Free ASIS ASIS-PSP Practice Exam with Questions & Answers | Set: 8

A catastrophic virus causes widespread and often irrecoverable damage to data on a system and its connected devices. Such viruses are designed to rapidly corrupt, delete, or overwrite data, leading to system failure and loss of operational capability.

Innocuous Bug (A) implies minimal or no harm.

Hostile worm (C) can be destructive but is not a defined term for this scenario.

Trojan Horse (D) is deceptive but does not usually cause sudden widespread destruction immediately.

Comprehensive Detailed Explanation:

A Business Impact Analysis (BIA) identifies and prioritizes critical business functions that are essential to the survival and continuity of operations. The results of the BIA help guide recovery strategies, resource allocation, and business continuity planning.

A (Budget) and B (Personnel allocation) are determined later, informed by the BIA.

C (Number of hot sites) is a strategic outcome but not the direct purpose of the BIA.

The correct answer is B. Protection in depth.

In a physical protection system, protection in depth means placing multiple protective measures or layers between the adversary and the protected asset. The adversary must defeat or bypass these protective measures in sequence before reaching the target. This may include barriers, locks, access control points, intrusion detection systems, surveillance, delay measures, and response procedures.

This concept is consistent with physical protection system design principles, where protection in depth requires an adversary to avoid or defeat multiple protective devices one after another.

The other options are not the best answer:

A. Redundant protection means using backup or duplicate protective measures, but it does not specifically mean sequential layers.

C. Balanced protection means protection should be consistent across all possible adversary paths, so no weak path is left exposed.

D. Probability of detection refers to the likelihood that an adversary action will be detected.

Therefore, the correct PSP-relevant answer is B. Protection in depth.

Risk avoidance means eliminating a threat entirely by discontinuing the activity or removing the condition that creates the risk. For example, if transporting valuable goods through a high-risk area poses too much danger, a company might choose to stop shipments through that route altogether.

References from PSP: Risk Treatment Options – ASIS POA; PSP Study Guide – Security Strategy Planning

Communism promotes state or collective ownership of property as a political and economic ideology. Radical Islam, while it may advocate for community-oriented economic practices (e.g., zakat, or almsgiving), does not follow the same foundational principles of property ownership as communism. The idea of " sharing property " in radical Islam is not analogous to " common property " in communism.

" As-built " drawings are finalized versions of project design plans that reflect any changes or deviations made during installation or construction. They are essential for future maintenance, troubleshooting, and upgrades, and are a standard deliverable at project completion.

A (Archival) and B (Post-construction) are not formal document types.

C (Floorplan) is a general drawing, not specific to project finalization.

Quantitative analysis involves the use of numeric data to evaluate system performance. In Intrusion Detection Systems, metrics such as Probability of Detection (PD), False Alarm Rate (FAR), and Nuisance Alarm Rate (NAR) are used to objectively measure system effectiveness.

A and C are more subjective or observational.

B (Theoretical) implies modeling, not actual data evaluation.

Comprehensive Detailed Explanation:

Microwave sensors, which work by emitting electromagnetic waves and detecting changes in the reflected signal, are most effective when a target moves laterally (side-to-side) across the detection zone. This movement creates the greatest frequency shift (Doppler effect), making it easier for the sensor to detect motion.

Movement directly toward or away (C) causes minimal frequency change and can go undetected.

Speed (B or D) matters, but direction relative to the sensor is the key factor for detection efficiency.

Security consultants are often retained to provide strategic input on staffing needs, policy design, and technology integration. Their advice helps organizations make informed decisions regarding the deployment of personnel, the structure of policies, and the selection of physical and electronic security systems.

The correct answer is B. The legal, statutory, and regulatory impacts of capturing this type of data or information.

In the ASIS PSP Body of Knowledge, video surveillance is specifically included under electronic security systems. The PSP Body of Knowledge also identifies legal and regulatory considerations for security applications, including video surveillance, privacy issues, personally identifiable information, and life safety.

Video surveillance captures images of people, activities, movements, and sometimes sensitive operational details. Before deploying cameras, the security professional must evaluate whether recording is legally permitted, what notices are required, where cameras may or may not be placed, how long recordings may be retained, who may access the footage, and whether privacy or labor rules apply.

Option A is important because recorded video must be protected from unauthorized access, but storage security comes after determining whether the organization is legally permitted to capture and retain the footage. Option D is also relevant, especially in workplaces, but employee privacy expectations are part of the broader legal and regulatory evaluation. Option C is a business benefit, not the primary security or compliance concern.

Therefore, the most important factor to evaluate when considering video surveillance is B.