ULTIMATE California
BSIS Locksmith &
Access Control Test
Bank | NFPA, OSDP, &
ALOA Master Keying |
Elite Q&A
Table of Contents
1. PART I: THE PREVIEW
2. PART II: THE ELITE TEST BANK
○ Tier 1: Foundational Syntax & Application (Questions 1–18)
○ Tier 2: Complex Application & Simulation (Questions 19–37)
○ Tier 3: Grandmaster Synthesis (Questions 38–55)
PART I: THE PREVIEW
Mastering this test bank translates directly to elite operational competence, ensuring flawless
compliance with California regulations and global life safety codes. By isolating the exact
variables that govern mechanical security, access control, and legal liability, you will forge an
infallible diagnostic methodology that distinguishes apex practitioners from novice technicians.
The "Critical Axioms" Cheat Sheet
● The Regulatory Supremacy Rule: Under California Business and Professions Code
(BPC) 6980, strict liability governs licensure, operations, and identification; unlicensed
activity carries a $10,000 fine, and criminal convictions trigger automatic suspension
mechanisms.
● The SFIC Mathematical Matrices: Small Format Interchangeable Cores require exact
algebraic precision where the control shear line is artificially elevated by a specific
constant based on the system architecture.
,SFIC System Type Operating Increment Control Pin Formula Top Pin Formula
Constant Constant
BEST A2 .0125" + 10 23
BEST A3 .018" +7 16
BEST A4 .021" +6 14
● The NFPA 80 Positive Latching Mandate: Fire-rated swinging doors must perpetually
maintain compartmentalization; electrified hardware on fire doors must irrevocably default
to a fail-secure state to guarantee positive latching during a conflagration.
● The Access Control Cryptographic Imperative: Legacy Wiegand protocols transmit
unencrypted, unidirectional data susceptible to relay attacks, whereas OSDP v2
mandates bidirectional RS-485 topology and AES-128 encryption via the Secure Channel
Block (SCB).
● The Life Safety Egress Hierarchy: The International Building Code (IBC) strictly
separates egress restrictions; delayed egress requires a 15-second irreversible timer,
sensor-release mechanisms require redundant manual push buttons, and clinical
containment (Group I-2) demands immediate unlocking upon fire alarm or power loss.
PART II: THE ELITE TEST BANK
Tier 1: Foundational Syntax & Application
Q1: An applicant submits their Live Scan fingerprints and application fees to the Bureau of
Security and Investigative Services (BSIS) to work for a licensed locksmith company. They
receive a temporary registration card. According to California Title 16 CCR, what is the
MAXIMUM duration this temporary registration remains valid before requiring official
intervention by the Director? A) 30 days B) 60 days C) 120 days D) 180 days
● Answer: C (120 days)
● Distractor Analysis:
○ A is incorrect: The 30-day timeframe legally governs the notification period required
when a corporation changes its officers or partners, rather than the operational
validity of an employee's temporary registration.
○ B is incorrect: A 60-day period represents the final delinquency grace period
allowed for submitting a renewal application before a registration is permanently
canceled by the state.
○ D is incorrect: The 180-day figure is an arbitrary extension that fundamentally
conflicts with the strict background processing deadlines mandated by the Bureau
for temporary field workers.
The Mentor's Analysis: Title 16 CCR strictly caps temporary locksmith employee registrations at
exactly 120 days to allow the Department of Justice and FBI criminal background reviews to
process without granting indefinite loopholes to unlicensed workers. By utilizing this specific
window, companies maintain workflow legally while the state evaluates the applicant's moral
turpitude. Professional Intuition: Always monitor the 120-day hard deck; deploying a
technician on day 121 without a permanent card constitutes an actionable misdemeanor.
Q2: A licensed California locksmith discovers their BSIS-issued pocket identification card was
destroyed while on a job site. According to Title 16 CCR Section 608.3, which sequence of
actions is the FIRST legal requirement to maintain compliance? A) Immediately cease all
, locksmithing duties until a physical replacement card arrives in the mail from Sacramento. B)
Submit a secondary Live Scan background check renewal to the DOJ within 24 hours of the
destruction. C) Notify their employer of the loss and apply to the Chief for a certified
replacement within 72 hours. D) Continue working indefinitely as long as they carry a valid
California driver's license and corporate paperwork.
● Answer: C (Notify their employer of the loss and apply to the Chief for a certified
replacement within 72 hours.)
● Distractor Analysis:
○ A is incorrect: The regulatory code explicitly permits the technician to continue
working by utilizing the hardcopy receipt of their replacement application paired with
a valid government photo ID, preventing unnecessary business interruption.
○ B is incorrect: A destroyed credential triggers an administrative replacement
application paired with a $25 fee, not a redundant and costly biometric background
investigation.
○ D is incorrect: Operating without either the physical BSIS pocket card or the official
replacement receipt constitutes a direct violation of the mandatory field display
regulations.
The Mentor's Analysis: Bureau regulations under 16 CCR § 608.3 are structurally engineered to
support uninterrupted business continuity, strictly provided the licensee executes the mandatory
notification and replacement application within an absolute 72-hour window. The state relies on
the resulting receipt as a verifiable proxy for licensure status during the reprint phase.
Professional Intuition: A digital replacement receipt combined with a government ID equals
flawless legal compliance in the field.
Q3: Under California Business and Professions Code (BPC) 6980.10, an individual who
advertises advanced locksmith services without possessing a valid BSIS license is guilty of a
misdemeanor. What is the MAXIMUM penalty defined for this specific violation? A) A fine of
$1,000 and 6 months in county jail. B) A fine of $5,000 and mandatory license revocation for 3
years. C) A fine of $10,000 and imprisonment in a county jail for up to one year. D) A civil
administrative citation of $500 per advertisement published.
● Answer: C (A fine of $10,000 and imprisonment in a county jail for up to one year.)
● Distractor Analysis:
○ A is incorrect: This reflects the legacy penalty enforced before comprehensive
Locksmith Act revisions deliberately escalated the financial stakes to deter
underground operations.
○ B is incorrect: License revocation applies to practitioners convicted of felonies or
moral turpitude, whereas this statute specifically targets individuals operating
entirely outside the licensing framework.
○ D is incorrect: A $500 penalty corresponds to a secondary violation for failing to
notify the Bureau of corporate officer changes, not the severe infraction of
unlicensed public advertising.
The Mentor's Analysis: The state of California views unlicensed mechanical and electronic
bypass capabilities as a severe threat to public safety and infrastructure integrity, necessitating
the aggressive $10,000 criminal penalty mandated under BPC 6980.10. This massive fine is
designed to financially cripple rogue operators. Professional Intuition: Never sub-contract to
unlicensed entities; aiding and abetting unlicensed activity transfers the criminal liability
directly to your corporate license.
Q4: A customer requests a locksmith to originate a lost transponder key for their vehicle using
the manufacturer's code. According to California Penal Code 466.6, what is the MINIMUM
BSIS Locksmith &
Access Control Test
Bank | NFPA, OSDP, &
ALOA Master Keying |
Elite Q&A
Table of Contents
1. PART I: THE PREVIEW
2. PART II: THE ELITE TEST BANK
○ Tier 1: Foundational Syntax & Application (Questions 1–18)
○ Tier 2: Complex Application & Simulation (Questions 19–37)
○ Tier 3: Grandmaster Synthesis (Questions 38–55)
PART I: THE PREVIEW
Mastering this test bank translates directly to elite operational competence, ensuring flawless
compliance with California regulations and global life safety codes. By isolating the exact
variables that govern mechanical security, access control, and legal liability, you will forge an
infallible diagnostic methodology that distinguishes apex practitioners from novice technicians.
The "Critical Axioms" Cheat Sheet
● The Regulatory Supremacy Rule: Under California Business and Professions Code
(BPC) 6980, strict liability governs licensure, operations, and identification; unlicensed
activity carries a $10,000 fine, and criminal convictions trigger automatic suspension
mechanisms.
● The SFIC Mathematical Matrices: Small Format Interchangeable Cores require exact
algebraic precision where the control shear line is artificially elevated by a specific
constant based on the system architecture.
,SFIC System Type Operating Increment Control Pin Formula Top Pin Formula
Constant Constant
BEST A2 .0125" + 10 23
BEST A3 .018" +7 16
BEST A4 .021" +6 14
● The NFPA 80 Positive Latching Mandate: Fire-rated swinging doors must perpetually
maintain compartmentalization; electrified hardware on fire doors must irrevocably default
to a fail-secure state to guarantee positive latching during a conflagration.
● The Access Control Cryptographic Imperative: Legacy Wiegand protocols transmit
unencrypted, unidirectional data susceptible to relay attacks, whereas OSDP v2
mandates bidirectional RS-485 topology and AES-128 encryption via the Secure Channel
Block (SCB).
● The Life Safety Egress Hierarchy: The International Building Code (IBC) strictly
separates egress restrictions; delayed egress requires a 15-second irreversible timer,
sensor-release mechanisms require redundant manual push buttons, and clinical
containment (Group I-2) demands immediate unlocking upon fire alarm or power loss.
PART II: THE ELITE TEST BANK
Tier 1: Foundational Syntax & Application
Q1: An applicant submits their Live Scan fingerprints and application fees to the Bureau of
Security and Investigative Services (BSIS) to work for a licensed locksmith company. They
receive a temporary registration card. According to California Title 16 CCR, what is the
MAXIMUM duration this temporary registration remains valid before requiring official
intervention by the Director? A) 30 days B) 60 days C) 120 days D) 180 days
● Answer: C (120 days)
● Distractor Analysis:
○ A is incorrect: The 30-day timeframe legally governs the notification period required
when a corporation changes its officers or partners, rather than the operational
validity of an employee's temporary registration.
○ B is incorrect: A 60-day period represents the final delinquency grace period
allowed for submitting a renewal application before a registration is permanently
canceled by the state.
○ D is incorrect: The 180-day figure is an arbitrary extension that fundamentally
conflicts with the strict background processing deadlines mandated by the Bureau
for temporary field workers.
The Mentor's Analysis: Title 16 CCR strictly caps temporary locksmith employee registrations at
exactly 120 days to allow the Department of Justice and FBI criminal background reviews to
process without granting indefinite loopholes to unlicensed workers. By utilizing this specific
window, companies maintain workflow legally while the state evaluates the applicant's moral
turpitude. Professional Intuition: Always monitor the 120-day hard deck; deploying a
technician on day 121 without a permanent card constitutes an actionable misdemeanor.
Q2: A licensed California locksmith discovers their BSIS-issued pocket identification card was
destroyed while on a job site. According to Title 16 CCR Section 608.3, which sequence of
actions is the FIRST legal requirement to maintain compliance? A) Immediately cease all
, locksmithing duties until a physical replacement card arrives in the mail from Sacramento. B)
Submit a secondary Live Scan background check renewal to the DOJ within 24 hours of the
destruction. C) Notify their employer of the loss and apply to the Chief for a certified
replacement within 72 hours. D) Continue working indefinitely as long as they carry a valid
California driver's license and corporate paperwork.
● Answer: C (Notify their employer of the loss and apply to the Chief for a certified
replacement within 72 hours.)
● Distractor Analysis:
○ A is incorrect: The regulatory code explicitly permits the technician to continue
working by utilizing the hardcopy receipt of their replacement application paired with
a valid government photo ID, preventing unnecessary business interruption.
○ B is incorrect: A destroyed credential triggers an administrative replacement
application paired with a $25 fee, not a redundant and costly biometric background
investigation.
○ D is incorrect: Operating without either the physical BSIS pocket card or the official
replacement receipt constitutes a direct violation of the mandatory field display
regulations.
The Mentor's Analysis: Bureau regulations under 16 CCR § 608.3 are structurally engineered to
support uninterrupted business continuity, strictly provided the licensee executes the mandatory
notification and replacement application within an absolute 72-hour window. The state relies on
the resulting receipt as a verifiable proxy for licensure status during the reprint phase.
Professional Intuition: A digital replacement receipt combined with a government ID equals
flawless legal compliance in the field.
Q3: Under California Business and Professions Code (BPC) 6980.10, an individual who
advertises advanced locksmith services without possessing a valid BSIS license is guilty of a
misdemeanor. What is the MAXIMUM penalty defined for this specific violation? A) A fine of
$1,000 and 6 months in county jail. B) A fine of $5,000 and mandatory license revocation for 3
years. C) A fine of $10,000 and imprisonment in a county jail for up to one year. D) A civil
administrative citation of $500 per advertisement published.
● Answer: C (A fine of $10,000 and imprisonment in a county jail for up to one year.)
● Distractor Analysis:
○ A is incorrect: This reflects the legacy penalty enforced before comprehensive
Locksmith Act revisions deliberately escalated the financial stakes to deter
underground operations.
○ B is incorrect: License revocation applies to practitioners convicted of felonies or
moral turpitude, whereas this statute specifically targets individuals operating
entirely outside the licensing framework.
○ D is incorrect: A $500 penalty corresponds to a secondary violation for failing to
notify the Bureau of corporate officer changes, not the severe infraction of
unlicensed public advertising.
The Mentor's Analysis: The state of California views unlicensed mechanical and electronic
bypass capabilities as a severe threat to public safety and infrastructure integrity, necessitating
the aggressive $10,000 criminal penalty mandated under BPC 6980.10. This massive fine is
designed to financially cripple rogue operators. Professional Intuition: Never sub-contract to
unlicensed entities; aiding and abetting unlicensed activity transfers the criminal liability
directly to your corporate license.
Q4: A customer requests a locksmith to originate a lost transponder key for their vehicle using
the manufacturer's code. According to California Penal Code 466.6, what is the MINIMUM
