ASIS-PSP ASIS Physical Security Professional (PSP) Exam Free Practice Exam Questions (2026 Updated)

Insurance companies provide coverage based on actuarial calculations that allow them to remain profitable. The total amount of premiums collected across all policyholders must exceed the total claims paid. Therefore, the estimated value of all losses across a pool of insured clients is generally less than or balanced with the total premiums collected, ensuring profitability and sustainability for the insurer.

References from PSP: ASIS POA – Insurance Principles and Economics; PSP Manual – Underwriting and Risk Pooling Concepts

Electronic Article Surveillance (EAS) systems are commonly used in retail environments to prevent theft. These systems often use VHF, microwave, or other radio frequencies to detect tagged merchandise. When someone attempts to exit the store without deactivating the tag, the system sets off an alarm.

A (Point-of-sale surveillance) involves video and transaction monitoring.

C (Dual detector) refers to motion detection in security systems.

D (Magnetometer) is used for metal detection, not retail theft prevention.

A security survey is a detailed, on-site examination of an organization’s premises, operations, procedures, and systems. Its purpose is to identify weaknesses, evaluate risks, and recommend countermeasures. It includes physical inspection, interviews, documentation reviews, and testing of current security controls.

This is distinct from a risk analysis (which is more data-focused) or a performance audit (which evaluates outcomes rather than vulnerabilities).

References from PSP: Physical Security Assessment – ASIS POA; PSP Certification Study Manual – Domain 1

To qualify for a physical security project, prospects are typically required to submit a bidder’s questionnaire because it provides structured and standardized information about the company’s capabilities, experience, resources, and compliance with project requirements. In procurement and Human Resource management practices, this document helps organizations evaluate whether a bidder is technically and operationally capable of performing the work. It ensures fairness, consistency, and transparency in the selection process by allowing all bidders to be assessed against the same criteria. While customer references and executive biographies provide useful background information, they are not as comprehensive or standardized. An intent-to-bid letter only indicates interest, not qualification. Therefore, the bidder’s questionnaire is the most appropriate tool for determining eligibility and suitability for a security project, making option C the correct answer.

The most effective approach to risk management emphasizes proactive measures taken before a loss occurs. Implementing an efficient before-the-loss arrangement involves:

Identifying potential threats and vulnerabilities

Prioritizing assets and exposures

Designing protective measures and contingency plans

Allocating resources to minimize potential operational, financial, and safety impacts

Reactive measures, such as arranging after-the-loss recovery or focusing exclusively on loss-prevention techniques, do not comprehensively address risk and may leave organizations exposed. Calculated-risk theory provides a framework for decision-making but must be applied within a before-the-loss strategy to optimize mitigation and resource allocation.

This aligns with ASIS PSP guidance, which underscores the importance of anticipating risks and implementing protective measures in advance rather than relying primarily on post-loss actions.

Under the pure comparative negligence approach, a plaintiff can recover damages even if they were primarily responsible for their own injury. For example, if the plaintiff was 90% at fault, they could still recover 10% of the damages from the defendant. This model allows for partial recovery based on proportional fault, regardless of the level of the plaintiff’s responsibility.

50/50 rule and 51 percent rule prevent recovery when the plaintiff is found equally or more at fault.

JPEG, MPEG, Wavelet, and H-263 are all video compression standards or techniques used to reduce the size of digital video files while maintaining acceptable quality. Compression is essential in organizational environments because it allows efficient storage, faster transmission, and easier management of video data, especially in security systems such as surveillance and monitoring. From a Human Resource and operational management perspective, efficient video compression supports better use of technological resources, reduces storage costs, and ensures that security personnel can quickly access and review footage when needed. These formats do not represent storage devices, transmission methods alone, or signal types; instead, they define how video data is encoded and compressed. Therefore, option B is correct because all listed technologies are forms of video compression.

An Uninterruptible Power Supply (UPS) is the best solution to immediately mitigate the risk of power loss in a computer. It provides backup power instantly upon power failure, allowing safe shutdown or continued operation for a limited period.

A (Surge protector) protects against voltage spikes but doesn’t provide backup power.

C (Emergency generator) has a startup delay and is more suitable for large systems.

D (Batteries) are components of a UPS, not a standalone mitigation.

When selecting countermeasures, the most important factor is the overall risk posed to the asset or operation. This includes both the likelihood of a threat and the potential impact. Cost, criticality, and probability are components of the risk equation but are not stand-alone decision criteria.

A (Cost) is important for feasibility but follows risk evaluation.

B (Probability) and C (Criticality) contribute to risk but don’t outweigh it individually.

Gopher is a hypertext-based information retrieval tool that predates the World Wide Web. It uses a series of text-based menus to allow users to navigate and access various types of textual information hosted on servers. It was one of the first attempts at organizing and accessing online information in a user-friendly way.

Consortium (A) refers to a group or association, not a technology.

Hyper-text based tool (B) is descriptive but not the specific name of the system.

Symantec (C) is a cybersecurity software company, unrelated to menu-based text access systems.

Capacitance proximity sensors detect changes in electrical capacitance, which can be influenced by environmental conditions. Changes in relative humidity can affect the dielectric properties of the air or materials nearby, potentially causing false alarms or degraded performance.

B (Temperature) and C (Air movement) typically affect other sensor types (e.g., infrared or ultrasonic).

D (End-of-line resistance) applies to alarm circuit supervision, not proximity sensing.

The most widely accepted classification of leadership skills includes:

Conceptual skills: Ability to think abstractly and see the " big picture "

Human relations skills: Interpersonal and communication capabilities

Technical skills: Expertise and proficiency in specific tasks

These skill sets are collectively known as the " skill mix " and are essential for effective security leadership.

An initial threat or hazard evaluation must include an assessment of how likely each threat is to occur. This probability, when combined with impact analysis, forms the foundation for risk assessments. Understanding likelihood allows prioritization of mitigation strategies.

A (Estimate costs) and C (Develop business case) are later steps.

D (Develop response plan) comes after risk characterization.

Cost-benefit analysis should be conducted whenever there is a major change or at least once a year to ensure that organizational decisions remain effective and aligned with current conditions. In Human Resource and organizational management, regular evaluation helps assess whether investments in security, personnel, training, and systems continue to provide value relative to their cost. Annual reviews allow management to adjust strategies based on changing risks, workforce needs, and operational priorities. Waiting longer periods, such as two or three years, may result in outdated decisions and inefficient resource allocation. Conducting the analysis too frequently may not provide meaningful changes unless significant updates occur. Therefore, performing a cost-benefit analysis annually, in addition to major changes, ensures continuous improvement, accountability, and effective use of organizational resources, making option A the correct answer.

Security consultants are often retained to provide strategic input on staffing needs, policy design, and technology integration. Their advice helps organizations make informed decisions regarding the deployment of personnel, the structure of policies, and the selection of physical and electronic security systems.

In loss prevention, the “common denominator” refers to a recurring factor or condition that presents an opportunity for theft, such as lack of supervision, poorly designed procedures, or inadequate physical security. Identifying and addressing these common denominators can significantly reduce incidents of pilferage or loss.

Low deterrence (A) is a result, not a proactive factor.

Confusion (B) may contribute but isn’t the primary concept here.

Reduced pilfering (D) is an outcome, not an ingredient.

An Invitation to Bid (ITB) is typically used when the buyer has clearly defined requirements and a good understanding of the market offerings. It focuses on obtaining competitive pricing for known solutions and is suitable for well-specified projects where minimal deviation is expected.

B (Request for proposals) is used when buyer needs input on how to meet requirements.

C (Sole source) limits competition and is only used under specific conditions.

D (Request for quote) is generally used for lower-cost, commodity items.

A Business Impact Analysis (BIA) identifies critical functions and assesses the financial and operational impact of business disruptions. It helps prioritize recovery efforts and supports continuity planning by quantifying potential losses.

Enterprise impact analysis (A) and Managerial impact analysis (B) are not formal terms.

Critical process impact (C) is a component considered in the BIA but not the term itself.

The correct answer is B. The legal, statutory, and regulatory impacts of capturing this type of data or information.

In the ASIS PSP Body of Knowledge, video surveillance is specifically included under electronic security systems. The PSP Body of Knowledge also identifies legal and regulatory considerations for security applications, including video surveillance, privacy issues, personally identifiable information, and life safety.

Video surveillance captures images of people, activities, movements, and sometimes sensitive operational details. Before deploying cameras, the security professional must evaluate whether recording is legally permitted, what notices are required, where cameras may or may not be placed, how long recordings may be retained, who may access the footage, and whether privacy or labor rules apply.

Option A is important because recorded video must be protected from unauthorized access, but storage security comes after determining whether the organization is legally permitted to capture and retain the footage. Option D is also relevant, especially in workplaces, but employee privacy expectations are part of the broader legal and regulatory evaluation. Option C is a business benefit, not the primary security or compliance concern.

Therefore, the most important factor to evaluate when considering video surveillance is B.