SIA Security Guard Exam — Questions and Answers

Question 1: What information should a visitor log or register typically contain?

Only the time of arrival
Name, company, person visiting, arrival time, departure time, car registration, and badge number issued (Correct answer)
Only the visitor's name
Just a signature

Correct answer: Name, company, person visiting, arrival time, departure time, car registration, and badge number issued

A comprehensive visitor log records: full name, company/organisation, person being visited, purpose of visit, arrival and departure times, vehicle registration, identification shown, and any visitor pass/badge number issued.

Question 2: What is 'tailgating' in access control?

When an unauthorised person follows an authorised person through a secure entry point without presenting their own credentials (Correct answer)
Parking too close to the building entrance
A type of social event
Following a vehicle too closely

Correct answer: When an unauthorised person follows an authorised person through a secure entry point without presenting their own credentials

Tailgating (or 'piggybacking') occurs when an unauthorised person follows closely behind an authorised person through a controlled entry point, bypassing the access control system.

Question 3: What is the purpose of a 'sign-out' procedure for visitors?

To ensure all visitors have left the premises, retrieve visitor passes, and maintain an accurate record of who is on site (Correct answer)
To collect feedback about their visit
To say goodbye politely
To remind them to come again

Correct answer: To ensure all visitors have left the premises, retrieve visitor passes, and maintain an accurate record of who is on site

The sign-out procedure ensures all visitors are accounted for (critical during evacuations), retrieves and deactivates visitor passes, records departure times, and maintains an accurate record of who is currently on site.

Question 4: What is the correct procedure for a security guard discovering a health and safety hazard?

Make the area safe if possible, report the hazard to the site manager and log it in the incident book (Correct answer)
Ignore it — it's not their responsibility
Fix it themselves regardless of qualification
Only report it if someone gets injured

Correct answer: Make the area safe if possible, report the hazard to the site manager and log it in the incident book

The guard should take immediate steps to make the area safe (e.g., cordon off a wet floor), report the hazard to the site manager or facilities team, and document it in the incident log. Do not attempt repairs you are not qualified for.

Question 5: What is the primary purpose of access control in a security context?

To provide directions to visitors
To count the number of people in a building
To ensure that only authorised persons can enter specific areas while preventing unauthorised access (Correct answer)
To make entry as difficult as possible for everyone

Correct answer: To ensure that only authorised persons can enter specific areas while preventing unauthorised access

Access control manages who can enter specific areas, ensuring only authorised personnel gain access while preventing unauthorised entry. It is a fundamental principle of physical security.

Question 6: What is a 'muster point' (or assembly point) in the context of building evacuation?

The location of the main fire suppression equipment
The security guard's designated post during an evacuation
The main entrance used by visitors
A pre-designated safe location away from the building where occupants must gather after evacuation, allowing head counts and confirmation that the building is clear (Correct answer)

Correct answer: A pre-designated safe location away from the building where occupants must gather after evacuation, allowing head counts and confirmation that the building is clear

A muster point (assembly point) is a designated safe location, away from the building and clear of emergency service access routes, where occupants gather after evacuation. It allows the roll call or head count to confirm all persons have evacuated safely.

Question 7: How should a security guard describe actions in a report — past tense or present tense?

Present tense always
Past tense, as the report describes events that have already occurred (Correct answer)
Any tense is acceptable
Future tense

Correct answer: Past tense, as the report describes events that have already occurred

Reports should be written in the past tense because they describe events that have already happened. For example: 'I observed a male individual enter the car park at 2230 hrs' — not 'I observe'.

Question 8: What is a 'biometric' access control system?

A system that verifies identity using unique physical characteristics such as fingerprints, iris scans, or facial recognition (Correct answer)
A system that reads barcodes
A system using traditional keys
A system that uses keypads

Correct answer: A system that verifies identity using unique physical characteristics such as fingerprints, iris scans, or facial recognition

Biometric systems use unique physical characteristics to verify identity — such as fingerprints, iris patterns, facial geometry, or hand geometry. They are highly secure because biological features cannot be easily shared or duplicated.

Question 9: What is a 'key holding' service in security?

A locksmith service
A service for making spare keys
A key cutting service
A service where the security company holds keys to premises and responds to alarm activations out of hours (Correct answer)

Correct answer: A service where the security company holds keys to premises and responds to alarm activations out of hours

Key holding is a service where the security company securely holds keys to a client's premises and responds when alarms are activated outside business hours, including securing the premises if necessary.

Question 10: What does 'defence in depth' mean in the context of access control?

Only protecting underground areas
Defending the building's deepest point
Using multiple layers of security measures so that if one layer fails, others still provide protection (Correct answer)
Having very deep foundations

Correct answer: Using multiple layers of security measures so that if one layer fails, others still provide protection

Defence in depth means implementing multiple layers of security — perimeter fencing, CCTV, patrols, access control, intruder alarms, etc. If one layer is breached, subsequent layers continue to provide protection.

Question 11: A security guard discovers a member of the public has injured themselves on a hazard in the premises (e.g., a wet floor without signage). What are the guard's immediate responsibilities?

Refuse to assist as it is not a security matter
File a formal complaint about the lack of signage before assisting
Assist the injured person (call first aid/emergency services if needed), make the area safe, document the incident fully in the occurrence book, report to the site manager, and ensure the hazard is made safe or signed (Correct answer)
Assist the injured person and conceal the hazard to avoid the client's liability

Correct answer: Assist the injured person (call first aid/emergency services if needed), make the area safe, document the incident fully in the occurrence book, report to the site manager, and ensure the hazard is made safe or signed

The guard's duties include assisting the injured person, calling for first aid or emergency services, making the hazard safe (or clearly signing it), reporting to the site manager, and documenting the incident fully. Full contemporaneous documentation is critical for potential insurance and legal purposes.

Question 12: Why is it important to issue and manage visitor passes or badges?

To make visitors feel welcome
To advertise the security company
To collect personal data
To easily identify who is a visitor, ensure they are accounted for, and control their access to appropriate areas (Correct answer)

Correct answer: To easily identify who is a visitor, ensure they are accounted for, and control their access to appropriate areas

Visitor passes serve multiple security purposes: they identify the wearer as a visitor (not staff), indicate which areas they may access, show if they should be escorted, and help ensure all visitors have signed out when they leave.

Question 13: Why is effective communication important between a security guard and the control room?

To ensure real-time situational awareness, coordinate responses, and maintain a record of events (Correct answer)
To check on the weather forecast
To pass the time during quiet periods
To arrange social events

Correct answer: To ensure real-time situational awareness, coordinate responses, and maintain a record of events

Regular communication with the control room ensures situational awareness, enables coordinated responses to incidents, provides welfare checks for lone workers, and creates an auditable record of the guard's activities.

Question 14: What is the 'personal safety distance' a security guard should ideally maintain when engaging with an aggressive person?

At least 5 metres at all times
A safe distance of approximately 1.5 to 2 metres (or beyond arm's reach of the aggressive person), allowing time to react if the person becomes physically threatening (Correct answer)
Physical contact distance (within arm's reach)
No specific distance — get as close as possible to maintain control

Correct answer: A safe distance of approximately 1.5 to 2 metres (or beyond arm's reach of the aggressive person), allowing time to react if the person becomes physically threatening

Maintaining a distance of approximately 1.5–2 metres (a 'reactionary gap') gives the security guard time and space to respond if the person makes a sudden aggressive move. Being too close reduces reaction time and increases the risk of assault.

Question 15: What does 'IIMARCH' stand for in security reporting?

Incident, Investigation, Management, Analysis, Report, Communication, Handover
It is not a real acronym
Information, Intention, Method, Administration, Risk assessment, Communications, Human rights (Correct answer)
Initial, Immediate, Medical, Ambulance, Recovery, Check, Hospital

Correct answer: Information, Intention, Method, Administration, Risk assessment, Communications, Human rights

IIMARCH is a briefing and reporting structure: Information (what happened), Intention (what you plan to do), Method (how you will do it), Administration (logistics), Risk assessment, Communications (how to communicate), and Human rights (consider rights of those involved).

Question 16: What are the five classes of fire?

A (solids), B (liquids), C (gases), D (metals), F (cooking oils/fats) (Correct answer)
Indoor, outdoor, chemical, electrical, and nuclear
Small, medium, large, very large, and inferno
1, 2, 3, 4, 5

Correct answer: A (solids), B (liquids), C (gases), D (metals), F (cooking oils/fats)

The five classes are: A (solid materials like wood, paper), B (flammable liquids like petrol, oil), C (flammable gases), D (metals like magnesium, sodium), and F (cooking oils and fats). Electrical fires are sometimes referred to separately.

Question 17: Why should a security guard use the 24-hour clock when writing reports?

It is required by law
It takes up less space on the page
It looks more professional
It eliminates confusion between AM and PM times and is the standard used by emergency services (Correct answer)

Correct answer: It eliminates confusion between AM and PM times and is the standard used by emergency services

The 24-hour clock eliminates ambiguity between AM and PM (e.g., 0800 vs 2000), aligns with emergency services and military time standards, and ensures precision in legal documents and evidence.

Question 18: How should descriptions of people be written in a security report?

Using objective, factual descriptors: approximate age, height, build, hair colour, clothing, and distinguishing features (Correct answer)
Just stating their ethnicity
Using vague descriptions like 'suspicious-looking'
Using nicknames or slang

Correct answer: Using objective, factual descriptors: approximate age, height, build, hair colour, clothing, and distinguishing features

Descriptions should be objective and factual: approximate age, height, build, hair colour and style, clothing (top to bottom), footwear, and any distinguishing features such as tattoos, scars, or glasses.

Question 19: What should a security guard do at the start of their shift?

Start a patrol immediately
Check in, review the incident log, receive a briefing from the outgoing guard, and check all equipment (Correct answer)
Go straight to the canteen
Wait for specific instructions from the client

Correct answer: Check in, review the incident log, receive a briefing from the outgoing guard, and check all equipment

At shift start, the guard should: sign in, receive a handover briefing from the outgoing guard, review the incident log for ongoing issues, check all equipment (radio, keys, torch, phone), and note any immediate concerns.

Question 20: What are the three categories of access control measures?

Simple, medium, and complex
Physical, electronic, and procedural (Correct answer)
Cheap, moderate, and expensive
Permanent, temporary, and emergency

Correct answer: Physical, electronic, and procedural

Access control uses three categories: Physical (locks, barriers, fences), Electronic (card readers, biometrics, keypads), and Procedural (visitor policies, sign-in procedures, escort requirements).

Question 21: What is the purpose of a 'site assignment instructions' document provided to a security guard at the start of a new posting?

A contract between the security company and the client
A document granting the security guard legal powers at the specific site
A document providing all the information and procedures the security guard needs for that specific location — including site-specific rules, emergency procedures, contact numbers, access control arrangements, and reporting requirements (Correct answer)
A list of the security guard's personal rights at the site

Correct answer: A document providing all the information and procedures the security guard needs for that specific location — including site-specific rules, emergency procedures, contact numbers, access control arrangements, and reporting requirements

Site assignment instructions (also called post instructions or assignment instructions) contain all the site-specific information a guard needs: the client's requirements, emergency procedures, key contact numbers, access control rules, patrol routes, and reporting procedures. They are the operational guide for that particular posting.

Question 22: What is the 'five Ws' approach to gathering information about a security incident?

Width, Weight, Wound, Warrant, Witness
Walk, Watch, Wait, Warn, Write
Witness, Weapon, Weather, Warning, Written
Who, What, Where, When, Why (Correct answer)

Correct answer: Who, What, Where, When, Why

The five Ws — Who, What, Where, When, Why (and sometimes How) — provide a structured approach to gathering and recording all essential information about a security incident.

Question 23: What is 'social engineering' in the context of access control?

Designing social spaces in buildings
A type of civil engineering
Building social housing
Manipulating people through deception to gain unauthorised access — such as pretending to be a contractor or authority figure (Correct answer)

Correct answer: Manipulating people through deception to gain unauthorised access — such as pretending to be a contractor or authority figure

Social engineering exploits human psychology rather than technical vulnerabilities. Examples include impersonating contractors, pretending to be from IT support, or creating a fake emergency to bypass security procedures.

Question 24: What is 'lone working' and what risks does it present for security guards?

Working for only one security company
Working with only one client
Working alone without direct supervision, which presents risks including confrontation, medical emergencies, and delayed assistance (Correct answer)
Working on a single-storey building

Correct answer: Working alone without direct supervision, which presents risks including confrontation, medical emergencies, and delayed assistance

Lone working means working alone without colleagues nearby. Risks include: confrontation without backup, medical emergencies with no one to help, vulnerability to attack, and delayed response from emergency services.

Question 25: What is a 'guard tour system' and what is its purpose?

An electronic system that records when and where a guard has patrolled, providing proof that checks have been completed (Correct answer)
A guard's personal fitness tracker
A GPS navigation device for mobile patrols
A tourism guide for security guards

Correct answer: An electronic system that records when and where a guard has patrolled, providing proof that checks have been completed

A guard tour system uses checkpoints (electronic tags, QR codes, or NFC points) placed around the site that the guard scans during patrols. It creates an audit trail proving patrols were completed at the correct times.

Question 26: What are the four strands of the UK government's counter-terrorism strategy known as CONTEST?

Identify, Monitor, Intercept, Respond
Detect, Deter, Delay, Deny
Prevent, Pursue, Protect, Prepare (Correct answer)
Police, Patrol, Prosecute, Preserve

Correct answer: Prevent, Pursue, Protect, Prepare

CONTEST consists of four pillars: Prevent (stop radicalisation), Pursue (stop attacks in progress), Protect (strengthen protection), and Prepare (mitigate the impact of attacks).

Question 27: Why should a security guard vary their patrol times and routes?

To avoid boredom
To prevent potential offenders from predicting their movements and exploiting gaps in coverage (Correct answer)
To explore different parts of the building
To find shorter routes

Correct answer: To prevent potential offenders from predicting their movements and exploiting gaps in coverage

Varying patrol times and routes makes the guard's movements unpredictable, preventing potential offenders from timing their activities to avoid detection.

Question 28: What is a 'daily occurrence book' (DOB) in security?

A chronological log recording all events, activities, and incidents during a security shift (Correct answer)
A book for recording weather conditions
A staff attendance register
A diary for personal appointments

Correct answer: A chronological log recording all events, activities, and incidents during a security shift

The DOB (also called an occurrence book or security log) is a chronological record of everything that happens during a shift — patrols, incidents, visitors, deliveries, equipment checks, alarm activations, and handover notes.

Question 29: What is 'vicarious liability' and how does it relate to security companies?

When a client is liable for the security guard's actions
When a guard is liable for their colleague's mistakes
When an employer is held legally responsible for the actions of their employees carried out during the course of their employment (Correct answer)
When the police are liable for security incidents

Correct answer: When an employer is held legally responsible for the actions of their employees carried out during the course of their employment

Vicarious liability means an employer can be held legally responsible for wrongful actions committed by their employees during the course of employment. This is why security companies must train, supervise, and manage their staff properly.

Question 30: What key information should be included in a security incident report?

Date, time, location, persons involved, description of the incident, actions taken, witnesses, and the outcome (Correct answer)
Only information the police request
Only the guard's opinion of what happened
Just the name of the person responsible

Correct answer: Date, time, location, persons involved, description of the incident, actions taken, witnesses, and the outcome

A comprehensive incident report includes: date, time, location, persons involved (descriptions if names unknown), factual account of what happened, actions taken, use of force (if any), witnesses, evidence preserved, and the outcome.

Question 31: Which organisation is primarily responsible for counter-terrorism investigations within the United Kingdom?

GCHQ
MI6 (Secret Intelligence Service)
MI5 (Security Service) (Correct answer)
The Metropolitan Police Diplomatic Protection Group

Correct answer: MI5 (Security Service)

MI5, the Security Service, is the UK's domestic counter-intelligence and security agency and is primarily responsible for counter-terrorism operations within the UK.

Question 32: What is the difference between 'static' and 'mobile' security patrols?

There is no difference
Static guards stand still; mobile guards walk
Static guards work days; mobile guards work nights
Static guards remain at one location; mobile patrols travel between multiple sites in a vehicle (Correct answer)

Correct answer: Static guards remain at one location; mobile patrols travel between multiple sites in a vehicle

Static guards are assigned to one location for their shift, maintaining a continuous presence. Mobile patrols travel between multiple locations in a vehicle, making scheduled or random checks at each site.

Question 33: In a suspected medical emergency where a person has collapsed and appears unconscious, what is the first action a security guard should take?

Place the person in the recovery position immediately
Administer any medication found in the person's pockets
Begin CPR immediately
Ensure the area is safe, then check for responsiveness (call out and tap shoulders), call for help and alert emergency services (999), then assess airway and breathing (Correct answer)

Correct answer: Ensure the area is safe, then check for responsiveness (call out and tap shoulders), call for help and alert emergency services (999), then assess airway and breathing

The correct sequence is: check the area is safe (danger), check for responsiveness, shout for help and call 999, open the airway and check for breathing, and then begin CPR if not breathing normally. Acting on an unsafe scene risks the guard also becoming a casualty.

Question 34: What is the difference between a 'statement' and an 'incident report'?

A statement is always handwritten
There is no difference
An incident report is an internal record for the company; a statement is a formal document for police or legal proceedings (Correct answer)
An incident report is longer

Correct answer: An incident report is an internal record for the company; a statement is a formal document for police or legal proceedings

An incident report is an internal document used by the security company and client. A statement (or witness statement) is a formal legal document, usually made for the police, that may be used as evidence in court.

Question 35: What should a security guard do if they encounter an intruder on site?

Chase and physically restrain them
Ask them politely to leave and then forget about it
Ignore them if they are not causing damage
Observe from a safe distance, note their description, do not confront, call the police, and report to the control room (Correct answer)

Correct answer: Observe from a safe distance, note their description, do not confront, call the police, and report to the control room

Personal safety is paramount. Observe the intruder from a safe distance, note their description, direction of travel, and any vehicle details. Do not confront them — call the police and report to the control room.

Question 36: When undertaking an access control role, what is the purpose of checking identification documents before granting entry to a restricted area?

To demonstrate to CCTV cameras that procedures are being followed
To verify that the person seeking entry is who they claim to be, is authorised to enter, and does not present a security risk — protecting the premises, its occupants, and any assets within (Correct answer)
To satisfy an administrative requirement with no real security function
To collect personal data for marketing purposes

Correct answer: To verify that the person seeking entry is who they claim to be, is authorised to enter, and does not present a security risk — protecting the premises, its occupants, and any assets within

Access control through ID checking verifies identity and authorisation, prevents unauthorised entry, deters tailgating, protects assets and occupants, and creates a record of who has accessed the premises — all core security objectives.

Question 37: What is an 'assignment instruction' in security guarding?

A document detailing the specific duties, procedures, and post orders for a particular security site (Correct answer)
A job application form
A disciplinary notice
A training manual for new guards

Correct answer: A document detailing the specific duties, procedures, and post orders for a particular security site

Assignment instructions (also called post orders) are site-specific documents that detail the security guard's duties, responsibilities, patrol routes, emergency procedures, key contacts, and site-specific information.

Question 38: What should a security guard do when a delivery driver arrives at a controlled access point?

Let them find their own way around
Wave them through immediately
Verify their identity, check the delivery is expected, log their details, issue a temporary pass, and direct them to the correct delivery point (Correct answer)
Refuse all deliveries

Correct answer: Verify their identity, check the delivery is expected, log their details, issue a temporary pass, and direct them to the correct delivery point

The guard should verify the driver's identity and the delivery details, check with the relevant person that the delivery is expected, log the driver's details, issue a temporary pass, and direct them to the correct delivery area.

Question 39: What makes a security report admissible as evidence in court?

Being long and detailed
Being typed on official paper
Being signed by a solicitor
Being factual, contemporaneous, legible, objective, and made by the person who witnessed the events (Correct answer)

Correct answer: Being factual, contemporaneous, legible, objective, and made by the person who witnessed the events

For a report to be admissible as evidence, it should be: factual (not opinion), made contemporaneously (at the time), legible, objective, written by the person who witnessed the events, and free from alterations or corrections that could suggest tampering.

Question 40: When writing a report, should a security guard include their personal opinions?

Yes — but only if they are negative
No — reports should contain only factual, objective observations and not personal opinions or assumptions (Correct answer)
Only if the client requests it
Yes — their opinion is the most important part

Correct answer: No — reports should contain only factual, objective observations and not personal opinions or assumptions

Reports must be factual and objective. Write what you saw, heard, and did — not what you think happened or why. Personal opinions, assumptions, and conclusions can undermine the report's credibility in court.

Question 41: What is the most important action for a security officer after safely evacuating an area following a bomb threat?

Re-enter the building to conduct a thorough search for the device themselves
Contact their supervisor and await instructions from the police (Correct answer)
Begin searching the car park independently for suspicious vehicles
Inform members of the public of the exact nature and location of the threat

Correct answer: Contact their supervisor and await instructions from the police

After evacuation, security officers must liaise with their supervisor and await police instructions, as only trained bomb disposal experts should search for or approach explosive devices.

Question 42: What is a 'mantrap' or 'airlock' entry system?

An emergency exit mechanism
A ventilation system for cleanrooms
A two-door entry system where the first door must close before the second will open, preventing tailgating (Correct answer)
A trap for catching intruders

Correct answer: A two-door entry system where the first door must close before the second will open, preventing tailgating

A mantrap (or airlock) uses two interlocking doors — the first must close completely before the second will open. Only one person can enter the space between doors, effectively preventing tailgating.

Question 43: Why is accurate report writing important for security guards?

Only to satisfy the client
To improve their English skills
Reports may be used as evidence in court, for insurance claims, internal investigations, and to demonstrate due diligence (Correct answer)
To fill time during quiet periods

Correct answer: Reports may be used as evidence in court, for insurance claims, internal investigations, and to demonstrate due diligence

Security reports may be used as legal evidence, form the basis of insurance claims, support internal investigations, demonstrate compliance with procedures, and provide a historical record of incidents.

Question 44: What is the correct approach to correcting a mistake in a handwritten security report?

Draw a single line through the error, write the correction nearby, initial and date the amendment (Correct answer)
Tear out the page and rewrite it
Use correction fluid (white-out) to cover the mistake
Scribble over the mistake until it is unreadable

Correct answer: Draw a single line through the error, write the correction nearby, initial and date the amendment

Draw a single line through the error (so the original text remains readable), write the correction clearly nearby, and initial and date the amendment. This maintains the integrity of the document.

SIA Security Guard Exam

The SIA Security Guard Exam is the licensing test for security personnel in the UK, assessing knowledge of security procedures, access control, report writing, and fire safety as required by the Security Industry Authority.

Questions

75 min

Time Limit

74%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds