SSP Physical Security Design & Implementation 3 — Questions and Answers
Question 1: A Passive Infrared (PIR) motion detector is most likely to produce a false alarm when:
- A person walks across its field of view
- An HVAC vent changes room temperature rapidly (Correct answer)
- The protected area is completely dark
- Battery backup power activates
Correct answer: An HVAC vent changes room temperature rapidly
PIR sensors detect changes in infrared energy; sudden temperature shifts from HVAC vents can mimic a human body signature and trigger false alarms.
Question 2: Which access control topology stores credential data and makes access decisions at each individual reader rather than a central server?
- Centralized architecture
- Distributed (edge-based) architecture (Correct answer)
- Hybrid cloud architecture
- Peer-to-peer mesh architecture
Correct answer: Distributed (edge-based) architecture
Distributed or edge-based access control stores rules locally at the door controller, allowing access decisions even if the server is offline.
Question 3: The SAFETY Act designation from the U.S. Department of Homeland Security primarily provides security technology providers with:
- Mandatory installation requirements for federal buildings
- Liability protections in the event of a terrorist attack (Correct answer)
- Tax incentives for physical security R&D investments
- Priority access to DHS procurement contracts
Correct answer: Liability protections in the event of a terrorist attack
The SAFETY Act creates liability protections (caps on damages) for providers of qualified anti-terrorism technologies deployed during a terrorist incident.
Question 4: In video surveillance design, the 'identification' image quality standard typically requires a camera to capture how many pixels across a human face?
- 25 pixels
- 80–100 pixels (Correct answer)
- 250 pixels
- 500+ pixels
Correct answer: 80–100 pixels
Industry standards (e.g., ONVIF, EN 62676) classify 'identification' quality as approximately 80–100 pixels across the face, sufficient to recognize a known individual.
Question 5: When conducting a Physical Security Assessment, the document that formally authorizes testing activities and limits scope is called a:
- Rules of Engagement (ROE) (Correct answer)
- Statement of Work (SOW)
- Memorandum of Understanding (MOU)
- Risk Treatment Plan
Correct answer: Rules of Engagement (ROE)
Rules of Engagement define what testers may and may not do, protecting both the organization and the security practitioners conducting the assessment.
Question 6: A biometric system's False Reject Rate (FRR) directly impacts which user experience metric?
- System availability
- User convenience and throughput (Correct answer)
- Data encryption strength
- Audit log completeness
Correct answer: User convenience and throughput
FRR measures how often legitimate users are incorrectly denied access, directly reducing throughput and frustrating authorized personnel.
Question 7: Under NFPA 730 (Guide for Premises Security), what is the recommended minimum illumination level for parking facility security?
- 0.5 foot-candles
- 1 foot-candle (Correct answer)
- 5 foot-candles
- 10 foot-candles
Correct answer: 1 foot-candle
NFPA 730 recommends a minimum of 1 foot-candle of illumination in parking areas to support basic security and surveillance functions.
A Passive Infrared (PIR) motion detector is most likely to produce a false alarm when: