ASIS-PSP Exam Dumps - ASIS Physical Security Professional Questions and Answers

If stairwells are used regularly for inter-floor travel and permitted by local code, the best practice is to maintain both life safety and security. This can be done by installing approved access control devices (e.g., card readers) and two-way communication systems (intercoms) to manage access while allowing emergency use.

A (Fail-secure locks) could pose a safety risk in emergencies.

B (Unlocked doors) may violate building security policies.

C (Selective unlocking) is inconsistent and may cause confusion during emergencies.

Strict liability applies when a manufacturer or service provider is held legally responsible for damages or injuries caused by a defective product or service, regardless of fault or intent. This type of liability is often associated with consumer protection laws, where the focus is on the danger posed to the user rather than negligence on the part of the provider.

Plaintiff (B) is the party bringing the suit.

Defendant (C) is the party being sued.

" None of the above " (D) is incorrect since " Strict liability " is the correct legal principle.

The Edison Electric Institute, in collaboration with the North American Electric Reliability Council (NERC) and the Department of Energy (DOE), developed security guidelines for the protection of the electrical grid. One of the primary components of these guidelines is performing a vulnerability/risk analysis to identify potential weaknesses and assess the impact of threats to the infrastructure.

While threat response and cyber scenarios are part of broader planning, vulnerability/risk analysis is a foundational element.

Emergency detection is important but not a specifically highlighted part of the referenced guidelines.

Communism promotes state or collective ownership of property as a political and economic ideology. Radical Islam, while it may advocate for community-oriented economic practices (e.g., zakat, or almsgiving), does not follow the same foundational principles of property ownership as communism. The idea of " sharing property " in radical Islam is not analogous to " common property " in communism.

A network security policy defines the scope of security measures within an organization’s network. It sets the rules for behavior, outlines acceptable use, identifies protected resources, defines responses to security breaches, and lays out disciplinary measures for violations.

Physical security (A) focuses on tangible access control.

Forensic investigations (C) deal with post-incident evidence gathering.

Spam filtering (D) is a specific technical control, not a policy framework.

The correct answer is C. Performance test.

In PSP physical security system implementation, testing is used to verify whether security equipment and systems meet required performance requirements and success metrics. The ASIS PSP Body of Knowledge includes performance requirements, success metrics, commissioning, final acceptance testing, and life-cycle evaluation as part of physical security system design and implementation.

A performance test determines measurable operating parameters of the system or equipment. For intrusion detection sensors, these parameters can include probability of detection, false alarm rate, nuisance alarm rate, sensitivity, detection coverage, and other measurable performance characteristics. Sandia’s physical security testing guidance also identifies NAR/FAR — nuisance alarm rate/false alarm rate and probability of sensing as key sensor performance metrics collected from test results.

The other options are not the best answer:

A. Safety test focuses on whether testing or equipment creates unsafe conditions.

B. Evaluation test is broader and is used to validate overall PPS effectiveness, not mainly to determine specific parameters like nuisance alarm rate.

D. Post-maintenance test is conducted after maintenance to confirm the system still works properly.

Therefore, the correct answer is C. Performance test.

Risk acceptance is the mitigation option that has no direct cost because the organization chooses to acknowledge the risk without taking additional action to reduce, transfer, or eliminate it. In Human Resource and organizational management, this approach is typically used when the cost of mitigation exceeds the potential impact of the risk or when the risk level is considered minimal. While there may still be indirect consequences if the risk materializes, no immediate financial investment is required to manage it. In contrast, risk avoidance may involve changing operations, risk limitation requires implementing controls and safeguards, and risk transference often includes costs such as insurance or outsourcing. Therefore, option B is correct because risk acceptance does not require upfront expenditure, making it the only option with no direct cost.

Within the PSP framework and project management methodology, the design phase is where technical and cost evaluations are conducted. During this phase, the security system’s requirements are translated into detailed specifications, including system architecture, component selection, and preliminary layouts.

Technical evaluation assesses whether proposed systems, devices, or configurations meet operational and functional requirements, including performance, scalability, and compliance with standards.

Cost evaluation ensures that proposed solutions align with the organization’s budget and provides a basis for cost-benefit analysis.

These evaluations inform decision-making before procurement and installation, reducing risk of over-specification, underperformance, or budget overruns. In contrast, planning defines objectives and scope, procurement executes purchase decisions, and installation implements the system according to the design.

Comprehensive Detailed Explanation:

A security system acceptance test verifies that the system has been installed according to the design and is operating properly. This includes ensuring cameras are correctly aimed, focused, and provide the intended coverage and image quality. This practical verification is critical for performance validation.

B and C may be part of training or specific functionality checks but are not core acceptance test items.

D refers to reliability testing, which is separate from initial acceptance.

Integrity, in the context of information security, refers to ensuring data is accurate, consistent, and unaltered by unauthorized actions. Maintaining integrity prevents data manipulation or corruption, ensuring reliability for organizational decision-making.

Analysis (A) is the process of evaluating data.

Security (C) is a broader term encompassing integrity, confidentiality, and availability.

Availability (D) ensures access but does not guard against data tampering.