ASIS-PSP ASIS Physical Security Professional (PSP) Exam Free Practice Exam Questions (2026 Updated)

Comprehensive Detailed Explanation:

In a cost-benefit analysis for physical security systems, the total cost must account for:

Acquisition cost: Initial purchase and installation.

Life cycle cost: Operating, maintenance, support, and energy use over time.

Replacement cost: Cost to replace or upgrade the system at end-of-life.

These factors give a comprehensive view of the true investment required, rather than just the initial purchase.

B and C partially include relevant elements, but only A captures the full scope.

D misses the operational costs involved in life cycle consideration.

Patrol duty involves moving through assigned routes or areas to monitor activity, detect irregularities, and observe the general condition of the facility. Patrolling can be conducted on foot or by vehicle and is a fundamental component of proactive security operations.

Posts (B) are stationary assignments.

Reserves (C) are backup personnel.

" None of the above " (D) is incorrect because patrol duty is the accurate answer.

The effectiveness of entry control systems is typically measured by:

Throughput (speed of entry)

False Acceptance Rate (FAR) — unauthorized access

False Rejection Rate (FRR) — denial of access to authorized users

These metrics provide insight into both the security and user experience of the access control system.

A (Cost) is relevant to budgeting, not effectiveness.

B (Activation delays) may affect throughput but isn’t a primary measure.

D (System obsolescence) relates to lifecycle, not effectiveness.

Risk assessment in the PSP framework is centered on understanding the interplay between assets, exposure, and losses.

Assets are the people, property, information, and operations that must be protected.

Exposure represents the vulnerability or likelihood that an asset will be affected by threats or hazards.

Losses are the potential consequences, whether financial, operational, reputational, or physical, if a threat materializes.

By systematically analyzing these three considerations, security professionals can prioritize risks, allocate resources effectively, and design appropriate mitigation strategies. Countermeasures are developed later as responses to identified exposures and potential losses, not as a primary input to risk classification. This aligns with ASIS guidance on structured risk assessment and enterprise security risk management.

Risk assessment is a foundational step within the risk management process—not an alternative to managing risk. Alternatives to optimize risk management include:

Risk avoidance: eliminating the activity causing the risk

Risk transfer: shifting the risk to another party (e.g., through insurance)

Risk spreading: distributing the risk to reduce overall impact

Risk assessment, in contrast, is the evaluation of threats and vulnerabilities and precedes these treatment decisions.

References from PSP: Risk Treatment Options – ASIS POA; PSP Study Guide – Risk Management and Analysis

Risk transfer refers to shifting the financial burden of potential losses from an organization to a third party, typically through insurance. By paying a premium, the company secures coverage that will compensate for specific losses, thereby reducing its own financial exposure.

References from PSP: ASIS POA – Risk Management and Insurance Strategies; PSP Study Manual – Financial Risk Treatment Options

Staff authority occurs when individuals (such as a chief executive officer or department head) are given delegated authority by their superior but do not sit directly in the operational chain of command. They support line functions by providing recommendations, analysis, and specialized services. Unlike line authority, which involves direct supervision, staff authority enables influence through expertise or policy.

Financial authority (A) pertains to budget control.

Control authority (B) is not a formal organizational term.

Dominance authority (D) is not used in standard management structures.

ern trends in the private security industry focus on:

Regulating training and licensing standards (Answer A),

Attracting better-qualified individuals to raise professionalism (Answer B).

Disarming security personnel (Answer C) is generally not a trend. In fact, depending on threat levels and environments, armed security may be increased rather than reduced.

The correct answer is A. employee identification card.

In PSP-related physical security, access control is one of the core physical security countermeasures. The ASIS Certification Handbook places electronic security systems, including access control, and visitor/vendor management policies within the PSP Body of Knowledge under physical security system application, design, and integration.

An employee identification card or badge is considered a basic and long-established access control tool because it helps security personnel verify that a person belongs to the organization. It may include the employee’s name, photograph, department, ID number, color coding, expiration date, or access authorization level. A security management reference also uses this exact concept, describing the employee identification card or badge as a basic and time-honored access control tool.

The other options are less accurate:

Personal recognition is a method of recognition, not a physical access control tool.

Visitor pass is mainly for temporary/non-employee access, not the basic employee access control tool.

Proximity card is an electronic access credential, but it is a more modern technology-based tool, not the classic “time-honored” one.

Therefore, the best answer is A. employee identification card.

Infrared beam sensors are typically used to detect movement across open areas and are line-of-sight devices. They are not well-suited for enclosed or small, solid objects like safes. They can be easily bypassed or may not be triggered when tampering with a safe that doesn’t break the beam.

A, B, and D are more effective around physical objects:

Capacitance can detect touch or presence.

Microwave can detect motion or disturbance.

Fiber optic cable can detect physical interaction or tampering.

Although CPTED focuses heavily on natural surveillance, incorporating mechanical or electronic means such as video cameras enhances visibility and monitoring. Surveillance deters criminal behavior and increases the chance of detection.

B (Brick wall) may obstruct visibility.

C (Planting trees) could obscure lines of sight.

D (Revolving doors) relate more to access control than CPTED surveillance goals.

In security and risk management, criticality refers to the importance or impact of a loss, typically measured in monetary terms. It helps determine how severely the loss of an asset, process, or system could affect operations, productivity, or safety. Understanding criticality allows security professionals to prioritize protection efforts based on potential financial and operational consequences.

References from PSP: Risk Assessment Terminology – ASIS POA; PSP Study Guide – Asset Valuation and Risk Impact

Among the listed options, asphalt has the lowest reflectance. CCTV performance depends on lighting and surface reflectivity.

Snow (A) has very high reflectance, sometimes exceeding 80%.

Sandy soil (B) and red bricks (D) reflect more light than asphalt.

Asphalt, being dark and non-reflective, absorbs more light, making it harder for cameras to capture detail unless well illuminated.

Mainframes are high-capacity computers known for their powerful processing speed, extensive data storage, and ability to support hundreds or thousands of simultaneous users. They are typically used by large organizations for mission-critical applications such as bulk data processing, enterprise resource planning, and transaction processing.

Workstations (A) are personal or high-performance single-user computers.

Main computers (B) is not a formal term.

Supercomputers (C) are used for highly complex calculations, not general-purpose multi-user environments.

Material Safety Data Sheets (MSDS), now referred to as Safety Data Sheets (SDS) under the Globally Harmonized System (GHS), provide detailed information about chemicals, including hazards, handling procedures, and emergency measures. OSHA regulations require employers to maintain these sheets for all hazardous substances in the workplace.

Asset Standard Act (A), Procurement Asset Safety Program (C), and Product Stability Program (D) are not applicable to this requirement.

Performance testing typically involves precise measurement using calibrated instruments or devices to ensure systems meet specified performance criteria (e.g., camera resolution, sensor range, alarm response time).

A (Operational) testing checks usability.

C (Subsystem) testing targets individual components.

D (Post-maintenance) confirms system functionality after servicing.

Impressioning is a covert method used to create a working key for a lock without disassembly. It involves inserting a blank key into the lock and turning or jiggling it to create small marks where pins contact the blank, which are then filed down to form the correct cuts.

B (Rapping) and C (Bumping) are techniques to bypass a lock, not to create a key.

D (Decoding) involves analyzing key cuts visually or electronically but not physically producing a key directly.

The correct answer is C. paracentric.

In PSP physical security knowledge, locks are treated as structural physical security countermeasures, and the PSP Body of Knowledge includes knowledge of locks under physical security measures and countermeasure selection.

A paracentric keyway is a lock keyway design intended to make picking more difficult by restricting the movement of picking tools inside the keyway. It uses complex warding/projections in the keyway so that manipulating the pins becomes harder. ScienceDirect describes paracentric keyways as designs that frustrate picking attempts by making manipulation of pin tumblers to the shear line more difficult.

The other choices are incorrect because spool, mushroom, and serrated are types of security pins used inside lock cylinders, not keyway designs.

Therefore, the correct answer is C. paracentric.

In the PSP framework, a project specification outlines the technical and operational requirements of a security system. The specification defines what the system must achieve rather than simply its cost or component tolerances.

Performance expectations describe the desired outcomes, functionality, reliability, and operational standards that the installed system must meet.

Testing specifications and equipment tolerances support validation but are derived from the performance requirements.

Cost is a budgetary consideration and does not determine functional or operational requirements.

By clearly specifying performance expectations, security planners ensure that the system is designed and implemented to meet operational needs, provide measurable results, and comply with organizational standards, consistent with ASIS PSP guidance.