SSP Security Operations & Procedures 4 — Questions and Answers
Question 1: Which access control model grants permissions based on an individual's job title and organizational role rather than individual identity?
- Discretionary Access Control (DAC)
- Role-Based Access Control (RBAC) (Correct answer)
- Mandatory Access Control (MAC)
- Attribute-Based Access Control (ABAC)
Correct answer: Role-Based Access Control (RBAC)
RBAC assigns permissions to roles, and users inherit those permissions by being assigned to a role, simplifying large-scale access management.
Question 2: A suspicious package is discovered in a public lobby. Which action should the security officer take FIRST?
- Open the package to inspect its contents
- Evacuate the immediate area and notify emergency services (Correct answer)
- Move the package to the loading dock for disposal
- Photograph the package and continue normal duties
Correct answer: Evacuate the immediate area and notify emergency services
Evacuation protects life while emergency services trained in hazardous materials and explosives assess and handle the threat.
Question 3: What does an 'access control list' (ACL) in a physical security context define?
- A ranked list of security threats to a facility
- The specific individuals or groups permitted to enter designated areas (Correct answer)
- A compliance checklist for annual security audits
- The schedule for routine access card replacements
Correct answer: The specific individuals or groups permitted to enter designated areas
An ACL identifies who is authorized for what access, serving as the authoritative reference for granting or denying entry.
Question 4: A security officer is conducting a vehicle inspection at a facility entrance gate. What is the MAIN objective of this procedure?
- To collect tolls and parking fees
- To prevent unauthorized persons, contraband, or weapons from entering the facility (Correct answer)
- To verify that vehicles are properly registered and insured
- To enforce speed limits on facility roadways
Correct answer: To prevent unauthorized persons, contraband, or weapons from entering the facility
Vehicle inspections at entry points serve as a physical security layer to screen for threats before they reach the protected interior.
Question 5: The concept of 'crime prevention through environmental design' (CPTED) emphasizes:
- Increasing the number of security officers on patrol
- Designing physical spaces to deter criminal behavior through visibility, access control, and territoriality (Correct answer)
- Installing maximum-security fencing around all facilities
- Using undercover officers to detect criminal planning
Correct answer: Designing physical spaces to deter criminal behavior through visibility, access control, and territoriality
CPTED uses architectural and landscape design principles to reduce opportunities for crime by improving natural surveillance and controlling access.
Question 6: A security officer witnesses a colleague accepting cash from a contractor in exchange for bypassing a vehicle search. The officer should:
- Confront the colleague immediately and demand they stop
- Ignore it as an internal matter between the colleague and their supervisor
- Report the incident to supervisory authority or the appropriate internal channel (Correct answer)
- Wait to see if it happens again before taking action
Correct answer: Report the incident to supervisory authority or the appropriate internal channel
Reporting through proper channels addresses corruption while protecting the reporting officer and preserving chain-of-evidence integrity.
Question 7: Which document establishes the specific legal authority and limitations of a private security officer's actions on a given property?
- The facility's insurance policy
- The security services contract and applicable state licensing laws (Correct answer)
- The officer's personal training certification
- OSHA workplace safety regulations
Correct answer: The security services contract and applicable state licensing laws
The contract defines the scope of authority while state licensing laws set the legal boundaries for private security officer conduct.
SSP Security Operations & Procedures 4
Which access control model grants permissions based on an individual's job title and organizational role rather than individual identity?