View Full ASIS PSP Exam Dumps and Practice Test Dumps

 

Question 101.

A security manager is evaluating protection for a remote facility that is unoccupied overnight. Which consideration is most important?

1. The daytime employee dress code
   2. Reliable detection, alarm assessment, communications, and response capability during unoccupied periods
   3. The number of conference rooms
   4. Office furniture placement

Correct Answer: 2

Explanation:

An unoccupied facility cannot rely on employees to notice suspicious activity, so detection and response capabilities become particularly important. The security manager should evaluate intrusion detection, video assessment, communications reliability, alarm monitoring, and the time required for responders to reach the location. Lighting, barriers, locks, and other delay measures may also contribute to protection. The entire system should be tested under actual overnight conditions. Effective security depends on detecting a potentially unauthorized event early enough to assess it and initiate an appropriate response before critical assets are compromised.

Question 102.

What is the primary purpose of a security risk register?

1. To document identified risks, relevant assessments, treatment decisions, ownership, and status for ongoing management
   2. To list only security equipment serial numbers
   3. To replace incident reports
   4. To record employee attendance

Correct Answer: 1

Explanation:

A security risk register provides a structured record of identified risks and supports their ongoing management. Depending on organizational practices, it may contain risk descriptions, affected assets, threats, vulnerabilities, likelihood or probability assessments, consequences, existing controls, planned treatments, ownership, status, and residual risk. The register helps management track significant exposures and treatment activities over time. It should be updated when conditions change or new information becomes available. A risk register supports decision-making but does not replace detailed assessments or other security documentation.

Question 103.

A facility’s video system records an entrance clearly, but investigators cannot reliably determine which credential holder corresponds to a recorded entry event. What improvement should be considered?

1. Increase fence height
   2. Reduce the number of cameras
   3. Improve integration and time synchronization between access-control transactions and associated video
   4. Eliminate access-control logging

Correct Answer: 3

Explanation:

Correlating video with access-control events requires reliable timestamps and appropriately integrated records. If systems use different times or cannot associate transactions with relevant cameras, investigators may have difficulty reconstructing events. Synchronizing system clocks and integrating event data with video can improve alarm assessment and investigation. Camera placement and image quality should also support the required task. Integration should be designed around operational needs rather than simply connecting systems technologically. Accurate correlation strengthens accountability and can significantly reduce investigation time.

Question 104.

A security professional is evaluating a perimeter where an intruder could easily crawl beneath the fence because of uneven terrain. What should be done?

1. Increase the number of warning signs only
   2. Assume the fence height is sufficient
   3. Add more lighting inside the building
   4. Address the bottom clearance and terrain condition as part of the complete perimeter barrier design

Correct Answer: 4

Explanation:

A fence should be evaluated as a complete barrier rather than only by its nominal height. Terrain changes, erosion, drainage channels, gaps, vegetation, and other conditions can create bypass opportunities beneath or around the fence. The security professional should inspect the full perimeter and address significant openings according to the required protection level. Detection and surveillance may complement physical improvements. Periodic inspection is important because ground conditions can change over time and create vulnerabilities that were not present when the barrier was originally installed.

Question 105.

Why should physical security design consider the concept of single points of failure?

1. Failure of one critical component can disable multiple protective functions and create disproportionate security exposure.
   2. Every security component must always have three backups.
   3. Redundancy automatically eliminates all risks.
   4. Single points of failure apply only to computer systems.

Correct Answer: 1

Explanation:

Physical security systems often depend on shared power, communications, servers, network devices, monitoring locations, or other infrastructure. If one critical component supports multiple protective functions, its failure may significantly reduce security capability. The professional should identify these dependencies and determine whether redundancy, alternate procedures, spare equipment, or faster recovery is justified. Not every component requires duplication because resilience should be proportionate to risk. Understanding single points of failure helps organizations design systems that remain sufficiently effective during foreseeable equipment or infrastructure failures.

Question 106.

A security manager wants to reduce unauthorized access caused by lost employee badges. Which practice is most appropriate?

1. Wait until the badge naturally expires
   2. Require prompt reporting and immediately suspend or revoke lost credentials according to established procedures
   3. Allow another employee’s badge to be borrowed temporarily
   4. Disable access logging for lost credentials

Correct Answer: 2

Explanation:

A lost credential can potentially be used by an unauthorized person until it is disabled. Employees should therefore know how to report lost or stolen credentials promptly, and security personnel should have a defined process for suspending or revoking them. Replacement credentials should be issued according to established identity-verification procedures. Depending on risk, recent activity associated with the lost credential may also be reviewed. Effective credential lifecycle management reduces the period during which lost credentials can create unnecessary exposure.

Question 107.

A security professional is assessing a parking structure connected directly to an office building. What should receive particular attention?

1. Only parking fees
   2. Only vehicle colors
   3. Pedestrian and vehicle access points, building connections, lighting, surveillance, emergency communications, and opportunities for concealment
   4. Only the number of parking spaces

Correct Answer: 3

Explanation:

Connected parking structures can create additional approaches to a protected building and may contain areas with limited natural surveillance. The security professional should evaluate vehicle entry, pedestrian movement, elevators, stairs, doors connecting to the building, lighting, cameras, emergency communications, and concealment opportunities. Access requirements may differ between employees, visitors, and the public. Security measures should support legitimate parking operations while preventing the structure from becoming an uncontrolled pathway into sensitive building areas.

Question 108.

An organization is selecting a location for a backup security operations center. Which approach is most appropriate?

1. Place it immediately beside the primary center regardless of common hazards
   2. Select the cheapest available room
   3. Use a public meeting room
   4. Consider geographic and infrastructure separation, communications, access, staffing, resilience, and relevant common-cause risks

Correct Answer: 4

Explanation:

A backup security operations center should remain usable when the primary center is unavailable. If both locations share the same vulnerable power source, communications path, fire zone, flood exposure, or access problem, a single incident may disable both. The organization should consider separation appropriate to the identified risks while ensuring the alternate location can support necessary monitoring, communications, staffing, and decision-making. Periodic testing is important because an alternate center that has never been exercised may not function effectively during an actual disruption.

Question 109.

What is the primary security purpose of anti-passback in an electronic access control system?

1. To reduce improper reuse of a credential for repeated entry without the expected corresponding exit or sequence
   2. To increase video resolution
   3. To control exterior lighting
   4. To replace visitor management

Correct Answer: 1

Explanation:

Anti-passback uses access-control logic to discourage or prevent a credential from being used in an invalid sequence, such as repeated entry when the system believes the credential holder is already inside. This can reduce credential sharing and some forms of unauthorized access. Implementation requires careful consideration of entrances, exits, emergencies, system failures, and operational exceptions. Anti-passback does not prove that the credential holder and user are the same person, so other authentication and physical controls may still be necessary depending on risk.

Question 110.

A security manager is developing performance requirements for contracted guard response. Which requirement is most useful?

1. Guards should respond quickly whenever possible
   2. Define measurable response expectations for specified incident types, locations, conditions, and reporting requirements
   3. Guards should always do their best
   4. Response time does not need to be measured

Correct Answer: 2

Explanation:

Performance requirements should be measurable enough to determine whether the service meets organizational needs. A statement such as “respond quickly” can be interpreted differently by the customer and contractor. Requirements should identify relevant incident categories, locations, measurement points, exceptions, documentation, and expected response performance. Targets should be realistic and based on security objectives. Monitoring results over time can identify staffing, deployment, communication, or procedural problems and provide an objective basis for managing contracted security services.

Question 111.

A facility has excellent perimeter barriers but frequently leaves a service gate open and unattended. What does this demonstrate?

1. Strong barriers make gate procedures unnecessary
   2. The perimeter is fully secure
   3. A weakness at a controlled opening can undermine the effectiveness of the broader perimeter
   4. Gates should never be used at secure facilities

Correct Answer: 3

Explanation:

A perimeter barrier must be considered as a complete system, including gates, doors, utility openings, and other penetrations. A strong fence provides limited value if an uncontrolled opening allows easy passage. Service gates should therefore receive protection consistent with their function and the surrounding perimeter. Depending on risk, controls might include locks, guards, access control, monitoring, alarms, or procedures. Security design should focus on realistic pathways available to an adversary rather than evaluating individual components in isolation.

Question 112.

A security professional is evaluating whether to retain recorded video for 30, 60, or 90 days. What should drive the decision?

1. The longest retention period available automatically
   2. The shortest period regardless of investigations
   3. The camera manufacturer’s preference
   4. Investigative needs, incident discovery patterns, legal and regulatory obligations, privacy, storage, and organizational policy

Correct Answer: 4

Explanation:

Video retention should reflect legitimate security and organizational requirements. Some incidents may not be discovered immediately, so the organization should understand how long recordings typically need to remain available for investigations. Legal, regulatory, contractual, privacy, and records-management obligations may also affect retention. Longer retention increases storage requirements and may increase privacy exposure without necessarily providing additional security value. The organization should therefore establish and document a justified retention period and ensure recordings are disposed of appropriately when no longer required.

Question 113.

Why should security officers receive post orders for assigned positions?

1. Post orders communicate duties, responsibilities, procedures, authorities, contacts, and expected responses for the specific assignment.
   2. Post orders eliminate the need for training.
   3. They are intended only for payroll purposes.
   4. They allow officers to create security policy independently.

Correct Answer: 1

Explanation:

Post orders provide officers with assignment-specific instructions and help ensure consistent performance. They may address access procedures, patrol responsibilities, alarm response, emergency actions, communications, reporting, equipment use, and escalation contacts. Officers still require appropriate training and supervision because written instructions cannot cover every situation. Post orders should be current, accessible to authorized personnel, and revised when facility conditions or responsibilities change. Clear instructions reduce ambiguity and support accountability during both routine operations and incidents.

Question 114.

A security professional is planning camera placement for a long exterior fence line. What should be determined before selecting camera quantities?

1. The number of cameras the vendor wants to sell
   2. Surveillance objectives, target characteristics, required coverage, lighting, terrain, obstructions, and assessment needs
   3. The number of employee badges
   4. The fence paint color

Correct Answer: 2

Explanation:

Camera quantity should result from surveillance requirements rather than being the starting point. The security professional should determine whether cameras need to detect activity, assess alarms, recognize individuals, observe fence conditions, or perform another task. Terrain, lighting, distances, vegetation, weather, and obstructions affect camera placement and technology selection. Testing or design calculations can then determine appropriate coverage. A large number of poorly positioned cameras may provide less useful protection than a smaller system designed specifically around defined surveillance objectives.

Question 115.

A security assessment finds that a reception desk has no method to discreetly request assistance during a threatening encounter. What should be considered?

1. Removing all visitors
   2. Relocating every employee
   3. A discreet duress or assistance notification capability integrated with defined response procedures
   4. Eliminating reception operations

Correct Answer: 3

Explanation:

Reception personnel may be among the first employees exposed to disruptive or threatening individuals. A discreet method of requesting assistance can allow security or other responders to act without unnecessarily escalating the situation. The notification mechanism should be positioned appropriately, tested, and linked to clearly defined response procedures. Personnel should understand when and how to use it. Technology alone is insufficient if alarms are not monitored or responders do not know what action to take. The control should therefore be integrated into the broader security program.

Question 116.

A security system upgrade will require disabling portions of intrusion detection for several hours. What should the security manager do?

1. Proceed without informing anyone
   2. Assume the facility remains equally protected
   3. Leave all sensitive areas unattended
   4. Assess the temporary exposure and implement appropriate compensating measures, coordination, and restoration verification

Correct Answer: 4

Explanation:

Maintenance and upgrades can temporarily reduce security capability. The manager should understand which areas and functions will be affected, how long the impairment will last, and what risk exists during the outage. Compensating measures might include additional patrols, temporary guards, alternative detection, restricted access, or scheduling work during lower-risk periods. Relevant personnel should know about the impairment without unnecessarily distributing sensitive details. After work is complete, testing should verify that the affected security functions have been properly restored.

Question 117.

What is an important purpose of conducting periodic key inventories?

1. To determine whether issued keys remain accounted for and authorized and to identify missing or obsolete access.
   2. To increase the number of master keys
   3. To eliminate the need for locks
   4. To allow unrestricted key duplication

Correct Answer: 1

Explanation:

Mechanical keys can remain in circulation long after the original business need ends unless they are actively managed. Periodic inventories compare key records with actual possession and authorization. Missing keys, unreturned keys, unnecessary duplicates, or obsolete assignments can then be investigated. The significance of a missing key depends on what it opens and whether duplication is possible. Strong key control includes authorization, issuance records, secure storage, return procedures, inventory, and appropriate action when keys cannot be accounted for.

Question 118.

A facility’s security lighting creates strong glare on surveillance cameras near the main gate. What is the most appropriate response?

1. Increase the brightness further without testing
   2. Adjust lighting and camera design to achieve required visibility without excessive glare or loss of image detail
   3. Turn off all gate lighting permanently
   4. Remove the cameras

Correct Answer: 2

Explanation:

Lighting and surveillance should be designed as complementary systems. Excessive brightness or poor fixture placement can cause glare, overexposure, deep shadows, or reduced image quality. The professional should evaluate fixture direction, intensity, camera positioning, exposure capabilities, and scene contrast under realistic conditions. Adjustments should preserve both human visibility and camera performance. Testing at night is especially important because design assumptions based on daytime conditions may not reveal these problems. The goal is usable observation rather than simply maximizing illumination.

Question 119.

A security manager learns that contractors working in a restricted area are being escorted, but nobody verifies their tools and materials when they leave. What should the manager do?

1. Assume escorts eliminate all loss risks
   2. Prohibit contractors from bringing any equipment
   3. Evaluate whether tool, material, property, and exit-control procedures are required based on asset and theft risks
   4. Stop documenting contractor access

Correct Answer: 3

Explanation:

Escort controls address unauthorized movement but may not fully address theft, unauthorized removal, or introduction of prohibited items. Where risk justifies it, contractor procedures can include tool inventories, material authorization, property passes, inspection, or other accountability measures. The level of control should be proportionate to the assets and operational environment rather than imposed indiscriminately. Requirements should also consider privacy, legal, labor, and safety obligations. Security procedures are most effective when designed around specific risks instead of assuming one control addresses every threat.

Question 120.

After a security audit identifies several deficiencies, what should management do to ensure they are effectively addressed?

1. File the audit report without further action
   2. Correct only the least expensive deficiency
   3. Wait for the next audit before responding
   4. Assign corrective actions, owners, priorities, target dates, and follow-up verification based on risk

Correct Answer: 4

Explanation:

Audit findings provide value only when appropriate corrective actions are evaluated and tracked. Management should prioritize deficiencies according to risk, assign accountable owners, establish realistic completion dates, and monitor progress. Some findings may require immediate interim controls while permanent solutions are developed. Follow-up should verify that corrective actions were actually implemented and that they address the underlying issue rather than merely closing an administrative item. A structured remediation process turns audit results into measurable security improvement.