150 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds