[Oct-2026] ASIS-PSP Questions - Truly Beneficial For Your ASIS Exam [Q30-Q45]

Rate this post

[Oct-2026] ASIS-PSP Questions – Truly Beneficial For Your ASIS Exam

Download ASIS ASIS-PSP Sample Questions

ASIS ASIS-PSP Exam Syllabus Topics:

Section	Weight	Objectives
Implementation of Physical Security Measures	31%	– Operational management and maintenance 1. Training and awareness programs 2. Operating procedures and policies 3. Emergency and incident response 4. Maintenance and lifecycle management – Procurement and contracting 1. Vendor selection and evaluation 2. Bid and proposal management 3. Contract administration – Project management and deployment 1. Installation and quality assurance 2. Implementation planning and scheduling 3. Personnel and resource coordination
Physical Security Assessment	34%	– Threat, vulnerability and impact analysis 1. Impact and consequence assessment 2. Threat and hazard identification 3. Vulnerability evaluation – Assessment planning and preparation 1. Risk assessment models and methodologies 2. Asset identification and classification 3. Qualitative and quantitative analysis methods – Risk evaluation and reporting 1. Risk prioritization 2. Countermeasure recommendation 3. Assessment documentation
Application, Design, and Integration of Physical Security Systems	35%	– Security technology selection and integration 1. Video surveillance systems 2. Protective barriers and perimeter security 3. Access control systems 4. Intrusion detection and alarm systems – System specification and documentation 1. Technical specifications and drawings 2. Integration with other systems 3. Testing, acceptance and commissioning – System design requirements 1. Security objectives and performance criteria 2. Crime Prevention Through Environmental Design (CPTED) 3. Regulatory and compliance standards

Section

Weight

Objectives

Implementation of Physical Security Measures

31%

– Operational management and maintenance

1. Training and awareness programs
2. Operating procedures and policies
3. Emergency and incident response
4. Maintenance and lifecycle management

– Procurement and contracting

1. Vendor selection and evaluation
2. Bid and proposal management
3. Contract administration

– Project management and deployment

1. Installation and quality assurance
2. Implementation planning and scheduling
3. Personnel and resource coordination

Physical Security Assessment

34%

– Threat, vulnerability and impact analysis

1. Impact and consequence assessment
2. Threat and hazard identification
3. Vulnerability evaluation

– Assessment planning and preparation

1. Risk assessment models and methodologies
2. Asset identification and classification
3. Qualitative and quantitative analysis methods

– Risk evaluation and reporting

1. Risk prioritization
2. Countermeasure recommendation
3. Assessment documentation

Application, Design, and Integration of Physical Security Systems

35%

– Security technology selection and integration

1. Video surveillance systems
2. Protective barriers and perimeter security
3. Access control systems
4. Intrusion detection and alarm systems

– System specification and documentation

1. Technical specifications and drawings
2. Integration with other systems
3. Testing, acceptance and commissioning

– System design requirements

1. Security objectives and performance criteria
2. Crime Prevention Through Environmental Design (CPTED)
3. Regulatory and compliance standards

NO.30 The ongoing task of security management is to identify potential areas of loss and to develop and install appropriate security countermeasures, this process is called ______________.

Risk management

Risk Analysis

Security Reimbursement

Business Evaluation

Risk management is the continuous and proactive process of identifying areas where a business may suffer losses, assessing the likelihood and potential impact of those losses, and implementing security countermeasures to minimize or eliminate them. This function ensures that organizational assets-people, property, and information-are protected against threats such as theft, sabotage, natural disasters, and operational failures.
References from PSP: ASIS POA – Risk Management; PSP Study Guide – Physical Security Assessment Domain

NO.31 Effective protective systems integrate each of the following supporting elements except:

The assets to be protected, the threat to those assets, and the applicable risk levels

Terrorism countermeasures that protect assets against terrorist attacks

Procedural security measures including procedures in place before an incident and those used in response to an incident

Physical protective measures including barriers, lighting, and electronic security systems

While terrorism countermeasures can be part of a broader protective strategy, they are not a core element in every protective system. Effective protective systems are designed based on specific threats and assets and typically integrate:
Physical measures (barriers, lighting)
Procedural measures (policies, response plans)
Threat/asset/risk alignment (A)
Terrorism countermeasures are highly specialized and situational-they are not a universal element in all protective systems, particularly for facilities not at risk of terrorism.
References:
PSP Study Guide – Risk-Based Security Design
ASIS Guidelines – Integrated Security Systems

NO.32 A threat source differentiates the potential of one facility to be attacked versus another in a different location.
This activity is referred to as:

Targeting

Motivation

Collusion

Desire

Targeting refers to the process by which a threat actor selects a specific facility or asset based on attractiveness, vulnerabilities, symbolic value, or opportunity. This helps differentiate why one location may be more likely to be attacked than another.
Motivation (B) refers to the reason behind the attack.
Collusion (C) involves cooperation between insiders.
Desire (D) is a psychological element, not an operational step.
References:
PSP Study Guide – Threat and Risk Assessment
POA Manual – Threat Profiling and Asset Targeting

NO.33 In communism, class struggle results in overthrowing capitalism and in radical Islam, faith struggle results in overthrowing of Russian capitalist society.

True

False

In communism, the overthrow of capitalism is based on class struggle between the proletariat and bourgeoisie.
Radical Islam is not centered around class conflict but rather on religious ideology and perceived moral decay. While radical Islamists may oppose Western or Russian systems, it is not explicitly framed as a class- based struggle akin to Marxist theory.
References:
ASIS International, POA, Chapter: Terrorism Ideologies
Comparative Political Systems and Ideologies, International Security Studies

NO.34 What scrambles the information so that it is not usable unless the changes are reversed?

Distraction

Disgruntling

Falsification

Encryption

Encryption is a method of converting readable data into an encoded format using algorithms. Only those with the appropriate decryption key can convert the data back into its original, usable form. It is a primary method for protecting data confidentiality in storage and transmission.
Distraction (A), Disgruntling (B), and Falsification (C) are unrelated to data protection techniques.
References:
PSP Study Guide – Data Protection and Cryptography
ASIS POA Manual – Encryption and Information Assurance

NO.35 Under the principle of agency law, such an assignment transfers the liability for the service from the corporation to the independent contractor with obligations that some cannot be entirely transferred, is called:

Non-delegable duty

Delegable duty

Non-Crime duty

None of the above

A non-delegable duty is a legal responsibility that cannot be entirely transferred to another party (such as an independent contractor) under agency law. While a company may hire third-party providers, the courts often hold that certain responsibilities-particularly those involving safety and legal compliance-remain with the hiring entity. This is particularly significant in the context of security services, where liability can still rest with the client company even if services are outsourced.
Delegable duty (B) is the opposite and not applicable in this context.
Non-Crime duty (C) is not a recognized legal term.
References:
ASIS POA Manual – Liability and Contract Law
PSP Study Guide – Legal Obligations in Contracted Security

NO.36 Preliminary cost estimates are part of which stage in the project management process?

Design

Development

Execution

Feasibility

Preliminary cost estimates are developed during the feasibility phase of a project. These early estimates help determine whether a project is viable and worth pursuing, guiding initial decision-making and budgeting discussions.
A (Design) and B (Development) phases involve more detailed cost estimates.
C (Execution) is when implementation begins, after funding is approved.
References:
PSP Study Guide – Project Phases and Cost Planning
POA Manual – Feasibility Analysis in Project Management

NO.37 Which of eth following is NOT the type of insurance?

Fidelity Bonds

Surety Bonds

3-D policies

Privacy Invasion

Privacy invasion is a legal or ethical issue, not a type of insurance policy. Common types of insurance relevant to security include:
Fidelity Bonds: Cover losses due to employee dishonesty
Surety Bonds: Provide financial assurance that obligations will be fulfilled
3-D (Dishonesty, Disappearance, and Destruction) Policies: Provide broader coverage for internal and external crimes Privacy-related issues may be addressed under cyber liability or data breach insurance but not as a standalone policy called “Privacy Invasion.”

NO.38 A miscellaneous opening that penetrates a perimeter must be protected and able to be locked when the cross- section area is at least:

76 square inches (490 square centimeters)

92 square inches (594 square centimeters)

96 square inches (619 square centimeters)

108 square inches (697 square centimeters)

Security standards typically require that any opening in a perimeter (e.g., HVAC ducts, pipe chases, vents) be lockable or otherwise protected if the cross-sectional area is 96 square inches or greater. This threshold is based on a size that could permit unauthorized entry or object passage.
A, B, and D are incorrect measurements based on security industry benchmarks.
References:
PSP Study Guide – Perimeter Protection Standards
POA Manual – Barrier Design and Access Point Control

NO.39 Which of the following is the type of comparative negligence statute?

Pure approach

50/50 rule

51 percent rule

All of the above

NO.40 The system which provides an extra measure of security by requiring that exchanges take place at the entrance to each restricted area within the controlled area is called:

Single pass system

Contractive pass system

Pass-exchange system

Multiple-pass system

The Pass-Exchange System enhances security by requiring that the employee exchanges one pass for another at a control point before entering a more secure or restricted area. This ensures that access is tightly monitored and controlled on a zone-by-zone basis.
References:
ASIS International, Protection of Assets (POA), Chapter: Access Control Systems ASIS PSP Study Manual, Domain 3: Implementation of Physical Security Measures

NO.41 JPEG, MPEG, Wavelet, and H-263 are all forms of video

storage.

compression.

transmission.

signals.

JPEG, MPEG, Wavelet, and H-263 are all video compression standards or techniques used to reduce the size of digital video files while maintaining acceptable quality. Compression is essential in organizational environments because it allows efficient storage, faster transmission, and easier management of video data, especially in security systems such as surveillance and monitoring. From a Human Resource and operational management perspective, efficient video compression supports better use of technological resources, reduces storage costs, and ensures that security personnel can quickly access and review footage when needed. These formats do not represent storage devices, transmission methods alone, or signal types; instead, they define how video data is encoded and compressed. Therefore, option B is correct because all listed technologies are forms of video compression.

NO.42 As part of an initial evaluation of the significant threats or hazards to an organization, the security practitioner should:

Estimate costs

Estimate the likelihood of occurrence

Develop a business case for additional security equipment and staff

Develop a response plan

An initial threat or hazard evaluation must include an assessment of how likely each threat is to occur. This probability, when combined with impact analysis, forms the foundation for risk assessments. Understanding likelihood allows prioritization of mitigation strategies.
A (Estimate costs) and C (Develop business case) are later steps.
D (Develop response plan) comes after risk characterization.
References:
PSP Study Guide – Risk and Threat Assessment Process
POA Manual – Threat Likelihood Estimation

NO.43 A project specification includes, but is not limited to, system requirements that identify:

The cost of the installed system

Testing specifications

Equipment tolerances

Performance expectations

Project specifications define system requirements, including performance expectations such as detection accuracy, response times, image quality, or access control capabilities. These expectations guide vendors in delivering compliant solutions and help measure system acceptance upon completion.
A (Cost) is part of project budgeting, not specifications.
B and C (Testing and tolerances) may be included but are not the core element.
References:
PSP Study Guide – Security System Specification Development
POA Manual – Defining System Requirements in Project Specifications

NO.44 A voluntary and intentional violation by a legally competent parson of a legal duty that commands or prohibits an act for the protection of society is known as:

Corruption

Law-breaking

Fault

Crime

A crime is defined as a voluntary and intentional violation of a law by someone who is legally competent. It involves breaking a legal duty meant to protect society. This can include actions that are prohibited or omissions where action was legally required.
Corruption (A) is a specific type of crime involving abuse of power.
Law-breaking (B) is a general, non-legal term.
Fault (C) is too broad and often used in civil contexts.
References:
ASIS POA Manual – Legal Concepts in Security
PSP Study Guide – Criminal Law Fundamentals

NO.45 An initial system administration training class should be conducted at approximately 30 days:

Before site acceptance testing

After site acceptance testing

Before reliability testing

After reliability testing

System administration training should occur after site acceptance testing (SAT), which confirms that the system performs as specified. At this point, the system is stable and ready for operational use, making it the right time to train administrators on real equipment in a functional environment.
Training before SAT (A or C) risks using incomplete systems.
D (After reliability testing) may delay training unnecessarily.
References:
PSP Study Guide – Security System Implementation and Training
POA Manual – Security Technology Deployment Practices

Loading …