Pass the ASIS Physical Security Professional ASIS-PSP Questions and answers with ExamsMirror

Quantitative analysis involves the use of numeric data to evaluate system performance. In Intrusion Detection Systems, metrics such as Probability of Detection (PD), False Alarm Rate (FAR), and Nuisance Alarm Rate (NAR) are used to objectively measure system effectiveness.

A and C are more subjective or observational.

B (Theoretical) implies modeling, not actual data evaluation.

Physical barriers are designed to defend against three main penetration techniques:

Stealth: Unauthorized entry without detection.

Deception: Gaining access through trickery or impersonation.

Force: Physical breaching of barriers or using tools or vehicles to gain entry.

Security systems are designed to detect and delay each of these methods effectively.

A and B mix categories inaccurately.

C (Vehicle) is a tool/method of force, not a category on its own.

Best practices for data backup recommend redundancy and geographical separation to ensure recovery in various disaster scenarios. Ideally, four sets of backup files should be maintained:

One on-site for quick access and recovery,

Three off-site (including possibly in different physical locations or cloud storage) for protection against local disasters like fire or floods.

Comprehensive Detailed Explanation:

Nuisance alarm rate is a measure of system reliability and is calculated by tracking the number of false or unwanted alarms over a specified time. This metric is crucial for tuning sensor performance and reducing unnecessary responses.

A, B, and C provide insights but are not standard methods of calculating nuisance alarm rate.

Infrared beam sensors are typically used to detect movement across open areas and are line-of-sight devices. They are not well-suited for enclosed or small, solid objects like safes. They can be easily bypassed or may not be triggered when tampering with a safe that doesn’t break the beam.

A, B, and D are more effective around physical objects:

Capacitance can detect touch or presence.

Microwave can detect motion or disturbance.

Fiber optic cable can detect physical interaction or tampering.

A Change Review Board (CRB) is typically composed of key stakeholders representing the major interests involved in a project—engineering, operations, security, IT, procurement, and other relevant departments. This cross-functional group ensures that proposed changes are reviewed, justified, and approved collaboratively.

A, C, and D list some roles, but they don’t fully represent the project’s key partners in a typical governance model.

A search is a legal and systematic examination of a person, place, or property with the intent to discover evidence of a crime. This must often be supported by probable cause and, in many cases, a warrant.

Examine (A), Test (B), and Research (C) are generic terms that lack the legal context and specificity of "Search."

Comprehensive Detailed Explanation:

The three primary and sequential functions of a Physical Protection System (PPS) are:

Detection – identifying unauthorized activity.

Delay – slowing intruder progress.

Response – intervening before asset compromise.

This layered approach ensures an opportunity to detect and intercept threats before they succeed.

A and D include "deterrence" or "prevention," which are security goals but not primary PPS functions.

C lists valid concepts but omits the critical detection phase.

Organizational levels of terrorism are generally classified into:

Individual Terrorism (Lone-wolf actors)

Group Terrorism (Non-state groups like al-Qaeda, ISIS)

State Terrorism (When a state uses terror tactics on its own or others' populations)

Modern terrorism refers more to the contemporary methods, tools, and global nature of terrorism—not a level of organization. Hence, it's not considered an "organizational level."

A security survey is a detailed, on-site examination of an organization’s premises, operations, procedures, and systems. Its purpose is to identify weaknesses, evaluate risks, and recommend countermeasures. It includes physical inspection, interviews, documentation reviews, and testing of current security controls.

This is distinct from a risk analysis (which is more data-focused) or a performance audit (which evaluates outcomes rather than vulnerabilities).

References from PSP: Physical Security Assessment – ASIS POA; PSP Certification Study Manual – Domain 1