Free ASIS ASIS-PSP Practice Exam with Questions & Answers | Set: 2

The correct answer is C. paracentric.

In PSP physical security knowledge, locks are treated as structural physical security countermeasures, and the PSP Body of Knowledge includes knowledge of locks under physical security measures and countermeasure selection.

A paracentric keyway is a lock keyway design intended to make picking more difficult by restricting the movement of picking tools inside the keyway. It uses complex warding/projections in the keyway so that manipulating the pins becomes harder. ScienceDirect describes paracentric keyways as designs that frustrate picking attempts by making manipulation of pin tumblers to the shear line more difficult.

The other choices are incorrect because spool, mushroom, and serrated are types of security pins used inside lock cylinders, not keyway designs.

Therefore, the correct answer is C. paracentric.

The best way to express the impact of a risk in business terms is through monetary value. This allows decision-makers to understand the financial consequences of threats and justify investments in controls or mitigation strategies. Assigning a dollar value helps in prioritizing risks and performing cost-benefit analyses.

B (Cost-benefit ratio) is used in analysis, not direct impact expression.

C (Downtime estimate) is useful, but only a part of financial impact.

D (Frequency graph) represents likelihood, not impact.

Privacy invasion is a legal or ethical issue, not a type of insurance policy. Common types of insurance relevant to security include:

Fidelity Bonds: Cover losses due to employee dishonesty

Surety Bonds: Provide financial assurance that obligations will be fulfilled

3-D (Dishonesty, Disappearance, and Destruction) Policies: Provide broader coverage for internal and external crimes

Privacy-related issues may be addressed under cyber liability or data breach insurance but not as a standalone policy called “Privacy Invasion.”

Insurance is not a substitute for a security program. It only compensates for loss after it occurs and does not prevent incidents. A comprehensive security program includes preventive measures such as access control, surveillance, personnel training, and emergency planning, which work in tandem with insurance as part of a broader risk management strategy.

References from PSP: ASIS POA – Insurance vs. Security Controls; PSP Study Guide – Prevention vs. Compensation

Under the 50/50 rule (also known as the " modified comparative negligence " rule), the plaintiff may recover damages only if they are 50% or less at fault. If the plaintiff ' s fault is more than 50%, they cannot recover any damages. Therefore, a person responsible for more than 50% of the negligence would be barred from recovery.

Comprehensive Detailed Explanation:

Pandemics primarily impact human health and workforce availability rather than directly damaging physical infrastructure. The effects on infrastructure are typically secondary, such as reduced staffing at utilities or service providers, rather than structural destruction (as in natural disasters).

Infrastructure remains physically intact, but operations may be disrupted due to workforce shortages.

An operational audit is a continuous and comprehensive review of all facets of the security operation. It evaluates whether security procedures are functioning as intended and whether resources are being used efficiently. This process identifies inefficiencies, policy violations, or procedural weaknesses over time.

References from PSP: ASIS POA – Security Operations Review; PSP Study Manual – Domain 3: Operations and Program Evaluation

Warm sites are backup facilities that are partially equipped and can be brought online relatively quickly in the event of a disaster. They typically have necessary infrastructure (e.g., power, networking) and some hardware but are missing the primary computer systems or up-to-date data.

Hot sites (A) are fully configured and ready for immediate use.

Cold sites (C) are empty facilities with just space and basic utilities.

Frequent sites (D) is not a recognized term.

Conditional honesty is a behavior pattern where a person acts honestly primarily due to the fear of being caught or facing consequences. Unlike integrity, which is internal and moral-based, conditional honesty is external and consequence-based. It is considered a product of reasoning and is a key concept in evaluating personnel risk in security-sensitive roles.

A comprehensive contingency planning program consists of:

Emergency Response: Immediate actions during a crisis to protect life and property.

Crisis Management: Command structure and coordination during an event.

Business Continuity: Efforts to maintain or quickly restore essential functions.

Together, these components form a resilient framework for organizational preparedness.