Free Practice Questions for ASIS ASIS-PSP Exam

Scavenging refers to the process of retrieving residual data from system memory (such as RAM) or buffers. This data remains until it is overwritten or the system is powered off. Scavenging can be used by attackers to recover sensitive information such as passwords or encryption keys.

Random memory (A) is not a valid term.

Awaiting memory (C) and Search memory (D) are not industry terms.

An “innocuous virus” is not a formally recognized type of computer virus. All viruses, by definition, are considered malicious because they replicate without authorization and potentially cause harm, whether immediate or latent.

Common types of viruses include:

Humorous (B): A virus designed to prank users without causing real harm (e.g., funny messages).

Hostile (C): Actively destructive or malicious.

Altering (D): Modifies system files or behaviors.

" Innocuous virus " (A) is a misnomer, making it the correct choice as " not " a virus type.

Internet Protocol (IP) typically transmits data in packets that have a maximum transmission unit (MTU) of approximately 1,500 bytes (or characters) for standard Ethernet networks. This size ensures compatibility and minimizes fragmentation across various network types.

Options A, B, and D are not consistent with the standardized MTU for IP packets.

The total financial impact of a loss extends beyond the replacement cost of a stolen or damaged item. It includes:

Temporary replacement costs (e.g., rental equipment or substitute materials)

Downtime costs (e.g., loss of production or service disruption)

Discounted or future cash flow losses, such as delayed revenues or lost customers

These hidden or indirect costs can significantly increase the true loss value.

References from PSP: ASIS POA – Total Cost of Loss; PSP Manual – Loss Impact Assessment

Remote access control using CCTV requires two-way communication to authenticate identity, provide instructions, and ensure that individuals requesting entry can be properly engaged. This supports access decisions made by personnel monitoring remotely.

A and D (monitoring and visual analysis) are important but secondary to communication.

C (constant camera display) is inefficient and not a requirement if smart alerting or switching is used.

The correct answer is A. Post.

In the ASIS PSP Body of Knowledge, general, post, and special orders are specifically included under the implementation of physical security measures and requirements for security personnel.

Post orders are written instructions for security officers assigned to a specific post or guard station. They explain the officer’s duties, procedures, responsibilities, emergency actions, reporting requirements, patrol expectations, access control duties, and other site-specific instructions.

The wording in the question closely matches the purpose of post orders because they:

address specific duties or subjects in clear language,

are available at the guard post or guard station,

guide officers during daily operations, and

provide the foundation for site-specific training.

The other options are not the best answer:

Special orders usually address temporary, unusual, or individual assignments.

General orders apply broadly to security personnel and are not usually limited to one guard station.

Standing orders may be continuing instructions, but the site-specific document kept at a guard station for officer duties and training is best described as post orders.

Therefore, the correct answer is A. Post.

Security consultants are often retained to provide strategic input on staffing needs, policy design, and technology integration. Their advice helps organizations make informed decisions regarding the deployment of personnel, the structure of policies, and the selection of physical and electronic security systems.

Comprehensive Detailed Explanation:

A core element of an effective key control policy is ensuring accountability for all keys. This includes maintaining logs, conducting regular audits, and verifying that issued keys are returned or accounted for. This reduces the risk of unauthorized access and is fundamental in access control strategies.

A and C are arbitrary numeric limits and not standard policy practice.

D may be part of policy but is not as critical as ongoing accountability.

Comprehensive Detailed Explanation:

In a cost-benefit analysis for physical security systems, the total cost must account for:

Acquisition cost: Initial purchase and installation.

Life cycle cost: Operating, maintenance, support, and energy use over time.

Replacement cost: Cost to replace or upgrade the system at end-of-life.

These factors give a comprehensive view of the true investment required, rather than just the initial purchase.

B and C partially include relevant elements, but only A captures the full scope.

D misses the operational costs involved in life cycle consideration.

An auxiliary alarm system uses a direct connection (usually via leased lines) to a public emergency service center, such as police, fire, or 911. This provides rapid response but limits control to only the responding agencies, unlike proprietary or central station systems.