Safety and Security Practitioner (SSP) Certification — Questions and Answers

Question 1: What does the term 'means of egress' include according to NFPA 101?

Only the exit doors
The exit access, exit, and exit discharge (Correct answer)
Only the exit stairwells
The exit access and exit only

Correct answer: The exit access, exit, and exit discharge

NFPA 101 defines means of egress as a continuous and unobstructed path consisting of three parts: exit access, exit, and exit discharge.

Question 2: Which OSHA recordkeeping form is used to record the summary of work-related injuries and illnesses that must be posted annually?

OSHA Form 300
OSHA Form 302
OSHA Form 301
OSHA Form 300A (Correct answer)

Correct answer: OSHA Form 300A

OSHA Form 300A is the Summary of Work-Related Injuries and Illnesses that must be posted from February 1 through April 30 each year.

Question 3: When a SSP professional encounters an unfamiliar challenge in business continuity & resilience, what is the recommended first course of action?

Postpone addressing the issue indefinitely
Proceed based on personal intuition alone
Research applicable standards, consult with subject matter experts, and document the approach (Correct answer)
Apply the solution used for the most recent similar problem without adaptation

Correct answer: Research applicable standards, consult with subject matter experts, and document the approach

Professional practice requires a methodical approach to unfamiliar challenges: research the applicable standards, consult experts when needed, and document the reasoning for the chosen approach.

Question 4: A quantitative risk analysis produces a probability distribution of possible losses. What does the 95th percentile value on this distribution represent?

Controls must reduce losses to below this value to be considered effective
95% of past incidents caused losses above this value
The organization will definitely experience this loss in 95 out of 100 years
There is a 5% chance that losses will exceed this value in a given period (Correct answer)

Correct answer: There is a 5% chance that losses will exceed this value in a given period

The 95th percentile means there is a 5% probability that losses will exceed that threshold, commonly used to set worst-case planning budgets.

Question 5: The Sarbanes-Oxley Act (SOX) impacts corporate security practitioners primarily through requirements related to:

International export controls
Employee health and safety programs
Protection and integrity of financial records and audit trails (Correct answer)
Physical access control to retail locations

Correct answer: Protection and integrity of financial records and audit trails

SOX Section 802 requires companies to maintain accurate financial records and imposes criminal penalties for destruction or falsification, directly impacting records security.

Question 6: A security officer uses physical force to detain a shoplifter beyond what was necessary after the threat was neutralized. This may constitute:

A protected action under sovereign immunity
Justifiable use of force under merchant privilege
Standard procedure under security protocols
Excessive force, potentially exposing the officer to civil and criminal liability (Correct answer)

Correct answer: Excessive force, potentially exposing the officer to civil and criminal liability

Force used beyond what is necessary to control a situation constitutes excessive force, which can result in civil liability and criminal charges.

Question 7: What is a risk mitigation strategy?

Reducing or eliminating risks (Correct answer)
Increasing risks
Ignoring hazards
Reporting accidents

Correct answer: Reducing or eliminating risks

A risk mitigation strategy involves implementing specific actions or controls designed to reduce the likelihood of a risk occurring or to lessen the severity of its impact if it does. The ultimate goal is to either diminish the risk to an acceptable level or, ideally, eliminate it entirely.

Question 8: Under MTSA, a 'Maritime Security Level 3' designation indicates what threat condition?

A heightened risk, requiring additional targeted security measures
An imminent or probable threat requiring the most stringent security measures (Correct answer)
No specific threat identified, minimum security measures in effect
A post-incident recovery phase with restored normal operations

Correct answer: An imminent or probable threat requiring the most stringent security measures

MARSEC Level 3 indicates an imminent or probable threat requiring the most stringent security measures, including possible facility closure.

Question 9: Under OSHA's Bloodborne Pathogens Standard, which practice is the PRIMARY method for preventing occupational exposure to HIV and HBV?

Double-gloving for all tasks
Annual hepatitis B vaccination
Post-exposure prophylaxis
Universal Precautions (Correct answer)

Correct answer: Universal Precautions

Universal Precautions treat all human blood and certain body fluids as if infectious, forming the primary prevention strategy under 29 CFR 1910.1030.

Question 10: Which element is a mandatory component of a Vessel Security Plan (VSP) under MTSA?

Security drills and exercises schedule (Correct answer)
Revenue reporting procedures
Crew uniform specifications
Vessel maintenance logs

Correct answer: Security drills and exercises schedule

MTSA-regulated vessels must include drills, exercises, and training schedules in their Vessel Security Plans to ensure readiness.

Question 11: Which scenario represents a violation of the principle of 'geographic separation' in resilience planning?

Hot site and primary office share the same power grid substation (Correct answer)
Cloud backup stored in a different region than production
Primary and backup data centers located 500 miles apart
Alternate operations center in a different state

Correct answer: Hot site and primary office share the same power grid substation

Sharing a power grid substation means both facilities are vulnerable to the same single point of failure, violating true geographic separation.

Question 12: During an investigation, an investigator discovers that a key witness has a personal financial interest in the outcome. This represents which investigative challenge?

Spoliation of evidence
Hearsay contamination
Witness bias or conflict of interest (Correct answer)
Chain of custody breach

Correct answer: Witness bias or conflict of interest

A witness with a personal financial stake in the outcome presents a bias or conflict of interest that must be documented and considered when weighing testimony.

Question 13: What is the importance of emergency preparedness in security?

Delay reactions
Reduce staff
Ignore emergencies
Quick response and damage control (Correct answer)

Correct answer: Quick response and damage control

Emergency preparedness in security is paramount for enabling a rapid and organized response to critical incidents, thereby minimizing potential harm and controlling damage. It ensures that personnel are trained, resources are available, and plans are in place to mitigate the impact of emergencies effectively.

Question 14: Which regulation requires facilities handling hazardous chemicals above threshold quantities to submit emergency response plans to local authorities?

RCRA Subtitle C
CERCLA Section 103
Clean Air Act Section 112(r)
EPCRA Title III (SARA) (Correct answer)

Correct answer: EPCRA Title III (SARA)

EPCRA Title III (Emergency Planning and Community Right-to-Know Act, part of SARA) requires facilities with hazardous chemicals above threshold quantities to coordinate emergency response planning with Local Emergency Planning Committees.

Question 15: A retail company's BCP includes a workaround for processing sales transactions manually when the POS system fails. This workaround is an example of:

A cold site recovery option
A manual fallback or degraded mode procedure (Correct answer)
A compensating control for PCI-DSS compliance
A risk acceptance strategy

Correct answer: A manual fallback or degraded mode procedure

Manual fallback procedures allow essential operations to continue in a degraded capacity when automated systems are unavailable.

Question 16: Which of the following best describes the 'hierarchy of controls' for occupational health hazards, listed from most to least effective?

Administrative → Engineering → PPE → Substitution → Elimination
Substitution → PPE → Administrative → Engineering → Elimination
Elimination → Substitution → Engineering controls → Administrative controls → PPE (Correct answer)
PPE → Administrative → Engineering → Substitution → Elimination

Correct answer: Elimination → Substitution → Engineering controls → Administrative controls → PPE

The hierarchy of controls ranks from most to least effective: Elimination, Substitution, Engineering controls, Administrative controls, and PPE — with PPE as the last resort.

Question 17: Which action should HR FIRST take after an employee reports that a coworker made a veiled threat?

Wait to see if additional incidents occur before escalating
Advise the reporting employee to avoid the coworker
Immediately terminate the threatening employee
Document the report and notify the Threat Assessment Team (Correct answer)

Correct answer: Document the report and notify the Threat Assessment Team

The first step is to document the report and refer it to the TAT for structured evaluation rather than acting unilaterally.

Question 18: What is the primary purpose of an Alternate Operating Facility (AOF) in a continuity of operations plan?

To permanently replace the primary facility after a disaster
To house non-essential staff during normal operations
To provide a pre-identified location from which essential functions can be performed during a disruption (Correct answer)
To store off-site backups and archival data

Correct answer: To provide a pre-identified location from which essential functions can be performed during a disruption

An AOF is a designated backup location where critical personnel and functions can operate when the primary facility is unavailable.

Question 19: What role does continuous improvement play in transportation security standards for SSP certified professionals?

It focuses exclusively on cost reduction
It is optional and only necessary during certification renewal
It drives ongoing enhancement of practices, processes, and outcomes through systematic evaluation (Correct answer)
It applies only to new professionals in their first year

Correct answer: It drives ongoing enhancement of practices, processes, and outcomes through systematic evaluation

Continuous improvement is fundamental to professional practice in transportation security standards, involving regular evaluation, feedback integration, and process enhancement to maintain high standards.

Question 20: Which act requires federal agencies and contractors to implement minimum security standards for information systems?

Computer Fraud and Abuse Act (CFAA)
Gramm-Leach-Bliley Act
Electronic Communications Privacy Act
Federal Information Security Modernization Act (FISMA) (Correct answer)

Correct answer: Federal Information Security Modernization Act (FISMA)

FISMA requires federal agencies and their contractors to develop, document, and implement security programs to protect federal information systems.

Question 21: Under CERCLA (Superfund), which parties can be held liable for cleanup costs at a contaminated site?

Only parties who violated a specific permit condition
Only the party that originally deposited hazardous substances at the site
Current owners, past owners at the time of disposal, generators, and transporters who arranged for disposal (Correct answer)
Only parties with more than 50% ownership interest in the facility

Correct answer: Current owners, past owners at the time of disposal, generators, and transporters who arranged for disposal

CERCLA imposes strict, joint, and several liability on four classes of potentially responsible parties: current owners/operators, past owners/operators, generators, and transporters.

Question 22: What is the primary function of a video analytics system integrated with CCTV?

Automatically analyze video to detect specific events or behaviors without constant human monitoring (Correct answer)
Synchronize camera timestamps across a network
Compress video footage for long-term archival storage
Convert analog camera signals to IP-based streams

Correct answer: Automatically analyze video to detect specific events or behaviors without constant human monitoring

Video analytics software processes camera feeds in real time to automatically detect defined events—loitering, perimeter breach, abandoned objects—reducing reliance on continuous human monitoring.

Question 23: What role does continuous improvement play in security technology & systems for SSP certified professionals?

It focuses exclusively on cost reduction
It drives ongoing enhancement of practices, processes, and outcomes through systematic evaluation (Correct answer)
It applies only to new professionals in their first year
It is optional and only necessary during certification renewal

Correct answer: It drives ongoing enhancement of practices, processes, and outcomes through systematic evaluation

Continuous improvement is fundamental to professional practice in security technology & systems, involving regular evaluation, feedback integration, and process enhancement to maintain high standards.

Question 24: Why is confidentiality important in security?

Speeds up investigations
Increases transparency
Avoids paperwork
Protects information and trust (Correct answer)

Correct answer: Protects information and trust

Confidentiality in security is paramount for safeguarding sensitive information, whether it pertains to individuals, operations, or proprietary data. Upholding confidentiality builds and maintains trust with clients, employees, and stakeholders, assuring them that their information will not be misused or disclosed inappropriately. Breaches of confidentiality can lead to severe legal, financial, and reputational damage, eroding trust and compromising security posture.

Question 25: Which factor MOST directly influences the time needed to restore operations after a disaster, according to business continuity principles?

The Recovery Time Objective (RTO) established during the Business Impact Analysis (Correct answer)
The age of the organization's physical infrastructure
The total number of employees affected by the disaster
The geographic distance from the disaster area to the recovery site

Correct answer: The Recovery Time Objective (RTO) established during the Business Impact Analysis

The RTO, set during a Business Impact Analysis, defines the maximum tolerable downtime and directly drives recovery resource allocation and timeline.

Question 26: What security principle does 'defense in depth' apply when designing physical security systems?

Layering multiple independent security controls so that defeating one does not compromise the whole system (Correct answer)
Using one highly reliable system instead of many redundant ones
Prioritizing digital over physical security measures
Placing all security resources at the outermost perimeter

Correct answer: Layering multiple independent security controls so that defeating one does not compromise the whole system

Defense in depth uses multiple, overlapping security layers (fencing, lighting, cameras, access control, guards) so an adversary must overcome each layer independently.

Question 27: What is the purpose of a 'security survey' conducted at a facility?

To survey employees about their job satisfaction
To systematically identify vulnerabilities, threats, and the adequacy of existing countermeasures (Correct answer)
To measure response times of local law enforcement
To audit financial records for fraud detection

Correct answer: To systematically identify vulnerabilities, threats, and the adequacy of existing countermeasures

A security survey is a comprehensive assessment that identifies gaps between current security posture and the protection needed.

Question 28: In video surveillance design, the 'identification' image quality standard typically requires a camera to capture how many pixels across a human face?

25 pixels
250 pixels
80–100 pixels (Correct answer)
500+ pixels

Correct answer: 80–100 pixels

Industry standards (e.g., ONVIF, EN 62676) classify 'identification' quality as approximately 80–100 pixels across the face, sufficient to recognize a known individual.

Question 29: Which document type outlines the specific mission, objectives, and resource assignments for a single operational period during an incident?

Hazard Mitigation Plan (HMP)
Emergency Operations Plan (EOP)
Continuity of Operations Plan (COOP)
Incident Action Plan (IAP) (Correct answer)

Correct answer: Incident Action Plan (IAP)

An IAP is developed for each operational period and provides tactical direction, objectives, and resource assignments for that specific timeframe.

Question 30: In the context of SSP certification, what is the most important consideration when implementing regulatory investigation & response?

Ensuring alignment with established standards, stakeholder needs, and best practices (Correct answer)
Delegating all responsibilities to junior staff
Completing implementation as quickly as possible regardless of quality
Minimizing documentation to save time

Correct answer: Ensuring alignment with established standards, stakeholder needs, and best practices

When implementing regulatory investigation & response, SSP professionals must ensure alignment with industry standards and stakeholder needs. Hasty implementation without proper planning often leads to compliance issues and suboptimal outcomes.

Question 31: What is a 'duress code' in the context of access control or alarm systems?

A one-time code issued after a credential is lost or stolen
A secondary PIN that silently alerts a monitoring station that the user is under coercion (Correct answer)
A master override code used by security administrators only
An emergency code that locks down all access points immediately

Correct answer: A secondary PIN that silently alerts a monitoring station that the user is under coercion

A duress code looks like a normal entry PIN but secretly triggers a silent alarm to notify security personnel that the user is being forced to grant access.

Question 32: How should conflicts of interest be handled?

Exploit
Disclose and avoid conflicts (Correct answer)
Ignore
Conceal

Correct answer: Disclose and avoid conflicts

Conflicts of interest arise when an individual's personal interests or relationships could potentially influence their professional judgment or actions in a way that benefits them personally or a third party, rather than the organization. The proper handling involves transparently disclosing any potential conflict to relevant parties and taking steps to avoid or mitigate the conflict, such as recusing oneself from decisions. This ensures impartiality, maintains trust, and upholds ethical standards.

Question 33: The principle of 'proportionality' in use-of-force policy requires that:

Equal force must be applied to all individuals regardless of context
The level of force used must be appropriate to the level of threat faced (Correct answer)
Force must always match exactly what was used against the officer
Force may be escalated preemptively to deter resistance

Correct answer: The level of force used must be appropriate to the level of threat faced

Proportionality requires that the force applied be commensurate with the threat posed, neither insufficient nor excessive.

Question 34: What is the primary purpose of OSHA's Voluntary Protection Programs (VPP)?

To create a self-reporting pathway in lieu of paying penalties
To allow employers to opt out of OSHA inspections permanently
To recognize employers with exemplary safety and health management systems that go beyond regulatory compliance (Correct answer)
To exempt small businesses from General Duty Clause requirements

Correct answer: To recognize employers with exemplary safety and health management systems that go beyond regulatory compliance

VPP recognizes employers who demonstrate exemplary safety programs exceeding OSHA requirements; VPP participants are generally exempt from programmed inspections but not all inspections.

Question 35: Which of the following best describes a key competency required for business continuity & resilience in SSP practice?

Memorization of all relevant regulations without understanding context
The ability to work independently without any oversight
Reliance on a single methodology for all situations
Strong analytical skills combined with effective communication and ethical judgment (Correct answer)

Correct answer: Strong analytical skills combined with effective communication and ethical judgment

SSP professionals working in business continuity & resilience need analytical skills to assess situations, communication skills to convey findings, and ethical judgment to make sound decisions.

Question 36: Which type of ventilation system is preferred for controlling airborne contaminants at their point of generation?

Recirculating HVAC
General dilution ventilation
Local exhaust ventilation (LEV) (Correct answer)
Makeup air systems

Correct answer: Local exhaust ventilation (LEV)

Local exhaust ventilation captures contaminants at the source before they disperse into the work environment, making it more effective than dilution ventilation.

Question 37: Under the Aviation and Transportation Security Act (ATSA), who is the primary federal authority responsible for civil aviation security?

DHS Office of Intelligence
TSA (Correct answer)
FBI
FAA

Correct answer: TSA

ATSA, enacted in 2001, created TSA and designated it as the primary federal authority for civil aviation security.

Question 38: A Passive Infrared (PIR) motion detector is most likely to produce a false alarm when:

An HVAC vent changes room temperature rapidly (Correct answer)
A person walks across its field of view
Battery backup power activates
The protected area is completely dark

Correct answer: An HVAC vent changes room temperature rapidly

PIR sensors detect changes in infrared energy; sudden temperature shifts from HVAC vents can mimic a human body signature and trigger false alarms.

Question 39: Which metric defines the maximum tolerable period that a system can be offline before causing unacceptable business impact?

Maximum Tolerable Downtime (MTD) (Correct answer)
Mean Time to Recovery (MTTR)
Recovery Point Objective (RPO)
Recovery Time Objective (RTO)

Correct answer: Maximum Tolerable Downtime (MTD)

Maximum Tolerable Downtime (MTD) is the longest period an organization can survive without a critical function before the impact becomes unacceptable.

Question 40: Under the Toxic Substances Control Act (TSCA), EPA has authority to:

Regulate chemical substances and mixtures for unreasonable risk to health or environment (Correct answer)
Manage the storage of hazardous waste at TSDFs
Set occupational exposure limits for chemical hazards
Regulate pesticides and their application

Correct answer: Regulate chemical substances and mixtures for unreasonable risk to health or environment

TSCA authorizes EPA to require reporting, record-keeping, and testing of chemical substances and mixtures, and to restrict those that pose unreasonable risks to health or the environment.

Question 41: What is the primary purpose of biological monitoring in occupational health?

To determine if PPE is functioning within manufacturer specifications
To measure airborne contaminant concentrations at breathing zone level
To comply with OSHA injury and illness recordkeeping requirements
To assess the total internal dose of a chemical absorbed by a worker from all routes of exposure (Correct answer)

Correct answer: To assess the total internal dose of a chemical absorbed by a worker from all routes of exposure

Biological monitoring measures chemical agents or their metabolites in biological specimens (blood, urine) to assess total absorbed dose from all exposure routes.

Question 42: A security professional overhears a conversation suggesting an imminent threat of workplace violence. Their primary obligation is to:

Confront the individual directly to assess the threat personally
Keep it confidential as it was an overheard conversation
Immediately report the threat to appropriate authorities (Correct answer)
Document the incident and review it at the next weekly meeting

Correct answer: Immediately report the threat to appropriate authorities

Imminent threats of violence must be immediately reported to appropriate authorities to fulfill the duty to warn and prevent harm.

Question 43: Under NFPA 101 Life Safety Code, what is the maximum travel distance to an exit in a business occupancy with sprinklers?

200 feet
300 feet (Correct answer)
100 feet
400 feet

Correct answer: 300 feet

NFPA 101 permits a 300-foot maximum travel distance to an exit in a sprinklered business occupancy, compared to 200 feet without sprinklers.

Question 44: A facility's emergency plan should include a personnel accountability system primarily to:

Track employees' overtime hours during a response
Log the names of responders entering the building
Document property losses during an incident
Confirm all occupants are safely evacuated or accounted for (Correct answer)

Correct answer: Confirm all occupants are safely evacuated or accounted for

Personnel accountability ensures that all persons are confirmed safe or their status is known, which is a life-safety priority during any emergency.

Question 45: Which type of barrier is designed to stop a vehicle weighing 15,000 lbs traveling at 50 mph and is rated K-12?

A cable barrier rated for pedestrian control
A crash-rated bollard meeting ASTM F2656 K12 standard (Correct answer)
A chain-link fence with barbed wire topping
A standard concrete jersey barrier

Correct answer: A crash-rated bollard meeting ASTM F2656 K12 standard

The ASTM F2656 (formerly DOS/SD-STD-02.01) K-12 rating certifies vehicle barriers to stop a 15,000 lb vehicle at 50 mph with minimal penetration.

Question 46: Which element is MOST critical when developing an Emergency Action Plan (EAP) for a multi-story commercial building?

Installing additional security cameras on each floor
Designating assembly areas and evacuation routes for each floor (Correct answer)
Purchasing new fire suppression equipment
Scheduling monthly drills without prior notice

Correct answer: Designating assembly areas and evacuation routes for each floor

An EAP must include clearly designated assembly areas and evacuation routes for each floor to ensure orderly egress during emergencies.

Question 47: When interviewing a potential whistleblower during a regulatory investigation, investigators should prioritize which approach?

Discourage the whistleblower from legal representation to streamline the interview
Protect the whistleblower's identity to the extent permitted by law and document their account thoroughly (Correct answer)
Require the whistleblower to submit a sworn affidavit before any discussion occurs
Immediately confirm the whistleblower's identity to the employer for verification

Correct answer: Protect the whistleblower's identity to the extent permitted by law and document their account thoroughly

Whistleblower protection laws under OSH Act Section 11(c) and other statutes require investigators to protect the identity of reporting individuals to prevent retaliation.

Question 48: What is the purpose of a 'hot zone' designation during a hazmat incident?

To mark where decontamination stations are located
To restrict access to the area of highest contamination risk (Correct answer)
To designate the command post location
To identify the safest staging area for responders

Correct answer: To restrict access to the area of highest contamination risk

The hot zone (exclusion zone) is the area of highest contamination where only properly equipped responders may enter.

Question 49: Which stakeholder group is MOST critical to include during the initial Business Impact Analysis (BIA) interview process?

Process owners and department managers who understand operational dependencies (Correct answer)
IT security staff responsible for system hardening
Public relations staff who manage communications
External auditors who assess compliance frameworks

Correct answer: Process owners and department managers who understand operational dependencies

Process owners and department managers have direct knowledge of which functions are critical, their interdependencies, and the impact of their loss.

Question 50: A Continuity of Operations Plan (COOP) differs from a Business Continuity Plan (BCP) primarily because COOP:

Is required exclusively for private sector organizations
Focuses on maintaining government essential functions during a disruption (Correct answer)
Prioritizes restoring IT systems within 24 hours
Covers only natural disaster scenarios

Correct answer: Focuses on maintaining government essential functions during a disruption

COOP is a government-sector framework focused on sustaining essential mission functions, while BCP is more broadly used in the private sector.

Question 51: A pre-action sprinkler system requires what combination of events before water is discharged?

Fire detection system activation only
Manual pull station activation
Both fire detection activation AND sprinkler head activation (Correct answer)
Sprinkler head activation only

Correct answer: Both fire detection activation AND sprinkler head activation

Pre-action systems require two events — detection system activation to open the valve and individual sprinkler head activation from heat — reducing the risk of accidental discharge.

Question 52: Which biometric technology measures the unique pattern of blood vessels in the human eye?

Iris recognition
Vascular mapping
Facial recognition
Retinal scan (Correct answer)

Correct answer: Retinal scan

Retinal scanning captures the unique pattern of blood vessels at the back of the eye, distinct from iris recognition which reads the colored ring around the pupil.

Question 53: The concept of 'targeted violence' differs from other workplace violence because it is characterized by:

Violence committed exclusively by outsiders
Random attacks with no identifiable motive
Spontaneous and impulsive actions with no prior planning
A deliberate process in which the attacker selects a specific victim (Correct answer)

Correct answer: A deliberate process in which the attacker selects a specific victim

Targeted violence is planned and purposeful — the attacker identifies a specific target and follows a pathway toward violence.

Question 54: In electronic security, what does 'REX' stand for?

Radio-Encrypted Transmission — a secure wireless standard
Remote Exit — a sensor or button that signals a controlled door to unlock for egress (Correct answer)
Redundant Entry Exchange — a failover access control protocol
Remote Equipment Xchange — a cloud management platform

Correct answer: Remote Exit — a sensor or button that signals a controlled door to unlock for egress

REX (Request to Exit) devices—motion sensors or push buttons—detect when someone approaches a door from the secured side and signal the access controller to release the lock for safe egress.

Question 55: Which investigative technique involves reviewing payroll, purchasing, and access records to establish a timeline of events?

Physical evidence mapping
Witness credibility assessment
Document trail reconstruction (Correct answer)
Behavioral analysis

Correct answer: Document trail reconstruction

Document trail reconstruction uses financial and administrative records to build a chronological sequence of events during an investigation.

Question 56: An OSHA compliance officer requests to conduct an inspection without advance notice. What authority does OSHA have in this situation?

OSHA must provide 72 hours advance notice for all inspections
OSHA requires a court order for any workplace entry
OSHA can only inspect during non-operational hours
OSHA can conduct warrantless inspections of regulated workplaces with probable cause or voluntary consent (Correct answer)

Correct answer: OSHA can conduct warrantless inspections of regulated workplaces with probable cause or voluntary consent

Under Marshall v. Barlow's Inc., OSHA must obtain a warrant if consent is refused, but consent-based or probable-cause warrantless inspections are permitted.

Question 57: What does 'OSDP' stand for and what is its security relevance?

Object Sensor Data Platform — an IoT security integration standard
Open Supervised Device Protocol — a secure, bidirectional communication standard for access control readers (Correct answer)
On-Site Detection Protocol — a perimeter alarm standard
Operational Security Defense Policy — a facility security framework

Correct answer: Open Supervised Device Protocol — a secure, bidirectional communication standard for access control readers

OSDP (Open Supervised Device Protocol) is an access control communication standard that supports AES-128 encryption and bidirectional supervision between readers and controllers.

Question 58: Which door hardware standard classifies electrified locks and strikes used in access control integration?

ANSI/BHMA A156.25 (Correct answer)
UL 294
NFPA 72
IEC 60839

Correct answer: ANSI/BHMA A156.25

ANSI/BHMA A156.25 covers electrified door hardware including electric strikes and electromagnetic locks used with access control systems.

Question 59: Under GDPR, what is the maximum timeframe to notify supervisory authorities of a personal data breach that poses risk to individuals?

72 hours (Correct answer)
7 days
48 hours
24 hours

Correct answer: 72 hours

GDPR Article 33 requires that personal data breaches posing risk to individuals be reported to the supervisory authority within 72 hours of discovery.

Question 60: What is the minimum fire-resistance rating required for walls enclosing interior exit stairways in buildings that are not sprinklered?

3 hours
2 hours (Correct answer)
1 hour
30 minutes

Correct answer: 2 hours

NFPA 101 requires a minimum 2-hour fire-resistance rating for interior exit stairway enclosures in non-sprinklered buildings to protect the primary evacuation path.

Question 61: Heat stress illness progression from least to most severe is:

Heat exhaustion → heat cramps → heat stroke
Heat syncope → heat cramps → heat exhaustion
Heat rash → heat syncope → heat cramps
Heat cramps → heat exhaustion → heat stroke (Correct answer)

Correct answer: Heat cramps → heat exhaustion → heat stroke

The typical progression of heat-related illness severity goes from heat cramps to heat exhaustion to life-threatening heat stroke.

Question 62: Which document produced during a security design project defines the owner's security objectives, performance criteria, and basis of design decisions?

Basis of Design (BOD) / Security Narrative (Correct answer)
Security Master Plan
Commissioning Test Plan
Operational Requirements Document (ORD)

Correct answer: Basis of Design (BOD) / Security Narrative

The Basis of Design document records design intent, performance goals, and assumptions—serving as the foundational reference for all subsequent security design decisions.

Question 63: During recovery operations, a team discovers the documented recovery procedures are outdated and incomplete. What is the root cause failure this exposes?

Insufficient staffing during the incident
Poor communication with executive leadership
Failure to maintain and regularly test the BCP (Correct answer)
Inadequate funding for recovery resources

Correct answer: Failure to maintain and regularly test the BCP

Outdated procedures indicate the BCP was not regularly reviewed, updated, and tested — a core maintenance failure in the continuity program lifecycle.

Question 64: The 'trusted traveler' concept underlying programs like TSA PreCheck is based on which security philosophy?

Random selection of passengers for enhanced screening
Eliminating security screening for all frequent flyers
Profiling travelers based solely on nationality
Risk-based security that allocates resources to higher-risk travelers while expediting low-risk pre-vetted individuals (Correct answer)

Correct answer: Risk-based security that allocates resources to higher-risk travelers while expediting low-risk pre-vetted individuals

Risk-based security focuses screening resources on unknown or higher-risk travelers while expediting pre-vetted, low-risk individuals through dedicated lanes.

Question 65: Which of the following BEST describes a 'tabletop exercise' in emergency preparedness?

A full-scale drill involving actual deployment of personnel and equipment
A computer simulation modeling the spread of a hazard
An unannounced drill to test real-time response capabilities
A discussion-based exercise where participants talk through a scenario without physical deployment (Correct answer)

Correct answer: A discussion-based exercise where participants talk through a scenario without physical deployment

Tabletop exercises are facilitated discussions using a scenario to test plans and identify gaps without mobilizing actual resources.

Question 66: When a SSP professional encounters an unfamiliar challenge in security technology & systems, what is the recommended first course of action?

Proceed based on personal intuition alone
Postpone addressing the issue indefinitely
Research applicable standards, consult with subject matter experts, and document the approach (Correct answer)
Apply the solution used for the most recent similar problem without adaptation

Correct answer: Research applicable standards, consult with subject matter experts, and document the approach

Professional practice requires a methodical approach to unfamiliar challenges: research the applicable standards, consult experts when needed, and document the reasoning for the chosen approach.

Question 67: Which environmental design principle is MOST associated with natural surveillance in workplace violence deterrence?

Designing spaces that maximize visibility and eliminate blind spots (Correct answer)
Installing high fences around the perimeter
Placing security cameras in every room
Requiring all visitors to sign in at reception

Correct answer: Designing spaces that maximize visibility and eliminate blind spots

Natural surveillance through CPTED principles involves designing spaces so that legitimate users can naturally observe and monitor the area.

Question 68: What is the recommended action when an oxygen-deficient atmosphere (below 19.5% O2) is detected in a confined space?

Do not enter; evacuate area and contact confined space rescue team (Correct answer)
Increase ventilation and re-test before entry
Use an air-purifying respirator rated for oxygen deficiency
Enter immediately with a supplied-air respirator

Correct answer: Do not enter; evacuate area and contact confined space rescue team

An oxygen-deficient atmosphere is immediately dangerous to life and requires non-entry until the atmosphere is made safe or proper supplied-air and rescue support is in place.

Question 69: An organization activates its BCP but recovery efforts are slowed because staff are unfamiliar with their assigned roles. Which program element failed?

Executive sponsorship
Risk assessment methodology
Vendor management process
Training and awareness program (Correct answer)

Correct answer: Training and awareness program

If personnel do not know their roles during activation, the training and awareness component of the BCP program has not been adequately implemented.

Question 70: What is the key difference between a hot site and a warm site in disaster recovery?

Hot sites have pre-loaded data and are immediately operational; warm sites require some setup time (Correct answer)
Warm sites are fully staffed 24/7 while hot sites are unmanned
Hot sites use cloud infrastructure while warm sites use on-premises equipment
Hot sites are located in warmer climates for reliability

Correct answer: Hot sites have pre-loaded data and are immediately operational; warm sites require some setup time

A hot site is fully configured and operational with current data, while a warm site has hardware but requires data restoration and configuration before use.

Question 71: A security officer discovers a colleague falsifying incident reports. The ethical obligation is to:

Ignore it unless directly asked by management
Report the misconduct through proper channels immediately (Correct answer)
Confront the colleague privately and allow self-correction
Document it personally but take no further action

Correct answer: Report the misconduct through proper channels immediately

Ethical compliance requires reporting misconduct through proper channels to maintain integrity and organizational accountability.

Question 72: Which of the following is an example of an administrative control for workplace violence prevention?

Adding security cameras to parking lots
Implementing a buddy system for high-risk tasks (Correct answer)
Installing bullet-resistant barriers
Hiring uniformed security officers

Correct answer: Implementing a buddy system for high-risk tasks

Administrative controls involve changes to work practices or procedures, such as a buddy system, rather than physical or engineering changes.

Question 73: Which wiring topology provides the highest fault tolerance for a fire alarm system by allowing the system to continue operating if a single break occurs in the circuit?

Daisy-chain topology
Class A (Style D/E) wiring (Correct answer)
Star topology
Class B (Style A/B) wiring

Correct answer: Class A (Style D/E) wiring

Class A wiring loops back to the panel on both ends, so a single open circuit does not disable the devices; the panel can still communicate with all devices from the other direction.

Question 74: Which ionizing radiation type has the greatest penetrating power but the lowest ionizing power?

Gamma rays (Correct answer)
Alpha particles
Beta particles
Neutron radiation

Correct answer: Gamma rays

Gamma rays are electromagnetic radiation with the greatest penetrating ability, requiring dense shielding such as lead or concrete, but they ionize less densely per unit path than alpha or beta particles.

Question 75: What is the purpose of a fire watch when a fire alarm or sprinkler system is impaired?

To provide continuous monitoring for fire conditions and notification if fire occurs (Correct answer)
To inspect and repair the impaired system components
To test the fire suppression system manually
To conduct scheduled fire drills for occupants

Correct answer: To provide continuous monitoring for fire conditions and notification if fire occurs

A fire watch involves trained personnel continuously patrolling and monitoring for signs of fire when detection or suppression systems are out of service, ensuring early detection and manual notification.

Question 76: The Foreign Corrupt Practices Act (FCPA) is most relevant to security practitioners who:

Handle cybersecurity investigations
Oversee physical access control only
Work in domestic retail environments
Manage international operations or vendors (Correct answer)

Correct answer: Manage international operations or vendors

The FCPA prohibits bribery of foreign officials and applies to security practitioners managing international operations or third-party relationships.

Question 77: Which legal concept holds an employer responsible for wrongful acts committed by employees within the scope of their employment?

Negligent hiring
Strict liability
Respondeat superior (Correct answer)
Proximate cause

Correct answer: Respondeat superior

Respondeat superior is the legal doctrine under which employers are vicariously liable for employee actions performed within the scope of employment.

Question 78: Emergency exit signs must be illuminated to a minimum of how many foot-candles at the floor level below the sign?

0.2 foot-candles
1 foot-candle (Correct answer)
5 foot-candles
10 foot-candles

Correct answer: 1 foot-candle

NFPA 101 requires exit signs to be illuminated to provide at least 1 foot-candle measured at floor level directly below the sign to ensure visibility during an emergency.

Question 79: A Zero Tolerance Policy for workplace violence is MOST effective when it:

Requires all threats to be reported directly to law enforcement only
Clearly defines prohibited behaviors and is consistently enforced (Correct answer)
Mandates immediate termination for any aggressive behavior without review
Prohibits employees from discussing violent incidents internally

Correct answer: Clearly defines prohibited behaviors and is consistently enforced

An effective zero tolerance policy defines what constitutes prohibited conduct and applies consequences consistently across all levels.

Question 80: What is the main purpose of using a 'Wiegand' interface in legacy access control readers?

Manage network communications between multiple access panels
Encrypt biometric templates before storing them in a database
Transmit card credential data from the reader to the access control panel using a simple unencrypted serial format (Correct answer)
Provide power-over-Ethernet to door hardware components

Correct answer: Transmit card credential data from the reader to the access control panel using a simple unencrypted serial format

The Wiegand protocol transmits card data as a simple unencrypted serial signal, which is its primary vulnerability—the data can be intercepted and replayed; OSDP was developed as a secure replacement.

Question 81: What is the purpose of access control?

Allow all access
Restrict entry to authorized (Correct answer)
Control parking
Manage inventory

Correct answer: Restrict entry to authorized

Access control systems are fundamental security measures designed to regulate who can enter specific areas or access certain resources. Their primary purpose is to ensure that only authorized individuals are granted entry, thereby preventing unauthorized access, theft, and potential harm.

Question 82: A security practitioner is reviewing a terminated employee's access rights. Which is the BEST practice?

Allow the manager to decide when access revocation is appropriate
Revoke badge access only, preserving network access for two weeks
Revoke access 30 days after termination to allow transition time
Revoke all physical and logical access simultaneously at the time of termination (Correct answer)

Correct answer: Revoke all physical and logical access simultaneously at the time of termination

Best practice is to revoke all access — physical and digital — simultaneously at the moment of termination to eliminate risk.

Question 83: A corrective action plan submitted to a regulatory agency should include which core components?

A denial of wrongdoing, legal arguments, and request for case dismissal
Root cause analysis, specific corrective measures, responsible parties, and target completion dates (Correct answer)
Employee disciplinary actions taken and insurance claim documentation
Only the technical fix applied, with no documentation of root cause

Correct answer: Root cause analysis, specific corrective measures, responsible parties, and target completion dates

Effective corrective action plans must address root cause, define specific fixes, assign accountability, and set measurable timelines for completion.

Question 84: A security professional discovers that a new company policy requires actions that conflict with the professional code of ethics. The best course of action is to:

Anonymously report the policy to a regulatory body without internal discussion
Comply with company policy since employment obligations supersede professional ethics
Immediately resign without attempting to address the issue internally
Raise the conflict with management and, if unresolved, consult legal or ethics guidance (Correct answer)

Correct answer: Raise the conflict with management and, if unresolved, consult legal or ethics guidance

Ethical conflicts should first be raised internally; if unresolved, consulting legal counsel or professional ethics boards ensures obligations are properly addressed.

Question 85: RCRA (Resource Conservation and Recovery Act) cradle-to-grave tracking requires generators to track hazardous waste using which document?

Site Emergency Response Plan
Uniform Hazardous Waste Manifest (Correct answer)
Process Hazard Analysis Report
Tier II Chemical Inventory Report

Correct answer: Uniform Hazardous Waste Manifest

RCRA requires the Uniform Hazardous Waste Manifest to accompany hazardous waste from the point of generation through transportation to final disposal.

Question 86: A security system sends an alarm signal even though no actual intrusion has occurred. This is called a:

Missed alarm
System fault
False positive (Correct answer)
Nuisance alarm

Correct answer: False positive

A false positive (false alarm) occurs when a security system triggers an alert without a real threat being present, often caused by environmental factors or equipment issues.

Question 87: In continuity planning, what does 'order of succession' refer to?

The chronological timeline for implementing recovery procedures
The sequence in which systems are restored after an outage
A pre-established hierarchy of individuals authorized to assume leadership roles if primary leaders are incapacitated (Correct answer)
The priority order for reconstituting business units

Correct answer: A pre-established hierarchy of individuals authorized to assume leadership roles if primary leaders are incapacitated

Order of succession designates who assumes authority and decision-making responsibility when key leaders are unavailable during a disruption.

Question 88: A security officer is conducting a vehicle inspection at a facility entrance gate. What is the MAIN objective of this procedure?

To collect tolls and parking fees
To enforce speed limits on facility roadways
To prevent unauthorized persons, contraband, or weapons from entering the facility (Correct answer)
To verify that vehicles are properly registered and insured

Correct answer: To prevent unauthorized persons, contraband, or weapons from entering the facility

Vehicle inspections at entry points serve as a physical security layer to screen for threats before they reach the protected interior.

Question 89: How should SSP professionals handle confidential information related to security technology & systems?

Store information without any security measures
Share freely with all colleagues for transparency
Follow established protocols for data protection, access control, and disclosure in accordance with applicable regulations (Correct answer)
Delete all records after project completion

Correct answer: Follow established protocols for data protection, access control, and disclosure in accordance with applicable regulations

Confidential information must be handled according to established protocols, regulatory requirements, and professional ethics standards, including proper access control and disclosure procedures.

Question 90: When establishing a Joint Information Center (JIC) during a large-scale incident, the PRIMARY purpose is to:

Coordinate and release consistent public information from all responding agencies (Correct answer)
Provide medical triage services to injured responders
Serve as the operational base for hazmat response teams
Manage resource requests between field units and the EOC

Correct answer: Coordinate and release consistent public information from all responding agencies

A JIC consolidates public information functions across agencies to prevent conflicting messages and ensure coordinated communications to the public.

Question 91: When a SSP professional encounters an unfamiliar challenge in regulatory investigation & response, what is the recommended first course of action?

Postpone addressing the issue indefinitely
Apply the solution used for the most recent similar problem without adaptation
Research applicable standards, consult with subject matter experts, and document the approach (Correct answer)
Proceed based on personal intuition alone

Correct answer: Research applicable standards, consult with subject matter experts, and document the approach

Professional practice requires a methodical approach to unfamiliar challenges: research the applicable standards, consult experts when needed, and document the reasoning for the chosen approach.

Question 92: Which recovery strategy involves contracting with an external organization to perform specific business functions if an internal disruption occurs?

Mutual aid agreement
Cold site activation
Manual fallback procedures
Business Process Outsourcing (BPO) contingency arrangement (Correct answer)

Correct answer: Business Process Outsourcing (BPO) contingency arrangement

A BPO contingency arrangement pre-arranges for a third party to assume specific operational functions during a disruption, maintaining service continuity.

Question 93: A BIA reveals that a customer billing system has an RPO of 4 hours. Which backup strategy best satisfies this requirement?

Monthly full system snapshots
Daily full backups at midnight
Continuous data replication or backups every 2 hours (Correct answer)
Weekly incremental backups

Correct answer: Continuous data replication or backups every 2 hours

To meet a 4-hour RPO, backups must occur at intervals shorter than 4 hours, making continuous replication or 2-hour backups the appropriate strategy.

Question 94: When conducting a pre-employment background investigation, failure to obtain written authorization from the applicant violates which federal law?

Americans with Disabilities Act
Employee Polygraph Protection Act
Fair Credit Reporting Act (FCRA) (Correct answer)
National Labor Relations Act

Correct answer: Fair Credit Reporting Act (FCRA)

The FCRA requires written disclosure and authorization before obtaining consumer reports (including background checks) for employment purposes.

Question 95: Which principle underlies the Threshold Limit Value (TLV) concept established by ACGIH?

Instantaneous ceiling values that must never be exceeded
Zero-risk threshold for all chemical exposures
Concentrations at or below which nearly all workers may be exposed without adverse effects (Correct answer)
Legal enforcement benchmarks equivalent to OSHA PELs

Correct answer: Concentrations at or below which nearly all workers may be exposed without adverse effects

TLVs represent concentrations to which nearly all workers may be repeatedly exposed without adverse health effects, though individual susceptibility varies.

Question 96: Which international standard specifically provides guidance for Business Continuity Management Systems (BCMS)?

NIST SP 800-53
ISO 31000
ISO 22301 (Correct answer)
ISO 27001

Correct answer: ISO 22301

ISO 22301 is the international standard that specifies requirements for planning, implementing, maintaining, and improving a BCMS.

Question 97: OSHA's 'willful violation' classification requires investigators to demonstrate which element?

Employee complaints were submitted in writing
The hazard caused a fatality
Three or more prior citations for the same violation
The employer had intentional disregard or plain indifference to OSHA requirements (Correct answer)

Correct answer: The employer had intentional disregard or plain indifference to OSHA requirements

A willful violation requires proof that the employer knew of the OSHA requirement and intentionally disregarded it or showed plain indifference.

Question 98: Which environment poses the HIGHEST statistical risk for Type I (criminal intent) workplace violence?

Manufacturing plants with controlled access
Corporate headquarters offices
Remote work-from-home environments
Retail stores and late-night service establishments (Correct answer)

Correct answer: Retail stores and late-night service establishments

Late-night retail and service operations with cash transactions face the highest risk of Type I violence, including robbery.

Question 99: What is an ethical dilemma?

Easy choice
Ignoring laws
Following orders blindly
Conflicting moral principles (Correct answer)

Correct answer: Conflicting moral principles

An ethical dilemma arises when an individual or organization faces a situation where two or more moral principles or values are in conflict, making it difficult to determine the 'right' course of action. There is no clear-cut solution, and choosing one option often means compromising another deeply held value. Resolving such dilemmas requires careful consideration of ethical frameworks and potential consequences.

Question 100: Why is documentation important after an emergency?

Avoid accountability
Ignore incidents
Evaluate and improve response (Correct answer)
Punish responders

Correct answer: Evaluate and improve response

Documentation after an emergency is crucial for creating a detailed record of events, actions taken, and outcomes. This comprehensive data allows organizations to conduct a thorough post-incident analysis, identifying what worked well and what needs improvement in their emergency response plans. By evaluating past responses, organizations can refine procedures, enhance training, and strengthen overall preparedness for future incidents.

Question 101: Which of the following best describes a key competency required for transportation security standards in SSP practice?

Reliance on a single methodology for all situations
The ability to work independently without any oversight
Strong analytical skills combined with effective communication and ethical judgment (Correct answer)
Memorization of all relevant regulations without understanding context

Correct answer: Strong analytical skills combined with effective communication and ethical judgment

SSP professionals working in transportation security standards need analytical skills to assess situations, communication skills to convey findings, and ethical judgment to make sound decisions.

Question 102: Which interview technique is recommended when speaking with a potentially threatening subject to reduce defensiveness?

Recording the interview without the subject's knowledge
Polygraph testing before the interview
Motivational interviewing and active listening (Correct answer)
Direct confrontation to obtain an immediate confession

Correct answer: Motivational interviewing and active listening

Motivational interviewing uses open-ended questions and reflective listening to build rapport and gather information without escalating the subject.

Question 103: A risk assessment identifies a high-value server room as a critical asset. The MOST appropriate initial step before selecting security countermeasures is:

Survey employees on their preferred access methods
Determine the threat likelihood and impact to calculate risk (Correct answer)
Contact vendors for product demonstrations
Install biometric readers immediately

Correct answer: Determine the threat likelihood and impact to calculate risk

Countermeasure selection should be driven by a formal risk calculation (likelihood × impact) to ensure controls are proportionate to actual risk.

Question 104: What is an emergency operations plan (EOP)?

Financial plan
Framework for emergency roles and procedures (Correct answer)
Training manual
Communication plan

Correct answer: Framework for emergency roles and procedures

An Emergency Operations Plan (EOP) is a comprehensive document that outlines an organization's structured approach to managing emergencies. It defines roles and responsibilities, establishes clear procedures for various incident types, and coordinates resources to ensure an effective and unified response.

Question 105: What is the purpose of a Continuity of Government (COG) plan at the federal level?

To regulate private sector business continuity standards
To maintain the constitutional authority and essential functions of government during a catastrophic emergency (Correct answer)
To coordinate international disaster relief efforts
To ensure tax collection continues during a recession

Correct answer: To maintain the constitutional authority and essential functions of government during a catastrophic emergency

COG plans ensure that the executive, legislative, and judicial branches can continue to operate and exercise constitutional authority during a national emergency.

Question 106: The FAST (Free and Secure Trade) program is designed to facilitate which type of transportation activity?

Passenger screening at seaports
Domestic air cargo screening
Rail freight customs inspection
Expedited border crossing for pre-approved commercial shipments (Correct answer)

Correct answer: Expedited border crossing for pre-approved commercial shipments

FAST expedites the movement of pre-approved, low-risk commercial shipments across the US-Canada and US-Mexico borders.

Question 107: Which of the following scenarios BEST illustrates the concept of 'risk aggregation'?

A single catastrophic risk is divided into smaller sub-risks for easier management
A risk assessment team aggregates findings from multiple frameworks into a unified rating scale
An organization consolidates all risk registers from subsidiaries into one master document
Multiple low-rated risks combine to create an enterprise-level risk that exceeds the organization's risk tolerance (Correct answer)

Correct answer: Multiple low-rated risks combine to create an enterprise-level risk that exceeds the organization's risk tolerance

Risk aggregation occurs when individually acceptable risks collectively create an unacceptable cumulative exposure—a common blind spot in siloed risk management.

Question 108: During a fire drill evaluation, you observe that employees are propping open stairwell doors with wedges. What is the primary safety risk?

HVAC systems will not function properly
The door locking mechanism can be damaged
Fire and smoke can spread freely into the stairwell, compromising the exit path (Correct answer)
Stairwells become too crowded during evacuation

Correct answer: Fire and smoke can spread freely into the stairwell, compromising the exit path

Fire-rated stairwell doors are designed to remain closed to prevent fire and smoke from entering the protected stairwell; propping them open eliminates this critical barrier and endangers evacuees.

Question 109: Which lighting type provides the best color rendering for security cameras monitoring outdoor areas at night?

Metal halide
High-pressure sodium (HPS)
Low-pressure sodium (LPS)
LED with full-spectrum output (Correct answer)

Correct answer: LED with full-spectrum output

Full-spectrum LEDs provide high color rendering index (CRI) values, allowing cameras to capture accurate colors for subject identification, while sodium lights distort color.

Question 110: What distinguishes a 'resilience' approach from a traditional 'recovery' approach in business continuity?

Resilience builds organizational capacity to absorb disruptions and adapt, while recovery focuses on restoring previous state after failure (Correct answer)
Resilience focuses solely on faster RTO targets
Resilience applies only to cybersecurity incidents while recovery covers physical disasters
Recovery is proactive and resilience is reactive

Correct answer: Resilience builds organizational capacity to absorb disruptions and adapt, while recovery focuses on restoring previous state after failure

Resilience is a broader capability encompassing anticipation, absorption, adaptation, and transformation, whereas recovery narrowly addresses restoring prior state post-incident.

Question 111: Under OSHA 29 CFR 1910.38, an emergency action plan must include which of the following elements?

A detailed floor plan of all exits
A list of all hazardous materials on site
Insurance coverage details for fire damage
Procedures for reporting a fire or other emergency (Correct answer)

Correct answer: Procedures for reporting a fire or other emergency

OSHA 29 CFR 1910.38 requires emergency action plans to include procedures for reporting a fire or other emergency, evacuation procedures, and employee accountability processes.

Question 112: Which suppression agent is most appropriate for protecting a server room containing sensitive electronics?

Clean agent gaseous suppression (Correct answer)
Dry pipe sprinklers
Wet pipe sprinklers
Deluge system

Correct answer: Clean agent gaseous suppression

Clean agent gaseous suppression systems extinguish fires without leaving residue or causing water damage to sensitive electronic equipment.

Question 113: A supply chain disruption prevents a manufacturer from obtaining critical components. Which BCP strategy specifically addresses this scenario?

Increasing cybersecurity controls on supplier portals
Implementing a business interruption insurance claim
Activating the alternate data center
Pre-qualifying substitute suppliers and maintaining safety stock inventory (Correct answer)

Correct answer: Pre-qualifying substitute suppliers and maintaining safety stock inventory

Pre-qualifying alternate suppliers and holding safety stock are supply chain resilience strategies that mitigate the impact of a single-source disruption.

Question 114: Why are patrols important in security operations?

Manage visitor logs
Deliver packages
Detect and deter threats (Correct answer)
Monitor employee productivity

Correct answer: Detect and deter threats

Security patrols are essential for maintaining a visible security presence, which acts as a deterrent to potential threats and criminal activity. Patrolling personnel can actively detect suspicious behavior, identify vulnerabilities, and respond quickly to incidents, enhancing overall safety and security.

Question 115: Which term describes the process of redistributing risk to a third party, such as through insurance or contractual agreements?

Risk avoidance
Risk mitigation
Risk transfer (Correct answer)
Risk acceptance

Correct answer: Risk transfer

Risk transfer shifts the financial or operational burden of a risk to another party, commonly through insurance policies or vendor contracts.

Question 116: When conducting a Physical Security Assessment, the document that formally authorizes testing activities and limits scope is called a:

Risk Treatment Plan
Memorandum of Understanding (MOU)
Statement of Work (SOW)
Rules of Engagement (ROE) (Correct answer)

Correct answer: Rules of Engagement (ROE)

Rules of Engagement define what testers may and may not do, protecting both the organization and the security practitioners conducting the assessment.

Question 117: An investigator receives an anonymous tip alleging workplace safety fraud. What is the recommended first step?

Disclose the tip publicly to solicit additional witnesses
Conduct a preliminary assessment to determine if the allegation has sufficient specificity and plausibility to warrant investigation (Correct answer)
Discard the tip because anonymous sources are inadmissible in regulatory proceedings
Immediately execute search warrants based on the tip alone

Correct answer: Conduct a preliminary assessment to determine if the allegation has sufficient specificity and plausibility to warrant investigation

Anonymous tips require an initial credibility assessment to determine whether the information is specific and plausible enough to justify opening a formal investigation.

Question 118: What is the correct order of the emergency management cycle phases?

Recovery, Mitigation, Response, Preparedness
Response, Recovery, Preparedness, Mitigation
Mitigation, Preparedness, Response, Recovery (Correct answer)
Preparedness, Response, Recovery, Mitigation

Correct answer: Mitigation, Preparedness, Response, Recovery

The four phases of emergency management are Mitigation, Preparedness, Response, and Recovery, forming a continuous cycle.

Question 119: A company's BCP identifies a critical vendor as a single point of failure. Which resilience strategy directly addresses this risk?

Increasing the vendor's contract value
Dual-sourcing or qualifying an alternate supplier (Correct answer)
Documenting the vendor's contact information in the plan
Extending the Recovery Time Objective

Correct answer: Dual-sourcing or qualifying an alternate supplier

Dual-sourcing eliminates the single point of failure by ensuring a qualified backup supplier can fulfill the same function.

Question 120: In industrial hygiene, what does the 'anticipation' phase of the industrial hygiene model involve?

Administering medical surveillance to detect early disease
Recognizing potential hazards before workers are exposed through process review and walk-throughs (Correct answer)
Implementing engineering controls before hazards are confirmed
Reviewing OSHA citations from previous inspections

Correct answer: Recognizing potential hazards before workers are exposed through process review and walk-throughs

Anticipation involves identifying potential hazards proactively by reviewing processes, materials, and work tasks before exposure occurs.

Safety and Security Practitioner (SSP) Certification

The SSP certification validates knowledge and skills in physical security, emergency planning, legal compliance, and security technology for safety and security practitioners in professional environments.

120

Questions

150 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds