ASIS-PSP ASIS Physical Security Professional (PSP) Exam Free Practice Exam Questions (2026 Updated)

An intentional tort occurs when a person deliberately engages in actions that are likely to cause harm or when the person knowingly performs an act that they can reasonably foresee will result in damage. Examples include assault, battery, false imprisonment, and trespassing.

Active resister (A) and Lack of control (B) are not legal terms related to tort liability.

" International tort " is a misspelling; the correct term is " intentional tort. "

Span of control refers to the number of subordinates or direct reports that a manager or supervisor can effectively oversee. A narrower span (fewer direct reports) typically allows for closer supervision, while a wider span may require more autonomy among subordinates.

In security management, span of control helps determine appropriate team structures and resource allocation, especially in large-scale operations.

A comprehensive contingency planning program consists of:

Emergency Response: Immediate actions during a crisis to protect life and property.

Crisis Management: Command structure and coordination during an event.

Business Continuity: Efforts to maintain or quickly restore essential functions.

Together, these components form a resilient framework for organizational preparedness.

In risk evaluation, vulnerability refers to the state of being open or susceptible to harm, damage, or exploitation. It identifies weaknesses in systems, processes, or human behavior that can be taken advantage of by a threat. In Human Resource and organizational risk management, vulnerabilities may include lack of training, poor supervision, weak policies, or gaps in security awareness among employees. These weaknesses increase the chances that a threat can successfully cause harm. A threat represents a potential danger, likelihood measures the probability of occurrence, and criticality reflects the importance of assets or operations. However, vulnerability specifically focuses on exposure to risk. Understanding vulnerabilities allows HR and management to implement targeted controls such as training programs, policy improvements, and monitoring systems to reduce organizational risk and enhance workplace safety.

The prediction of internal crime (e.g., theft, fraud) heavily relies on historical data to identify patterns, vulnerable departments, and recurring behaviors. This data-driven approach informs proactive security strategies.

A (Background checks) are preventive, not predictive.

B and C offer useful insights but are not the primary basis for trend analysis.

A bidder instruction document typically requests verification of a contractor ' s relevant experience and professional licenses. This ensures the vendor is qualified and legally authorized to perform the work.

A, C, and D include valid components but do not reflect the standard combination used for qualification.

The actions described represent risk reduction because the organization is implementing measures to decrease the likelihood and impact of theft rather than eliminating the activity entirely. Moving the coat department, installing surveillance systems, using anti-theft tags, and limiting access to merchandise are all strategies that reduce vulnerability and deter potential offenders. In Human Resource and organizational management, risk reduction is a common approach that balances operational needs with security controls, allowing business activities to continue while minimizing threats. Risk avoidance would involve eliminating the activity altogether, such as no longer selling coats, while risk transfer would involve shifting responsibility, such as through insurance. Risk acceptance would mean taking no action. Therefore, option B is correct because the organization is actively reducing exposure to theft through multiple preventive measures.

The accounting or finance department typically has oversight of all monetary assets, including cash flow, budgets, payroll, and financial reporting. This central role makes it particularly vulnerable to internal fraud, embezzlement, and cybercrime. Security measures here often include both physical controls and procedural checks (e.g., audits, access controls, separation of duties).

References from PSP: Organizational Vulnerability – ASIS POA; PSP Study Guide – Internal Threats and Crime Risks

A felony is a serious criminal offense that is punishable by death or imprisonment for more than one year. This classification contrasts with misdemeanors, which are less serious offenses typically punishable by fines or imprisonment of less than one year.

Misdemeanor (D) is a lesser offense.

Corruption (A) can be a felony but is a specific type of offense.

Misguidance (C) is not a recognized legal category.

Comparative fault, also known as comparative negligence, is a legal principle where the plaintiff’s own actions are taken into account when determining liability and awarding damages. If a person contributed to their own injury—e.g., by entering a restricted area—their compensation may be reduced proportionally to their share of fault.

Control tactics (A) and Defensive control (C) relate to use-of-force procedures, not legal doctrines.

Lumen is the unit used to measure the luminous flux or total amount of visible light emitted by a source. It quantifies brightness and is crucial in lighting design for security applications.

A (Pixel) relates to image resolution.

B (Watt) measures energy consumption, not light output.

D (Fresnel) refers to a type of lens used to focus or direct light.

When designing safety and security countermeasures for an existing (especially aging) facility, the first priority for a Physical Security Professional is to assess the current state of physical security. This includes evaluating doors, locks, windows, barriers, structural access points, and environmental design features.

Understanding what currently exists sets the foundation for integrating other systems like fire detection, access control, and intrusion detection.

Fire detection (A) is critical for life safety but not the first step in physical security design.

Access control (B) and intruder detection (D) are components of the overall physical security system and come after baseline evaluation.

After a risk assessment is completed, the first step for a project manager is to create a concept design. This outlines the proposed system and supports budget justification and strategic alignment with management’s objectives. Gaining senior management buy-in is essential before progressing to detailed design or procurement.

A (RFI) may follow concept approval.

C (Construction documents) are created much later.

D (Implementation planning) is dependent on approved design and funding.

A good risk management program incorporates multiple stages:

Identifying risks or vulnerabilities (e.g., threats to assets or processes)

Analyzing risks based on likelihood and potential impact (quantitative or qualitative assessment)

Evaluating and aligning existing or proposed security programs to determine adequacy and needed improvements

All three elements are part of a systematic approach to managing security and organizational risk effectively.

References from PSP: Risk Management Process – ASIS POA; PSP Study Manual – Security Program Development

Private security functions are generally client-centered—focused on protecting the assets, people, and interests of a private entity or organization. In contrast, public law enforcement is tasked with serving the community at large, maintaining public order, and enforcing laws for societal benefit.

This fundamental difference in mission and orientation underpins many of the operational and strategic differences between the two sectors.

Legal encyclopedias are comprehensive reference works that summarize legal principles and doctrines across a wide range of topics. They often include discussions of cases where these principles apply and are used by legal professionals to understand broad areas of law before delving into specific statutes or case law.

Legal document (B) is a broad term and not specific to educational or reference materials.

Formal memorandum (C) is used for legal opinion or communication, not for general legal research.

Quantitative analysis involves the use of numeric data to evaluate system performance. In Intrusion Detection Systems, metrics such as Probability of Detection (PD), False Alarm Rate (FAR), and Nuisance Alarm Rate (NAR) are used to objectively measure system effectiveness.

A and C are more subjective or observational.

B (Theoretical) implies modeling, not actual data evaluation.

Alarm monitoring systems are categorized into central station systems, local systems, proprietary systems, and auxiliary systems. Each system involves different methods of signal transmission and monitoring, including third-party monitoring centers or direct links to authorities.

Project specifications primarily define what a system is expected to achieve rather than focusing only on cost, testing, or technical tolerances. Performance expectations are a critical component because they clearly describe how the system should function under specific conditions, including effectiveness, reliability, and operational outcomes. In Human Resource and organizational management, defining performance expectations ensures that all stakeholders, including employees, contractors, and management, understand the required standards and objectives. This clarity supports accountability, proper training, and effective evaluation of system success. While testing specifications and equipment tolerances are important technical details, they support performance rather than define the overall system purpose. Cost is also a separate consideration. Therefore, option D is correct because performance expectations form the foundation of a well-defined project specification.