ASIS-PSP Exam Dumps - Physical Security Professional (PSP) Exam

The correct answer is D. On-the-job training.

In the ASIS PSP Body of Knowledge, implementation of physical security measures includes developing requirements for security personnel, including roles, responsibilities, professional development, training, certification, post orders, and special orders.

The ASIS Private Security Officer Selection and Training Guideline defines training as a method or process of instruction used to make a person fit, qualified, or proficient. It also emphasizes that security officers should demonstrate their ability through written and/or performance examinations.

On-the-job training best promotes transfer of learning because the student applies the instructor’s guidance directly in the real working environment. It connects knowledge with actual protection officer duties, procedures, patrol expectations, emergency response actions, access control practices, and site-specific post orders.

Lecture, case studies, and literature reviews can support learning, but they are less direct. Lecture mainly gives information, case studies improve judgment, and literature reviews build background knowledge. However, on-the-job training provides practical application, immediate feedback, and performance-based learning.

Therefore, the best answer is D. On-the-job training.

The prediction of internal crime (e.g., theft, fraud) heavily relies on historical data to identify patterns, vulnerable departments, and recurring behaviors. This data-driven approach informs proactive security strategies.

A (Background checks) are preventive, not predictive.

B and C offer useful insights but are not the primary basis for trend analysis.

An “innocuous virus” is not a formally recognized type of computer virus. All viruses, by definition, are considered malicious because they replicate without authorization and potentially cause harm, whether immediate or latent.

Common types of viruses include:

Humorous (B): A virus designed to prank users without causing real harm (e.g., funny messages).

Hostile (C): Actively destructive or malicious.

Altering (D): Modifies system files or behaviors.

" Innocuous virus " (A) is a misnomer, making it the correct choice as " not " a virus type.

Worms are a form of malware that replicate and spread through networks. In doing so, they consume system memory and processing resources, which can result in performance degradation or denial of service for legitimate applications and users. Some worms are specifically designed to exhaust system memory.

A security survey is a detailed, on-site examination of an organization’s premises, operations, procedures, and systems. Its purpose is to identify weaknesses, evaluate risks, and recommend countermeasures. It includes physical inspection, interviews, documentation reviews, and testing of current security controls.

This is distinct from a risk analysis (which is more data-focused) or a performance audit (which evaluates outcomes rather than vulnerabilities).

References from PSP: Physical Security Assessment – ASIS POA; PSP Certification Study Manual – Domain 1

Security standards typically require that any opening in a perimeter (e.g., HVAC ducts, pipe chases, vents) be lockable or otherwise protected if the cross-sectional area is 96 square inches or greater. This threshold is based on a size that could permit unauthorized entry or object passage.

A, B, and D are incorrect measurements based on security industry benchmarks.

For confined interior areas containing explosive vapors or materials, non-emitting sensors are preferred to avoid ignition risk. Passive Infrared (PIR) sensors are ideal in such environments because they detect heat signatures (infrared energy) emitted by intruders without emitting any signals or energy that could trigger an explosion.

A (Ultrasonic) and C (Capacitance) sensors emit signals.

D (Passive vibration sensors) detect vibration and are used in a different context, like surface tampering.

The first step in a risk analysis is to identify or recognize potential threats. Before assessing vulnerabilities or selecting countermeasures, a security practitioner must know what they are defending against. This forms the foundation for the rest of the risk assessment process.

A (Selecting countermeasures) is done after analyzing risks.

B (Vulnerability assessment) follows threat identification.

C (Determining costs) happens later in the risk evaluation phase.