Physical Security Professional (PSP) Certification Exam — Questions and Answers

Question 1: In layered physical security design, what term describes the space between the outer perimeter fence and an inner security fence around the most sensitive areas?

No-man's land / controlled zone (Correct answer)
Annular space
Buffer zone
Dead zone

Correct answer: No-man's land / controlled zone

The controlled zone (sometimes called no-man's land) between the outer and inner perimeters is a sterile area where any presence is considered unauthorized, triggering alarm response.

Question 2: Which PTZ camera operational mode automatically moves the camera to preset positions at specified time intervals to survey a wider area?

Auto-tracking mode
Guard tour / auto-patrol mode (Correct answer)
Privacy masking mode
Preset-on-alarm mode

Correct answer: Guard tour / auto-patrol mode

Guard tour mode programs the PTZ camera to automatically cycle through a series of preset positions on a defined schedule, allowing one camera to monitor multiple areas periodically.

Question 3: For a CCTV system used as evidence in US criminal prosecution, which chain of custody practice is MOST critical?

Documenting all access to and handling of recorded media from capture to court (Correct answer)
Using proprietary recording formats to prevent tampering
Deleting footage older than 30 days to prevent confusion
Storing footage on cloud servers only

Correct answer: Documenting all access to and handling of recorded media from capture to court

Maintaining a documented chain of custody for video evidence — recording who accessed it, when, and for what purpose — is essential for its admissibility in US court proceedings.

Question 4: A security manager wants to detect unauthorized digging under the perimeter fence. Which sensor technology is MOST appropriate?

Vibration sensor attached to the fence fabric
Buried geophone or seismic sensor cable along the fence line (Correct answer)
Passive infrared motion detector aimed at the fence base
Microwave beam sensor at ankle height

Correct answer: Buried geophone or seismic sensor cable along the fence line

Buried geophone or seismic sensor cables detect the ground vibrations produced by digging, tunneling, or heavy footsteps underground, specifically designed for this type of sub-surface intrusion detection.

Question 5: What is a 'video analytics' false positive in the context of a security surveillance system?

The recorded video has compression artifacts that obscure faces
The system incorrectly records footage at the wrong frame rate
The system generates an alarm for a non-threatening event such as an animal or blowing debris (Correct answer)
The system fails to detect an actual intrusion event

Correct answer: The system generates an alarm for a non-threatening event such as an animal or blowing debris

A false positive (nuisance alarm) occurs when the analytics system triggers an alert for a benign event, such as a shadow, animal, or environmental condition, wasting operator attention.

Question 6: Why is regular maintenance of physical security systems essential?

To lower insurance costs
To comply with aesthetic standards
To reduce energy consumption
To prevent system failures and ensure continuous protection (Correct answer)

Correct answer: To prevent system failures and ensure continuous protection

Regular maintenance is crucial for physical security systems to ensure their reliability and effectiveness. It helps identify and address potential issues before they lead to system failures, thereby guaranteeing continuous and uninterrupted protection of assets and personnel.

Question 7: What is the primary goal of asset protection in physical security?

To enhance customer satisfaction
To monitor employee behavior
To safeguard people, property, and information from threats (Correct answer)
To increase operational efficiency

Correct answer: To safeguard people, property, and information from threats

Asset protection in physical security is fundamentally about protecting an organization's valuable assets. This encompasses not only tangible property but also the people within the environment and critical information, by implementing measures to prevent unauthorized access, damage, or theft.

Question 8: Which security measure is most effective for protecting high-value assets stored in a warehouse environment?

Perimeter fencing alone
Layered security with access control, surveillance, and alarm systems (Correct answer)
Motion-activated exterior lighting
Security guard patrols only

Correct answer: Layered security with access control, surveillance, and alarm systems

Layered security (defense in depth) combines multiple countermeasures to create overlapping protection zones.

Question 9: What US standard or guideline provides specific maintained illuminance recommendations for security lighting in different facility zones (perimeter, parking, vehicle gates)?

NFPA 101 Life Safety Code
OSHA 29 CFR 1926.56
ANSI/ASIS PSC.1
IES RP-33 (Recommended Practice for Lighting Exterior Environments) (Correct answer)

Correct answer: IES RP-33 (Recommended Practice for Lighting Exterior Environments)

IES RP-33 provides detailed maintained illuminance recommendations for exterior security lighting zones including perimeters, parking areas, vehicle gates, and pedestrian pathways.

Question 10: What is the primary advantage of integrating security systems with building management systems (BMS)?

Lower installation costs
Enhanced aesthetics of the building
Improved coordination between security and facility operations (Correct answer)
Reduced energy consumption

Correct answer: Improved coordination between security and facility operations

Integrating security systems with Building Management Systems (BMS) fosters improved coordination between security and overall facility operations. This allows for a holistic response to events; for instance, a security alert could trigger specific HVAC or lighting adjustments, or a fire alarm could automatically unlock doors. Such integration optimizes resource management, enhances occupant safety, and creates a more efficient and responsive building environment.

Question 11: What is the recommended minimum door thickness for a high-security access-controlled door to resist forced entry?

1-3/4 inches (44mm) (Correct answer)
1 inch (25mm)
1-3/8 inches (35mm)
2-1/4 inches (57mm)

Correct answer: 1-3/4 inches (44mm)

ANSI/SDI standards recommend a minimum 1-3/4 inch (44mm) solid-core door for high-security applications to provide adequate forced-entry resistance.

Question 12: When performing an access control audit, which activity BEST identifies 'ghost accounts' (credentials belonging to former employees)?

Reconciling the active credential list against current HR employee records (Correct answer)
Inspecting cable terminations in the access control panels
Reviewing physical damage to card readers
Testing door hardware for forced-entry resistance

Correct answer: Reconciling the active credential list against current HR employee records

Reconciling active credentials against current HR records identifies credentials that belong to terminated, transferred, or otherwise ineligible individuals.

Question 13: How often should access control systems be tested for functionality?

Annually
Monthly (Correct answer)
Weekly
Every six months

Correct answer: Monthly

Access control systems are critical for security, and regular testing ensures they function correctly and securely. Monthly testing is a recommended best practice to verify that all components, such as card readers, locks, and software, are operating as intended and that no unauthorized access is possible.

Question 14: What is the most significant advantage of using an asset tracking system integrated with access control?

Lower insurance premiums
Reduced staffing requirements
Real-time knowledge of asset location and who accessed it (Correct answer)
Simplified audit procedures

Correct answer: Real-time knowledge of asset location and who accessed it

Integration provides real-time visibility into both asset location and the identity of individuals who interacted with it.

Question 15: Which metric is most useful for measuring the effectiveness of an asset protection program?

Shrinkage rate or loss percentage over time (Correct answer)
Annual security budget expenditure
Total number of security cameras installed
Number of security personnel employed

Correct answer: Shrinkage rate or loss percentage over time

Shrinkage rate directly measures actual losses, making it the most meaningful indicator of program effectiveness.

Question 16: Which approach best addresses the protection of intellectual property in a physical security context?

Installing bollards around the building
Hiring additional security guards
Controlling physical access to areas where sensitive information is processed and stored (Correct answer)
Encrypting all digital files

Correct answer: Controlling physical access to areas where sensitive information is processed and stored

Physical access control to sensitive areas prevents unauthorized individuals from viewing, copying, or stealing proprietary information.

Question 17: Which lighting technology offers the BEST combination of energy efficiency, long lifespan, and instant-on capability for security applications, replacing older HID and fluorescent systems?

Metal halide (MH) lighting
LED (Light Emitting Diode) lighting (Correct answer)
Fluorescent T8 lighting
High-pressure sodium (HPS) lighting

Correct answer: LED (Light Emitting Diode) lighting

LED lighting offers 50,000-100,000+ hour lifespan, 60-80% energy savings over HID, instant full-brightness activation, and superior color rendering for camera performance.

Question 18: During an emergency, the Unified Command structure is BEST used when:

Command must be transferred from day to night shift
The incident involves only internal security personnel
A single agency has complete jurisdiction over the incident
Multiple agencies or jurisdictions share responsibility for an incident (Correct answer)

Correct answer: Multiple agencies or jurisdictions share responsibility for an incident

Unified Command is used when multiple agencies or jurisdictions have shared authority over an incident, allowing them to coordinate while maintaining individual accountability.

Question 19: According to ASTM standards, what does an 'F2656 M50 P1' anti-ram barrier rating indicate?

The barrier is rated for 50 mph with a P1 (positive) structural test result
The rating indicates bollard spacing of 50 cm with P1 profile height
The barrier stopped a 6,800 kg vehicle at 80 km/h with no penetration
The barrier stopped a 5,000 kg vehicle at 80 km/h with less than 1 meter of penetration (Correct answer)

Correct answer: The barrier stopped a 5,000 kg vehicle at 80 km/h with less than 1 meter of penetration

ASTM F2656 M50 P1 means the barrier stopped a 5,000 kg (Class M) vehicle at 80 km/h (50 mph) with 1 meter or less penetration (P1 = Penetration Level 1).

Question 20: What is 'alarm fatigue' and how does it negatively impact physical security operations?

Physical exhaustion of security personnel from responding to alarms at night
Operators becoming resistant to alarm system upgrades
Desensitization of operators to alarms due to high false alarm rates, causing genuine alarms to be ignored (Correct answer)
System degradation caused by excessive alarm activations stressing the hardware

Correct answer: Desensitization of operators to alarms due to high false alarm rates, causing genuine alarms to be ignored

Alarm fatigue occurs when excessive false alarms cause security operators to become desensitized, leading to slower response or complete disregard of alarms — including genuine intrusion events.

Question 21: Which type of fence topping provides the greatest deterrent against climbing while complying with most US local ordinances?

Barbed wire (three-strand outrigger)
Electric fence topping
Anti-climb paint
Razor ribbon (concertina) wire (Correct answer)

Correct answer: Razor ribbon (concertina) wire

Razor ribbon wire (concertina) provides superior anti-climb deterrence compared to barbed wire, though it must be installed in compliance with local ordinances and liability considerations.

Question 22: What CPTED concept involves designing spaces so that legitimate users naturally observe and informally supervise the area through their normal activities?

Natural surveillance (Correct answer)
Activity programming
Natural access control
Mechanical surveillance

Correct answer: Natural surveillance

Natural surveillance positions windows, seating, and activity generators so that legitimate users — employees, residents, customers — naturally observe the space during routine use, deterring criminal activity.

Question 23: What should be done if a security alarm system repeatedly triggers false alarms?

Disable the alarm system temporarily
Increase the sensitivity of the sensors
Ignore the alarms since they are false
Schedule a maintenance check to diagnose and fix the issue (Correct answer)

Correct answer: Schedule a maintenance check to diagnose and fix the issue

Repeated false alarms indicate a malfunction or misconfiguration within the alarm system, which can lead to alarm fatigue and reduced response effectiveness. Scheduling a maintenance check is the appropriate action to diagnose the root cause of the false alarms and implement a permanent fix, restoring the system's reliability.

Question 24: In a CPTED second-generation (2nd Gen) assessment, what factor is evaluated in addition to the physical design elements assessed in 1st Gen CPTED?

Electronic security system effectiveness
Social dynamics, community cohesion, and the human behavioral dimension of space use (Correct answer)
Emergency response capability of the nearest police station
Building material strength and forced-entry resistance

Correct answer: Social dynamics, community cohesion, and the human behavioral dimension of space use

2nd Gen CPTED expands beyond physical design to include social dimensions — community programs, social cohesion, and behavioral norms that affect whether physical CPTED measures are effective.

Question 25: In alarm system design, what is the 'defense in depth' approach to intrusion detection?

Hiring additional security guards to supplement electronic detection
Using only the most expensive sensors available
Placing all sensors deep inside the facility near the most valuable assets
Installing multiple sensor types and layers so that an intruder must defeat several independent systems to reach the target undetected (Correct answer)

Correct answer: Installing multiple sensor types and layers so that an intruder must defeat several independent systems to reach the target undetected

Defense in depth layers perimeter, exterior, interior, and point protection so that bypassing one detection layer still leaves additional layers that must be defeated, increasing detection probability.

Question 26: Which card technology offers the highest level of security for access control credentials?

Proximity (125 kHz)
Magnetic stripe
Smart card (contact/contactless) (Correct answer)
Wiegand wire

Correct answer: Smart card (contact/contactless)

Smart cards use encrypted microprocessors that make them significantly more resistant to cloning and counterfeiting compared to magnetic stripe or proximity technologies.

Question 27: What monitoring standard requires that a central station maintain a backup facility capable of taking over operations within a specified time if the primary station is incapacitated?

NFPA 72 Chapter 26
IEC 60839-11-1
ANSI/SIA CP-01
UL 827 (Central Station Alarm Services) (Correct answer)

Correct answer: UL 827 (Central Station Alarm Services)

UL 827 (Standard for Central Station Alarm Services) requires listed central stations to maintain backup facilities with the capability to assume full monitoring operations to ensure uninterrupted service.

Question 28: A Business Continuity Plan (BCP) differs from an Emergency Response Plan (ERP) primarily in that a BCP:

Defines roles for first responders on scene
Establishes evacuation routes and assembly points
Addresses restoration of critical business functions after a disruption (Correct answer)
Focuses on immediate life-safety actions

Correct answer: Addresses restoration of critical business functions after a disruption

A BCP focuses on maintaining or restoring essential business functions during and after a disruption, whereas an ERP addresses immediate life-safety and incident response.

Question 29: What cybersecurity risk is MOST commonly exploited in IP surveillance camera systems in US critical infrastructure?

Default or weak manufacturer passwords left unchanged after installation (Correct answer)
PoE (Power over Ethernet) power source attacks
Physical tampering with camera housings
Use of H.265 compression format

Correct answer: Default or weak manufacturer passwords left unchanged after installation

Unchanged default credentials remain the most exploited vulnerability in IP camera systems, allowing attackers to access live feeds, disable recording, or use cameras as botnet nodes.

Question 30: What is the purpose of an NVR (Network Video Recorder) as compared to a DVR (Digital Video Recorder) in modern IP surveillance systems?

NVRs are analog while DVRs process IP camera streams
NVRs store video on tapes while DVRs use hard drives
NVRs are only used in outdoor applications
NVRs process and record IP camera streams via the network without requiring direct connection to each camera (Correct answer)

Correct answer: NVRs process and record IP camera streams via the network without requiring direct connection to each camera

An NVR receives pre-compressed IP video streams from cameras over the network, while a DVR connects directly to analog cameras and encodes the video itself, limiting scalability and placement flexibility.

Question 31: Which detection technology is MOST appropriate for detecting an intruder who has defeated the outer perimeter but is moving very slowly to avoid triggering motion sensors?

Vibration sensor on the floor
Microwave Doppler motion detector
Thermal imaging camera with video analytics (Correct answer)
Passive infrared (PIR) motion detector

Correct answer: Thermal imaging camera with video analytics

Thermal cameras detect the heat signature of the human body regardless of movement speed — unlike Doppler (requires motion) or PIR (requires movement across detection zones), thermal imaging detects stationary or slow-moving intruders.

Question 32: Which NIMS component provides a standardized approach to incident management, allowing agencies to work together effectively?

Incident Command System (ICS) (Correct answer)
Emergency Support Functions (ESF)
Continuity of Operations Plan (COOP)
National Response Framework (NRF)

Correct answer: Incident Command System (ICS)

The Incident Command System (ICS) is the NIMS component that provides a standardized, on-scene management structure enabling agencies to coordinate effectively.

Question 33: According to IES standards, what is the recommended Color Rendering Index (CRI) minimum for security lighting where human identification and camera performance are important?

CRI ≥ 65
CRI ≥ 90
CRI ≥ 80 (Correct answer)
CRI ≥ 50

Correct answer: CRI ≥ 80

IES recommends a minimum CRI of 80 for security applications where facial identification and camera color accuracy are required, as lower CRI distorts colors making identification harder.

Question 34: What alarm transmission technology offers the MOST reliable path from premises to monitoring center against communication sabotage?

Cellular-only communication
Standard PSTN (phone line) with dial-up communicator
Dual-path: cellular + broadband IP with automatic failover (Correct answer)
Broadband IP-only communication

Correct answer: Dual-path: cellular + broadband IP with automatic failover

Dual-path communication using both cellular and broadband IP with automatic failover is most resistant to sabotage because cutting one path (phone/cable line) still leaves the cellular path active.

Question 35: According to FEMA and DoD perimeter security standards, what is the recommended minimum clear zone width on BOTH sides of an outer perimeter fence?

50 feet (15m) inside, 20 feet (6m) outside
No specific requirement — determined by risk assessment
10 feet (3m) inside, 10 feet (3m) outside
20 feet (6m) inside, 20 feet (6m) outside (Correct answer)

Correct answer: 20 feet (6m) inside, 20 feet (6m) outside

A 20-foot clear zone on both sides of the perimeter fence provides unobstructed surveillance and eliminates concealment cover for approaching intruders.

Question 36: Which of the following is a common challenge when integrating security systems?

Increased system speed
Compatibility issues between different systems (Correct answer)
Simplified user interface
Reduction in system costs

Correct answer: Compatibility issues between different systems

A significant hurdle in integrating security systems is the inherent compatibility issues between different manufacturers' products. These systems often use varying communication protocols, hardware, and software, making it challenging to achieve seamless interoperability. Overcoming these differences typically requires specialized interfaces, middleware, or custom programming, adding complexity and cost to the integration project.

Question 37: Which of the following is a best practice when maintaining CCTV systems?

Replacing cameras every year
Adjusting camera angles daily
Cleaning camera lenses monthly (Correct answer)
Turning off cameras when not in use

Correct answer: Cleaning camera lenses monthly

Cleaning camera lenses monthly is a best practice for CCTV systems because dust, dirt, and smudges can significantly degrade image quality and obscure critical details. Regular cleaning ensures clear, high-quality footage, which is essential for effective surveillance and incident investigation.

Question 38: What is the recommended maximum spacing between fence posts for a standard 7-foot chain-link security fence to maintain structural integrity under attack?

12 feet (3.6m)
16 feet (4.8m)
6 feet (1.8m)
10 feet (3m) (Correct answer)

Correct answer: 10 feet (3m)

ASIS and DoD perimeter security guidelines recommend a maximum 10-foot (3m) post spacing to ensure the fence maintains structural integrity and cannot easily be pushed down.

Question 39: What is a 'hostile vehicle mitigation' (HVM) strategy and when is it required in US federal facility security planning?

Vehicle barriers required at all federal facilities regardless of threat level
Physical measures to prevent vehicle-borne attacks; required when standoff distances cannot be met (Correct answer)
GPS tracking of all vehicles on federal property
Background checks for all vehicle operators entering federal property

Correct answer: Physical measures to prevent vehicle-borne attacks; required when standoff distances cannot be met

HVM encompasses physical countermeasures (bollards, walls, ditches) to stop or deflect hostile vehicles, required by ISC standards when minimum standoff distances cannot be achieved.

Question 40: In asset classification for physical security purposes, what factor is LEAST important?

Replacement cost of the asset
Attractiveness to potential thieves
Criticality to business operations
Original purchase date of the asset (Correct answer)

Correct answer: Original purchase date of the asset

Original purchase date has minimal relevance to current security requirements compared to value, criticality, and theft attractiveness.

Question 41: What is the primary security risk associated with allowing trees to grow tall near security lighting fixtures at a facility perimeter?

Tree roots can damage underground cable conduits
Trees attract wildlife that triggers perimeter detection sensors
Tree branches can fall and damage lighting fixtures
Tall trees can provide climbing access over perimeter fences and block security lighting coverage (Correct answer)

Correct answer: Tall trees can provide climbing access over perimeter fences and block security lighting coverage

Tall trees near the perimeter can be used as climbing aids to scale fences, and their canopies can block security lighting, creating dark zones that benefit intruders.

Question 42: For a parking garage security lighting design, what is the recommended minimum maintained horizontal illuminance at pavement level according to IES RP-20?

0.5 foot-candles (5 lux)
10 foot-candles (108 lux)
5.0 foot-candles (54 lux) (Correct answer)
1.0 foot-candle (11 lux)

Correct answer: 5.0 foot-candles (54 lux)

IES RP-20 recommends a minimum 5.0 foot-candles maintained horizontal illuminance at pavement level in parking garages to support both personal safety and camera surveillance effectiveness.

Question 43: During an emergency evacuation, which group should receive priority assistance according to standard life-safety protocols?

Employees nearest to exits
Senior executives
Persons with mobility impairments or disabilities (Correct answer)
IT personnel protecting critical data

Correct answer: Persons with mobility impairments or disabilities

Standard life-safety protocols prioritize persons with disabilities or mobility impairments who may need assistance evacuating safely.

Question 44: Which US federal regulation mandates specific access control requirements for facilities handling classified national security information?

HIPAA Security Rule
NIST SP 800-116
ICD 705 (Intelligence Community Directive 705) (Correct answer)
NFPA 101 Life Safety Code

Correct answer: ICD 705 (Intelligence Community Directive 705)

ICD 705 establishes the physical and technical security standards for Sensitive Compartmented Information Facilities (SCIFs), including strict access control requirements.

Question 45: Which risk treatment strategy involves accepting the risk without taking any action to reduce its impact?

Risk Mitigation
Risk Transfer
Risk Acceptance (Correct answer)
Risk Avoidance

Correct answer: Risk Acceptance

Risk acceptance is a deliberate decision to acknowledge a risk and take no action to reduce its likelihood or impact. This strategy is typically chosen when the cost of mitigating the risk outweighs the potential cost of the risk occurring, or when the risk is deemed to be very low.

Question 46: Under the Americans with Disabilities Act (ADA) and US privacy law, which area is generally PROHIBITED for video surveillance installation in a workplace?

Break rooms and kitchens
Parking lots and driveways
Restrooms and changing rooms (Correct answer)
Loading docks and shipping areas

Correct answer: Restrooms and changing rooms

Video surveillance in restrooms and changing rooms is prohibited under US federal and state privacy laws because individuals have a reasonable expectation of privacy in these locations.

Question 47: Which element is MOST critical to include in an emergency notification system to ensure effective communication during a crisis?

Email-only distribution lists
Multiple redundant communication channels (Correct answer)
Social media platforms exclusively
A single dedicated hotline number

Correct answer: Multiple redundant communication channels

Multiple redundant communication channels ensure that if one system fails during an emergency, others remain available to reach all stakeholders.

Question 48: What is the purpose of 'alarm verification' in a modern intrusion detection system, and how does it reduce law enforcement response burden?

Alarm verification automatically dispatches police faster than unverified alarms
It requires the alarm subscriber to physically verify the premise before police are called
It uses video, audio, or sequential sensor activation to confirm an intrusion before dispatching authorities, reducing false alarms (Correct answer)
It allows police to remotely monitor the live alarm system feed

Correct answer: It uses video, audio, or sequential sensor activation to confirm an intrusion before dispatching authorities, reducing false alarms

Alarm verification (using video clips, audio, or two-sensor activation) reduces false dispatches — which constitute 94-98% of US police alarm responses — improving response efficiency and reducing fees.

Question 49: During a security survey for asset protection, which area should be evaluated FIRST?

Loading dock operations
The outermost perimeter of the facility (Correct answer)
Interior storage rooms
Executive office suites

Correct answer: The outermost perimeter of the facility

Security surveys follow an outside-in approach, beginning with the outermost perimeter and working inward through successive layers.

Question 50: Which camera type is BEST suited for monitoring large open areas such as parking lots while simultaneously providing enough detail to read license plates?

Multi-sensor camera with separate channels (Correct answer)
PTZ (Pan-Tilt-Zoom) camera
Fixed wide-angle camera
Panoramic/360-degree camera

Correct answer: Multi-sensor camera with separate channels

Multi-sensor cameras combine multiple focused sensors in one unit to simultaneously provide wide-area overview and high-resolution detail, solving the zoom-vs-coverage tradeoff.

Question 51: Which of the following is an example of a physical barrier used in asset protection?

Surveillance camera
Alarm system
Security guard
Fence (Correct answer)

Correct answer: Fence

A physical barrier is a tangible structure designed to impede or prevent unauthorized access. A fence serves as a clear physical impediment, establishing a perimeter and deterring entry, unlike surveillance cameras (detection), security guards (personnel), or alarm systems (detection/response).

Question 52: Which document captures the detailed objectives, tactics, and resource assignments for managing a specific incident during its operational period?

Incident Action Plan (IAP) (Correct answer)
Hazard Vulnerability Analysis
Emergency Operations Plan
Continuity of Operations Plan

Correct answer: Incident Action Plan (IAP)

An Incident Action Plan (IAP) documents the specific objectives, tactics, and resource assignments for each operational period of an active incident.

Question 53: According to CPTED principles, what is the recommended maximum height for foundation plantings (shrubs) near building entry points?

2 feet (0.6m) maximum
4 feet (1.2m) maximum (Correct answer)
No restriction — natural screening is preferred
6 feet (1.8m) maximum

Correct answer: 4 feet (1.2m) maximum

CPTED guidelines typically recommend shrubs near entries remain below 4 feet (1.2m) so they cannot provide concealment for a crouching person while still providing aesthetic landscaping.

Question 54: In asset protection, what does the term "layered security" refer to?

Focusing on a single, strong security measure
Using multiple security personnel
Implementing several security measures in succession (Correct answer)
Securing only the most valuable assets

Correct answer: Implementing several security measures in succession

Layered security, also known as "defense in depth," involves deploying multiple security measures in a series of overlapping layers. This approach ensures that if one security control fails or is bypassed, another layer is in place to provide continued protection, making it more difficult for threats to reach their target.

Question 55: In developing an asset protection strategy, what does the term 'target hardening' refer to?

Insuring assets against all possible losses
Moving assets to an underground vault
Making assets physically indestructible
Increasing the effort required for an adversary to compromise a specific asset (Correct answer)

Correct answer: Increasing the effort required for an adversary to compromise a specific asset

Target hardening increases the difficulty, time, and risk an adversary faces when attempting to compromise a specific asset.

Question 56: When conducting a CCTV post-incident review, a security manager finds a 4-hour gap in recordings from a critical camera. What should be the FIRST action?

Notify local law enforcement about the recording gap
Replace the camera immediately
Review all other cameras covering the same area during the gap period
Determine whether the gap was caused by equipment failure, storage overflow, or deliberate tampering (Correct answer)

Correct answer: Determine whether the gap was caused by equipment failure, storage overflow, or deliberate tampering

Determining the root cause of the gap first establishes whether it was an equipment failure, administrative error, or intentional act — this affects all subsequent investigation and remediation steps.

Question 57: What surveillance camera feature allows automatic adjustment of the iris aperture to maintain proper exposure as lighting conditions change throughout the day?

Digital Noise Reduction (DNR)
Infrared Cut Filter (ICF)
Auto Iris (AI) lens / Direct Drive Iris (DDI) (Correct answer)
Back Light Compensation (BLC)

Correct answer: Auto Iris (AI) lens / Direct Drive Iris (DDI)

An Auto Iris (AI) or Direct Drive Iris lens automatically adjusts its aperture in response to changing light levels, maintaining proper exposure from bright daylight to low-light evening conditions.

Question 58: Which of the following security systems is typically integrated with access control systems?

HVAC systems
Fire alarms
Public address systems
CCTV surveillance cameras (Correct answer)

Correct answer: CCTV surveillance cameras

CCTV surveillance cameras are frequently integrated with access control systems to provide visual verification of entry and exit events. When an access card is used or a door is opened, the CCTV system can automatically record or display the corresponding camera feed. This integration enhances security by linking physical access records with visual evidence, allowing for better incident investigation and deterrence.

Question 59: Which of the following is a deterrent to theft in a retail environment?

Visible surveillance cameras (Correct answer)
Emergency exits
Inventory management software
Employee training programs

Correct answer: Visible surveillance cameras

A deterrent is something that discourages or prevents an action. Visible surveillance cameras act as a strong deterrent to theft in a retail environment because potential thieves are less likely to commit a crime if they believe they are being watched and recorded, increasing their risk of being caught.

Question 60: According to ASIS Physical Security Principles, what is the recommended approach when camera placement must balance surveillance effectiveness with employee privacy concerns?

Install cameras only in exterior locations to avoid privacy issues
Post visible notices that surveillance is in use and focus cameras on work areas rather than personal spaces (Correct answer)
Always prioritize surveillance effectiveness over privacy
Require written employee consent for all surveillance

Correct answer: Post visible notices that surveillance is in use and focus cameras on work areas rather than personal spaces

Posting conspicuous notices of surveillance and focusing cameras on work processes and assets rather than personal spaces balances security needs with employee privacy expectations and legal requirements.

Question 61: What is the minimum recommended fence height according to ASIS guidelines for a standard industrial security perimeter?

7 feet (2.1m) (Correct answer)
6 feet (1.8m)
8 feet (2.4m)
4 feet (1.2m)

Correct answer: 7 feet (2.1m)

ASIS guidelines recommend a minimum 7-foot (2.1m) fence height for industrial security perimeters, with additional topping for higher-security applications.

Question 62: What is the primary advantage of Wide Dynamic Range (WDR) cameras in physical security applications?

They have a wider horizontal field of view than standard cameras
They operate in complete darkness without supplemental lighting
They are less expensive than standard IP cameras
They capture usable images in scenes with extreme contrast between bright and dark areas (Correct answer)

Correct answer: They capture usable images in scenes with extreme contrast between bright and dark areas

WDR cameras use multiple exposures or sensor technology to capture detail in both very bright (e.g., exterior windows) and very dark areas simultaneously within the same frame.

Question 63: What is 'credential harvesting' in the context of physical access control attacks?

Gathering biometric data from enrolled users
Capturing credential data from cards using a concealed reader (Correct answer)
Auditing all access logs for anomalies
Collecting expired access cards for disposal

Correct answer: Capturing credential data from cards using a concealed reader

Credential harvesting involves using a covert RFID/NFC reader to skim and copy card data from unsuspecting cardholders, enabling later cloning of the credential.

Question 64: In a CPTED assessment, a security professional observes that a building's main entrance is hidden from the street and from other building occupants. What CPTED deficiency does this represent?

Poor territorial reinforcement
Insufficient access control
Inadequate maintenance
Lack of natural surveillance / poor sightlines to entry (Correct answer)

Correct answer: Lack of natural surveillance / poor sightlines to entry

A hidden entrance lacks natural surveillance because neither passersby nor other building occupants can observe who is entering or loitering, creating opportunity for assault, theft, or unauthorized entry.

Question 65: Which of the following is an example of risk transfer?

Performing regular security audits
Implementing stronger access controls
Discontinuing a risky operation
Purchasing insurance (Correct answer)

Correct answer: Purchasing insurance

Risk transfer involves shifting the financial consequences of a risk to a third party. Purchasing insurance is a classic example, as it transfers the financial burden of potential losses (e.g., property damage, liability) from the organization to the insurance company in exchange for premiums.

Question 66: What is the primary benefit of integrating different security systems?

Enhanced overall security by enabling systems to work together (Correct answer)
Decreased need for security personnel
Reduced maintenance costs
Improved aesthetics of the security setup

Correct answer: Enhanced overall security by enabling systems to work together

Integrating different security systems allows them to communicate and share information, creating a unified and more effective security posture. This synergy enables systems like CCTV, access control, and alarms to work together, leading to enhanced threat detection, faster response times, and a more comprehensive security solution than isolated systems could provide.

Question 67: Under UL 2050 standards for central station alarm monitoring, what is the maximum response time for a central station to call the subscriber after receiving an intrusion alarm signal?

5 minutes
90 seconds (Correct answer)
10 minutes
30 seconds

Correct answer: 90 seconds

UL 2050 requires central stations to attempt to contact the subscriber within 90 seconds of receiving an intrusion alarm signal to verify the event.

Question 68: According to ASIS standards, what is the recommended maximum 'fail-safe' vs 'fail-secure' configuration for fire exit doors?

Fail-secure (remains locked on power loss) for all exit doors
Fail-safe (unlocks on power loss) for all exit doors
Fail-secure for all doors when connected to fire alarm systems
Fail-safe for egress doors, fail-secure for high-security entry doors (Correct answer)

Correct answer: Fail-safe for egress doors, fail-secure for high-security entry doors

Egress doors must be fail-safe to comply with life-safety codes (unlocking during fire/power loss), while high-security entry doors may be fail-secure to maintain asset protection.

Question 69: Which IDS sensor is specifically designed to detect an attempt to break through walls, floors, or ceilings rather than entering through doors or windows?

Photoelectric beam sensor
Glass break detector
Passive infrared motion detector
Seismic/vibration sensor (Correct answer)

Correct answer: Seismic/vibration sensor

Seismic/vibration sensors detect the physical vibrations caused by drilling, sawing, or hammering through walls and structural elements, providing 'structural penetration' detection.

Question 70: A security manager notices that access logs show an employee's card being used to enter a server room while the same employee is simultaneously badged into the main lobby. This is BEST described as:

A duplicate credential or card cloning incident (Correct answer)
A time-zone configuration error
An anti-passback violation
A system malfunction

Correct answer: A duplicate credential or card cloning incident

Simultaneous use of a credential at two locations indicates either a cloned card or a duplicate credential issued to an unauthorized person.

Question 71: Which document should be the foundation of any organizational asset protection program?

The annual budget report
The building floor plan
A comprehensive asset protection policy approved by senior management (Correct answer)
The employee handbook

Correct answer: A comprehensive asset protection policy approved by senior management

A formal policy approved by senior management establishes authority, scope, and accountability for the asset protection program.

Question 72: What is the purpose of the 'exit delay' and 'entry delay' in an intrusion alarm system?

Exit delay allows the last person to leave and disarm the system; entry delay allows an authorized user time to disarm before the alarm activates (Correct answer)
Exit delay silences external sounders while entry delay silences internal sounders
Both delays are required by UL for all commercial alarm installations
Entry and exit delays reduce power consumption during non-business hours

Correct answer: Exit delay allows the last person to leave and disarm the system; entry delay allows an authorized user time to disarm before the alarm activates

Exit delay gives the last authorized person time to leave after arming, while entry delay gives an authorized person time to reach the keypad and disarm after entering through a designated entry point.

Question 73: Which type of motion detector is MOST resistant to false alarms caused by HVAC air currents, heat vents, and changes in ambient temperature?

Passive infrared (PIR) detector
Dual-technology (PIR + microwave) detector (Correct answer)
Microwave (Doppler) detector
Ultrasonic detector

Correct answer: Dual-technology (PIR + microwave) detector

Dual-technology detectors require BOTH PIR and microwave to simultaneously trigger before generating an alarm, dramatically reducing false alarms caused by environmental factors that typically affect only one technology.

Question 74: What is the primary difference between a 'point' intrusion detection sensor and a 'line' or 'volumetric' sensor?

Point sensors protect a single specific location (door/window), while volumetric sensors cover an entire area or zone (Correct answer)
Point sensors are more expensive than volumetric sensors
Point sensors require a wired connection while volumetric sensors are wireless
Point sensors detect motion only while volumetric sensors detect heat

Correct answer: Point sensors protect a single specific location (door/window), while volumetric sensors cover an entire area or zone

Point sensors (magnetic door contacts, glass break detectors) protect a single discrete location, while volumetric sensors (PIR, microwave) detect intrusion throughout an entire protected volume or zone.

Question 75: In Wiegand access control protocol, which data format is most commonly used in North American installations?

26-bit Wiegand (Correct answer)
64-bit Wiegand
OSDP v2
ABA Track II

Correct answer: 26-bit Wiegand

The 26-bit Wiegand format is the de facto standard in North American access control installations, though its limited address space has prompted migration to longer formats.

Question 76: A perimeter fence line must pass through a low-lying area prone to flooding. What is the BEST security solution to maintain perimeter integrity during flood events?

Use underwater ground sensors connected to the alarm system
Raise the fence height to 12 feet in the flood-prone section
Install a flood gate or flap gate designed to allow water flow while deterring human intrusion (Correct answer)
Install a concrete barrier instead of fence in the flood zone

Correct answer: Install a flood gate or flap gate designed to allow water flow while deterring human intrusion

Flood gates or anti-intrusion flap gates are designed to allow water to pass freely while physical barriers and sensors prevent human intrusion through drainage openings.

Question 77: In the PSP examination context, what does 'nuisance alarm rate' (NAR) measure in an intrusion detection system evaluation?

The ratio of false or nuisance alarms to actual intrusion detections over a given period (Correct answer)
The average time it takes for an operator to acknowledge an alarm
The percentage of alarms caused by equipment malfunctions vs. human error
The number of alarm zones that were in fault condition during an audit period

Correct answer: The ratio of false or nuisance alarms to actual intrusion detections over a given period

NAR measures the proportion of all alarm activations that are nuisance/false alarms versus genuine detections, serving as a key performance indicator for sensor selection and system tuning.

Question 78: A passive infrared (PIR) detector is installed near an exterior glass wall. What is the MOST likely source of false alarms in this installation?

High humidity condensation on the detector lens
Nearby smoke detectors interfering with the PIR signal
Direct sunlight or headlights shining through the glass, causing rapid temperature changes in the detection zone (Correct answer)
Radio frequency interference from nearby equipment

Correct answer: Direct sunlight or headlights shining through the glass, causing rapid temperature changes in the detection zone

PIR detectors sense changes in infrared (heat) energy — sunlight or vehicle headlights shining through glass can rapidly heat objects in the detection zone, mimicking a human body and triggering false alarms.

Question 79: When protecting assets during transportation between facilities, which security measure provides the greatest risk reduction?

Implementing GPS tracking with tamper-evident seals and chain of custody documentation (Correct answer)
Using unmarked vehicles only
Varying routes randomly without documentation
Hiring armed escorts for every shipment

Correct answer: Implementing GPS tracking with tamper-evident seals and chain of custody documentation

Combined GPS tracking, tamper evidence, and chain of custody creates comprehensive protection during transit.

Question 80: What is the primary purpose of a 'clear zone' (also called a buffer zone) at a facility's perimeter?

To create a fire break around the facility
To store emergency equipment near the fence line
To eliminate concealment and provide unobstructed surveillance of the perimeter (Correct answer)
To provide parking for security personnel

Correct answer: To eliminate concealment and provide unobstructed surveillance of the perimeter

A clear zone eliminates vegetation and objects that could provide concealment for intruders, improving detection capability for security personnel and electronic sensors.

Question 81: What is the recommended minimum distance between parallel rows of concertina wire on a high-security perimeter fence to slow intruder movement?

The rows should not be parallel but staggered (Correct answer)
2 feet apart
6 inches apart
One strand is sufficient for most applications

Correct answer: The rows should not be parallel but staggered

Staggering concertina wire rows in a pyramid or box configuration is more effective than parallel rows, as it entangles intruders more effectively and is harder to defeat.

Question 82: What camera resolution is generally recommended for reliable facial identification in a video surveillance system according to ASIS and IPVM guidelines?

100 pixels per foot (PPF) or higher (Correct answer)
20 pixels per foot (PPF)
40 pixels per foot (PPF)
80 pixels per foot (PPF)

Correct answer: 100 pixels per foot (PPF) or higher

Facial identification (recognizing a specific individual from a database) typically requires 100 PPF or higher, while facial detection requires approximately 40 PPF.

Question 83: When should an organization conduct a full-scale emergency exercise?

Only when mandated by external regulatory auditors
At least annually or as required by regulation, involving real resources and personnel (Correct answer)
Every five years as part of long-term planning cycles
Only after an actual emergency has occurred

Correct answer: At least annually or as required by regulation, involving real resources and personnel

Full-scale exercises should be conducted at least annually (or per regulatory requirement) to validate plans and train personnel using actual resources and realistic scenarios.

Question 84: According to ASIS guidelines, how long should alarm event logs be retained for commercial and industrial facilities?

90 days minimum
Indefinitely
1 year minimum (Correct answer)
30 days minimum

Correct answer: 1 year minimum

ASIS recommends retaining alarm event logs for a minimum of 1 year to support investigations, legal proceedings, and trend analysis of alarm patterns.

Question 85: Which vehicle barrier is classified as a 'passive' anti-ram barrier?

Concrete jersey barriers (Correct answer)
Hydraulic rising bollard
Electric gate with vehicle sensors
Swing arm gate with vehicle stop

Correct answer: Concrete jersey barriers

Concrete jersey barriers (K-rails) are passive barriers because they are fixed in place and do not require power, activation, or operator intervention to function.

Question 86: What is the primary purpose of conducting routine inspections of security equipment?

To identify and fix potential issues before they cause failures (Correct answer)
To replace old equipment with new models
To document the age of the equipment
To assess the value of the equipment

Correct answer: To identify and fix potential issues before they cause failures

Routine inspections are proactive measures designed to detect wear and tear, malfunctions, or other potential problems with security equipment. By identifying and addressing these issues early, organizations can prevent unexpected failures, maintain optimal performance, and avoid costly disruptions to their security posture.

Question 87: Which biometric identifier is considered the MOST unique and stable over time for access control purposes?

Fingerprint
Iris pattern (Correct answer)
Voice recognition
Hand geometry

Correct answer: Iris pattern

The iris pattern is considered the most unique and stable biometric identifier because it is protected inside the eye and does not change significantly with age.

Question 88: What is the primary security advantage of using a 'credential + PIN' (something you have + something you know) access control system?

It is faster to process than single-factor authentication
It provides multi-factor authentication, reducing risk from stolen or cloned credentials (Correct answer)
It eliminates the need for audit logs
It is required by all US federal facilities

Correct answer: It provides multi-factor authentication, reducing risk from stolen or cloned credentials

Combining a physical credential with a PIN provides two-factor authentication, so a stolen or cloned card alone is insufficient to gain access.

Question 89: What type of security lighting provides continuous, even illumination at night specifically designed to reveal intruders against a lighted background — even if the intruder attempts to extinguish individual lights?

Glare projection lighting
Continuous lighting (Correct answer)
Controlled lighting
Standby lighting

Correct answer: Continuous lighting

Continuous lighting provides steady, even illumination throughout a protected area all night, making intruders visible regardless of their attempts to use darkness as cover.

Question 90: In CPTED principles, what does 'territorial reinforcement' mean and how is it applied?

Assigning security guards to enforce territorial boundaries
Installing fences and barriers to define territory boundaries
Using design features to create a sense of ownership and legitimate use that deters potential offenders (Correct answer)
Marking all facility boundaries with warning signs

Correct answer: Using design features to create a sense of ownership and legitimate use that deters potential offenders

Territorial reinforcement uses design elements (landscaping, walkways, signage, lighting) to distinguish private from public space, creating a psychological sense that the area is owned and monitored.

Question 91: According to US Department of Defense standards, what is the minimum standoff distance from an unscreened vehicle to a critical building to mitigate blast effects from a vehicle-borne improvised explosive device (VBIED)?

100 feet (30m) (Correct answer)
25 feet (7.6m)
50 feet (15m)
164 feet (50m)

Correct answer: 100 feet (30m)

UFC 4-010-01 (DoD Minimum Antiterrorism Standards for Buildings) establishes 100 feet (30m) as the minimum standoff distance for unscreened vehicle parking near inhabited buildings.

Question 92: A physical security professional is conducting a tabletop exercise. What is the PRIMARY purpose of this type of exercise?

Discuss roles and responses to a hypothetical scenario without deploying resources (Correct answer)
Validate communication systems during a live drill
Train first responders in physical intervention techniques
Test equipment functionality under real conditions

Correct answer: Discuss roles and responses to a hypothetical scenario without deploying resources

Tabletop exercises are discussion-based sessions where participants talk through their roles and responses to a scenario without activating actual resources.

Question 93: What is the primary security benefit of constructing a facility with a 'setback' from the property line in addition to a perimeter fence?

It reduces the cost of perimeter lighting installation
It reduces property taxes for the facility owner
It provides depth-of-defense by creating multiple security layers with detection time between them (Correct answer)
It satisfies local building code requirements for fire access lanes

Correct answer: It provides depth-of-defense by creating multiple security layers with detection time between them

Physical setback between the property line and the building creates detection time — the distance an attacker must travel after breaching the outer perimeter gives security personnel time to respond.

Question 94: What is the purpose of a vulnerability assessment in risk management?

To identify weaknesses that could be exploited by threats (Correct answer)
To measure the effectiveness of security controls
To document security incidents
To monitor ongoing security risks

Correct answer: To identify weaknesses that could be exploited by threats

A vulnerability assessment specifically focuses on identifying weaknesses or flaws within a system, process, or environment. These vulnerabilities, if exploited by a threat, could lead to a security incident, making their identification crucial for understanding potential attack vectors and improving defenses.

Question 95: Which fence type is recommended by ASIS for high-security applications due to its rigidity and resistance to cut-through attacks?

Chain-link fence (11-gauge)
Woven wire fence
Wooden privacy fence
Welded wire mesh panel fence (Correct answer)

Correct answer: Welded wire mesh panel fence

Welded wire mesh panel fences (such as 358 anti-cut mesh) offer superior resistance to cutting and climbing compared to chain-link due to their rigid construction and small aperture size.

Question 96: In an alarm system, what does a 'supervisory circuit' monitor?

The identity of personnel arming and disarming the system
The response time of the monitoring center
The integrity of wiring and sensors to detect tampering or sabotage (Correct answer)
The battery backup level of the control panel

Correct answer: The integrity of wiring and sensors to detect tampering or sabotage

Supervisory circuits use end-of-line resistors or active monitoring to continuously verify sensor wiring integrity, generating an alarm if wires are cut, shorted, or tampered with.

Question 97: Which IP camera compression standard provides the BEST image quality at the lowest bandwidth compared to older MPEG-4 and H.264 formats?

H.265 (HEVC) (Correct answer)
MPEG-2
H.264 AVC
MJPEG

Correct answer: H.265 (HEVC)

H.265 (HEVC) offers approximately 50% better compression efficiency than H.264, delivering the same image quality at half the bit rate or better quality at the same bit rate.

Question 98: Which document formally establishes the authority, scope, and responsibilities for an organization's emergency response program?

Emergency Operations Plan (EOP) (Correct answer)
Standard Operating Procedure (SOP)
Business Continuity Plan (BCP)
Incident Action Plan

Correct answer: Emergency Operations Plan (EOP)

An Emergency Operations Plan (EOP) is the foundational document that defines authority, scope, roles, and responsibilities for an organization's emergency response.

Question 99: According to ASIS PSP guidelines, what is the recommended action when a lost or stolen access card is reported?

Immediately deactivate the reported credential in the access control system (Correct answer)
Change all facility access codes within 24 hours
Issue a new card and deactivate the old one within 30 days
Notify law enforcement before taking any system action

Correct answer: Immediately deactivate the reported credential in the access control system

Immediate deactivation of a lost or stolen credential is the first priority to prevent unauthorized use, regardless of whether the loss was accidental or malicious.

Question 100: What is the purpose of an 'anti-passback' feature in an access control system?

To prevent credential sharing by requiring card-in and card-out sequences (Correct answer)
To deny access to terminated employees retroactively
To block entry from the rear of a facility
To prevent cards from being used after expiration

Correct answer: To prevent credential sharing by requiring card-in and card-out sequences

Anti-passback prevents a credential from being used to enter an area again until it has been properly used to exit, stopping users from passing their cards back to others.

Question 101: In CPTED (Crime Prevention Through Environmental Design), what principle is applied when using low-height landscaping near building windows and entrances?

Natural surveillance (Correct answer)
Natural access control
Territorial reinforcement
Target hardening

Correct answer: Natural surveillance

Using low-height landscaping near windows and entrances applies the natural surveillance principle by maintaining sightlines for occupants and passersby to observe criminal activity.

Question 102: Which access control system architecture processes authentication decisions at the door-level hardware rather than a central server?

Analog access control
Centralized access control
Distributed (edge) access control (Correct answer)
Cloud-based access control

Correct answer: Distributed (edge) access control

Distributed or edge access control systems store access rules locally at the door controller, allowing continued operation even when network connectivity to the central server is lost.

Question 103: Which access control model grants permissions based on a subject's clearance level and the sensitivity classification of the object?

Discretionary Access Control (DAC)
Attribute-Based Access Control (ABAC)
Mandatory Access Control (MAC) (Correct answer)
Role-Based Access Control (RBAC)

Correct answer: Mandatory Access Control (MAC)

Mandatory Access Control (MAC) enforces access based on security labels assigned to subjects and objects, commonly used in government and military environments.

Question 104: A security consultant is assessing an industrial facility and notes that bright security lights illuminate the parking lot but cast deep shadows behind large equipment stored near the perimeter fence. What term describes this lighting problem?

Spill light
Shadow pooling / contrast shadow effect (Correct answer)
Veiling glare
Light pollution

Correct answer: Shadow pooling / contrast shadow effect

Shadow pooling occurs when bright direct lighting creates deep, dark shadows behind objects, providing concealment opportunities that outweigh the benefits of the bright areas.

Question 105: What does OSDP (Open Supervised Device Protocol) provide that legacy Wiegand does NOT?

Higher card read speed
Longer cable runs without signal loss
Compatibility with magnetic stripe cards
Encrypted, bidirectional communication between reader and controller (Correct answer)

Correct answer: Encrypted, bidirectional communication between reader and controller

OSDP provides AES-128 encrypted, bidirectional communication that enables mutual authentication between reader and controller, eliminating eavesdropping and relay attacks possible with Wiegand.

Question 106: What is the role of a central management system (CMS) in security system integration?

To physically connect all security devices
To monitor and control integrated security systems from a single interface (Correct answer)
To increase the number of security cameras
To replace the need for on-site security guards

Correct answer: To monitor and control integrated security systems from a single interface

A Central Management System (CMS) serves as the unified control center for all integrated security systems. It provides a single, intuitive interface through which security personnel can monitor alerts, manage access points, control cameras, and respond to incidents across the entire security infrastructure. This centralization streamlines operations, improves situational awareness, and enhances the efficiency of security management.

Question 107: What is the CPTED concept of 'activity support' and how does it improve security?

Providing technical support for security system maintenance
Installing security guard booths at key locations to support patrol activities
Supporting criminal investigations through evidence collection activities
Programming legitimate activities and uses into spaces to increase natural surveillance through user presence (Correct answer)

Correct answer: Programming legitimate activities and uses into spaces to increase natural surveillance through user presence

Activity support programs legitimate uses (benches, food carts, exercise areas) into otherwise empty or underused spaces to generate regular foot traffic, increasing natural surveillance and deterring crime.

Question 108: In access control, what does the term 'two-person integrity rule' require?

Two guards must patrol together at all times
Two supervisors must approve access requests
Two authorized individuals must be present to access a sensitive area (Correct answer)
Two separate authentication factors must be used

Correct answer: Two authorized individuals must be present to access a sensitive area

The two-person integrity rule requires at least two authorized individuals to be present simultaneously when accessing sensitive areas or materials, reducing insider threat risk.

Question 109: The US Department of State's K-rating system for anti-ram barriers tests a vehicle at 50 mph. What does a K12 rating indicate?

The barrier stops a 15,000 lb vehicle traveling at 50 mph (Correct answer)
The barrier is 12 inches thick at the base
The barrier withstands 12,000 foot-pounds of impact force
The barrier stops a 65,000 lb vehicle traveling at 50 mph

Correct answer: The barrier stops a 15,000 lb vehicle traveling at 50 mph

A K12 rating means the barrier successfully stopped a 15,000 lb vehicle (medium-duty truck) traveling at 50 mph with no more than 3.3 feet of penetration beyond the face.

Question 110: For a camera monitoring a vehicle entry gate, what frame rate is the minimum recommended to reliably capture readable license plates on vehicles traveling at normal entry speeds?

5 frames per second (fps)
15 frames per second (fps)
25-30 frames per second (fps) (Correct answer)
60 frames per second (fps)

Correct answer: 25-30 frames per second (fps)

25-30 fps is the minimum recommended for license plate capture at vehicle entry gate speeds, as lower frame rates cause motion blur that makes plates unreadable.

Question 111: What is the term for a designated safe location where employees assemble after evacuating a building so that headcounts can be performed?

Triage Zone
Command Post
Assembly Area (Correct answer)
Staging Area

Correct answer: Assembly Area

An Assembly Area (also called a muster point) is the pre-designated location where evacuees gather so accountability and headcounts can be confirmed.

Question 112: What is the primary purpose of a mantrap (access control vestibule) in a physical security system?

To house security personnel
To prevent tailgating and piggybacking (Correct answer)
To provide emergency egress
To store access control credentials

Correct answer: To prevent tailgating and piggybacking

A mantrap uses two interlocking doors to ensure only one person passes through at a time, preventing unauthorized tailgating or piggybacking.

Question 113: What does 'IPVM pixel density calculator' methodology account for that simple megapixel ratings do NOT?

Camera mounting height and angle
The actual scene width covered by the camera, which determines how many pixels cover each foot of the scene (Correct answer)
Network bandwidth consumed by the camera stream
Infrared illumination range of the camera

Correct answer: The actual scene width covered by the camera, which determines how many pixels cover each foot of the scene

Scene width (field of view) is the critical variable — the same 4MP camera provides dramatically different pixel density depending on whether it covers 10 feet or 100 feet of scene width.

Question 114: Which security lighting type activates only when a sensor detects movement, and what is its PRIMARY limitation in a high-security application?

Continuous lighting; it uses too much energy
Emergency lighting; it only functions during power outages
Motion-activated (standby) lighting; an intruder can observe the detection zone boundary and avoid it (Correct answer)
Standby lighting; it requires manual activation by guards

Correct answer: Motion-activated (standby) lighting; an intruder can observe the detection zone boundary and avoid it

Motion-activated standby lighting reveals the exact boundaries of the sensor's detection zone to a patient observer, allowing intruders to map and avoid triggering the lights.

Question 115: What is the primary security concern with open-plan office environments regarding asset protection?

Difficulty installing security cameras
Higher heating and cooling costs
Reduced ability to control access to sensitive assets and information (Correct answer)
Increased noise levels affecting productivity

Correct answer: Reduced ability to control access to sensitive assets and information

Open-plan designs inherently reduce the ability to restrict physical access to sensitive materials and equipment.

Question 116: According to ASIS and IES (Illuminating Engineering Society) guidelines, what is the minimum recommended horizontal illuminance level (in foot-candles) for a security perimeter fence line?

0.5 foot-candles (Correct answer)
5 foot-candles
0.1 foot-candles
2 foot-candles

Correct answer: 0.5 foot-candles

IES RP-33 (Lighting for Exterior Environments) recommends a minimum of 0.5 foot-candles (5.4 lux) for perimeter fence lines to support security patrol and camera surveillance functions.

Question 117: What is a 'shunt' in the context of an intrusion detection system, and when is it used?

A metal shield protecting alarm wiring from electromagnetic interference
A redundant communication path between the panel and monitoring center
A bypass of a specific sensor zone to allow legitimate access without triggering an alarm (Correct answer)
An emergency override that disables the entire alarm system

Correct answer: A bypass of a specific sensor zone to allow legitimate access without triggering an alarm

Shunting bypasses a specific sensor zone (such as a door used for deliveries) so that access can occur without triggering an alarm, while the rest of the system remains armed.

Question 118: A security assessment reveals that an 8-foot chain-link fence has a gate that takes 90 seconds to close and lock. What vulnerability does this represent?

Perimeter delay vulnerability — insufficient closure speed allows vehicle intrusion (Correct answer)
Administrative vulnerability — inadequate access control policy
Structural vulnerability — the gate is too heavy for the hinge capacity
Technological vulnerability — the gate lacks electronic monitoring

Correct answer: Perimeter delay vulnerability — insufficient closure speed allows vehicle intrusion

A slow-closing gate creates a perimeter delay vulnerability where a determined adversary can drive or run through before the gate secures, defeating the purpose of the barrier.

Question 119: What is 'glare projection' (or controlled lighting) in perimeter security lighting design?

Positioning lights to cast shadows into the facility to hide security activities
Using motion-activated lights to surprise and disorient intruders
Using floodlights aimed outward to blind potential intruders approaching the perimeter (Correct answer)
Installing lights inside the facility to illuminate windows for surveillance

Correct answer: Using floodlights aimed outward to blind potential intruders approaching the perimeter

Glare projection lighting aims bright lights outward from the perimeter to temporarily blind approaching intruders while keeping guards in relative darkness, giving defenders a tactical advantage.

Question 120: What does 'Grade' mean in the context of EN 50131 intrusion detection system standards used as reference in US security specifications?

The installation quality rating given by the alarm installer
The number of communication paths from panel to monitoring center
The risk level classification (1-4) that determines required system performance and tamper resistance (Correct answer)
The UL listing category of the alarm control panel

Correct answer: The risk level classification (1-4) that determines required system performance and tamper resistance

EN 50131 Grades 1-4 define increasing levels of risk and required system performance: Grade 1 for low risk, Grade 4 for high risk requiring the highest tamper resistance and redundancy.

Question 121: The Incident Command System (ICS) recommends that no supervisor have more than how many personnel reporting directly to them?

7 to 10
3 to 5
10 to 12
5 to 7 (Correct answer)

Correct answer: 5 to 7

ICS recommends a span of control of 5 to 7 subordinates per supervisor, with 5 being optimal, to maintain effective management during incidents.

Question 122: Which CPTED strategy is applied when a facility uses visible security measures — cameras, lighting, guard booths — to signal to potential offenders that detection is likely?

Target hardening (Correct answer)
Image maintenance / management
Activity support
Natural surveillance

Correct answer: Target hardening

Target hardening makes the potential target more difficult and risky to attack through visible security measures that increase perceived detection and apprehension risk for potential offenders.

Question 123: Which perimeter intrusion detection system (PIDS) technology is MOST susceptible to nuisance alarms caused by wind, animals, and debris?

Microwave beam sensor
Ported coaxial leaky cable
Taut-wire fence sensor
Buried seismic/vibration sensor cable (Correct answer)

Correct answer: Buried seismic/vibration sensor cable

Buried seismic/vibration sensors are highly sensitive to ground vibrations from any source, making them susceptible to nuisance alarms from wind-driven debris, animals, and nearby traffic.

Question 124: What is a Hazard Vulnerability Analysis (HVA) used for in emergency planning?

Establishing communication trees for key personnel
Documenting after-action lessons learned
Training staff in first-aid procedures
Identifying and prioritizing potential hazards based on likelihood and impact (Correct answer)

Correct answer: Identifying and prioritizing potential hazards based on likelihood and impact

An HVA systematically identifies potential hazards and evaluates them by likelihood and severity of impact to help prioritize emergency planning efforts.

Question 125: In a video surveillance system design, what is the '3-1-1 rule' or 'detect-observe-identify' methodology used for?

Establishing alarm response times for security operators
Determining the camera resolution and field of view needed to meet specific surveillance objectives (Correct answer)
Setting minimum illumination levels for camera operation
Calculating storage requirements for a 30-day retention system

Correct answer: Determining the camera resolution and field of view needed to meet specific surveillance objectives

The detect-observe-identify methodology sets pixel density requirements based on the surveillance objective: detect (lowest PPF), observe/monitor (medium PPF), or identify (highest PPF).

Physical Security Professional (PSP) Certification Exam

The Physical Security Professional (PSP) certification exam is administered by ASIS International and is designed for security practitioners responsible for conducting threat surveys, designing physical security systems, and implementing security measures. The exam covers physical security assessment, application of physical security measures, and implementation of security measures. Candidates must demonstrate expertise in risk management, access control, video surveillance, intrusion detection, perimeter security, CPTED principles, and security system integration.

125

Questions

150 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds

These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

asisonline.org — Test delivery, eligibility, passing score, retake policy, score release, test dates, score validity, fees, retake fee, exam information · verified Oct 2026