IAHSS CERTIFICATION EXAM – PRACTICE QUESTIONS AND CORRECT ANSWERS (VERIFIED ANSWERS) PLUS RATIONALES 2026 Q&A |
INSTANT DOWNLOAD PDF.
*Core Domains*
*Security Operations and Administration*
*Emergency Management*
*Legal and Compliance*
*Safety and Risk Management*
*Healthcare Clinical Operations*
*Investigation and Documentation*
*Physical Security Systems*
*Ethics and Conduct*
*Introduction*
The purpose of this practice assessment is to prepare candidates for the International Association for Healthcare Security and Safety (IAHSS)
certification. This exam evaluates the essential skills and knowledge required to maintain a safe and secure environment within healthcare facilities.
Candidates are assessed on their understanding of security protocols, legal constraints, and the integration of security functions with clinical care.
The structure comprises multiple-choice and scenario-based questions that mirror the complexity of hospital environments. Emphasis is placed on
real-world application, critical thinking, and decisive action during emergencies to ensure the protection of patients, staff, and visitors.
*Section One*
1. Which of the following is considered the primary responsibility of a healthcare security officer?
A. Providing medical assistance to patients
B. Ensuring the safety and security of people and property
C. Managing the facility's financial records
D. Enforcing clinical hygiene standards
🟢 Correct Answer: B
🔴 RATIONALE: The fundamental role of healthcare security is the protection of life and property within the healthcare environment,
distinguishing it from clinical or administrative roles.
,2. A visitor becomes verbally abusive in the emergency department. What is the first step the security officer should take?
A. Immediately use physical restraints
B. Use verbal de-escalation techniques
C. Call for local police intervention
D. Escort the visitor out without speaking
🟢 Correct Answer: B
🔴 RATIONALE: Verbal de-escalation is the preferred first response to manage aggression, aiming to resolve the conflict with the least
amount of force necessary.
3. Under the HIPAA Privacy Rule, a security officer may share patient information when:
A. A friend of the patient asks for an update
B. It is necessary for the performance of their official security duties
C. The media requests a statement on a high-profile case
D. A co-worker is curious about a neighbor's admission
🟢 Correct Answer: B
🔴 RATIONALE: Access to protected health information (PHI) is restricted to the "minimum necessary" required for staff, including security, to
perform their job functions.
4. What is the standard protocol for a "Code Silver" in most healthcare facilities?
A. Fire emergency
B. Missing infant
C. Person with a weapon or active shooter
D. Hazardous material spill
🟢 Correct Answer: C
🔴 RATIONALE: Code Silver is widely recognized in healthcare settings as the notification for a person with a weapon or an active shooter
situation.
5. Which type of fire extinguisher is most appropriate for a fire involving electrical equipment in a server room?
A. Class A
B. Class B
C. Class C
D. Class K
🟢 Correct Answer: C
🔴 RATIONALE: Class C extinguishers are specifically designed for energized electrical fires, as the extinguishing agents are non-
conductive.
6. In a healthcare setting, "Informed Consent" primarily refers to:
A. A patient agreeing to a security search of their bag
B. A patient understanding and agreeing to a medical procedure
, C. The hospital's right to share data with insurance
D. Security's right to arrest a trespasser
🟢 Correct Answer: B
🔴 RATIONALE: Informed consent is a legal and ethical requirement where a patient is educated on the risks and benefits of a treatment
before agreeing to it.
7. Which of the following is an example of an "internal" disaster for a hospital?
A. A multi-car pileup on a nearby highway
B. A massive power failure within the facility
C. A regional influenza outbreak
D. An earthquake in the city
🟢 Correct Answer: B
🔴 RATIONALE: Internal disasters are incidents that occur within the facility’s boundaries and disrupt normal operations, such as utility
failures or fires.
8. When documenting an incident, which of the following is the most important attribute of the report?
A. The officer's personal opinion of the victim
B. Use of complex legal terminology
C. Objectivity and factual accuracy
D. The length of the narrative
🟢 Correct Answer: C
🔴 RATIONALE: Professional incident reports must be based on facts and objective observations to be useful for legal proceedings and
internal investigations.
9. The "Safe Haven" law generally allows:
A. Security to house homeless individuals indefinitely
B. Parents to safely and legally leave an unharmed infant at a hospital
C. Patients to refuse any form of security screening
D. Staff to ignore HIPAA during a natural disaster
🟢 Correct Answer: B
🔴 RATIONALE: Safe Haven laws provide a mechanism for parents to surrender an infant to designated locations, like hospitals, without fear
of prosecution.
10. Which physical security measure is best used to control access to a sensitive area like the Pharmacy?
A. A "Staff Only" sign
B. An electronic badge reader with logging capabilities
C. A standard keyed lock with shared keys
D. Increased lighting in the hallway
INSTANT DOWNLOAD PDF.
*Core Domains*
*Security Operations and Administration*
*Emergency Management*
*Legal and Compliance*
*Safety and Risk Management*
*Healthcare Clinical Operations*
*Investigation and Documentation*
*Physical Security Systems*
*Ethics and Conduct*
*Introduction*
The purpose of this practice assessment is to prepare candidates for the International Association for Healthcare Security and Safety (IAHSS)
certification. This exam evaluates the essential skills and knowledge required to maintain a safe and secure environment within healthcare facilities.
Candidates are assessed on their understanding of security protocols, legal constraints, and the integration of security functions with clinical care.
The structure comprises multiple-choice and scenario-based questions that mirror the complexity of hospital environments. Emphasis is placed on
real-world application, critical thinking, and decisive action during emergencies to ensure the protection of patients, staff, and visitors.
*Section One*
1. Which of the following is considered the primary responsibility of a healthcare security officer?
A. Providing medical assistance to patients
B. Ensuring the safety and security of people and property
C. Managing the facility's financial records
D. Enforcing clinical hygiene standards
🟢 Correct Answer: B
🔴 RATIONALE: The fundamental role of healthcare security is the protection of life and property within the healthcare environment,
distinguishing it from clinical or administrative roles.
,2. A visitor becomes verbally abusive in the emergency department. What is the first step the security officer should take?
A. Immediately use physical restraints
B. Use verbal de-escalation techniques
C. Call for local police intervention
D. Escort the visitor out without speaking
🟢 Correct Answer: B
🔴 RATIONALE: Verbal de-escalation is the preferred first response to manage aggression, aiming to resolve the conflict with the least
amount of force necessary.
3. Under the HIPAA Privacy Rule, a security officer may share patient information when:
A. A friend of the patient asks for an update
B. It is necessary for the performance of their official security duties
C. The media requests a statement on a high-profile case
D. A co-worker is curious about a neighbor's admission
🟢 Correct Answer: B
🔴 RATIONALE: Access to protected health information (PHI) is restricted to the "minimum necessary" required for staff, including security, to
perform their job functions.
4. What is the standard protocol for a "Code Silver" in most healthcare facilities?
A. Fire emergency
B. Missing infant
C. Person with a weapon or active shooter
D. Hazardous material spill
🟢 Correct Answer: C
🔴 RATIONALE: Code Silver is widely recognized in healthcare settings as the notification for a person with a weapon or an active shooter
situation.
5. Which type of fire extinguisher is most appropriate for a fire involving electrical equipment in a server room?
A. Class A
B. Class B
C. Class C
D. Class K
🟢 Correct Answer: C
🔴 RATIONALE: Class C extinguishers are specifically designed for energized electrical fires, as the extinguishing agents are non-
conductive.
6. In a healthcare setting, "Informed Consent" primarily refers to:
A. A patient agreeing to a security search of their bag
B. A patient understanding and agreeing to a medical procedure
, C. The hospital's right to share data with insurance
D. Security's right to arrest a trespasser
🟢 Correct Answer: B
🔴 RATIONALE: Informed consent is a legal and ethical requirement where a patient is educated on the risks and benefits of a treatment
before agreeing to it.
7. Which of the following is an example of an "internal" disaster for a hospital?
A. A multi-car pileup on a nearby highway
B. A massive power failure within the facility
C. A regional influenza outbreak
D. An earthquake in the city
🟢 Correct Answer: B
🔴 RATIONALE: Internal disasters are incidents that occur within the facility’s boundaries and disrupt normal operations, such as utility
failures or fires.
8. When documenting an incident, which of the following is the most important attribute of the report?
A. The officer's personal opinion of the victim
B. Use of complex legal terminology
C. Objectivity and factual accuracy
D. The length of the narrative
🟢 Correct Answer: C
🔴 RATIONALE: Professional incident reports must be based on facts and objective observations to be useful for legal proceedings and
internal investigations.
9. The "Safe Haven" law generally allows:
A. Security to house homeless individuals indefinitely
B. Parents to safely and legally leave an unharmed infant at a hospital
C. Patients to refuse any form of security screening
D. Staff to ignore HIPAA during a natural disaster
🟢 Correct Answer: B
🔴 RATIONALE: Safe Haven laws provide a mechanism for parents to surrender an infant to designated locations, like hospitals, without fear
of prosecution.
10. Which physical security measure is best used to control access to a sensitive area like the Pharmacy?
A. A "Staff Only" sign
B. An electronic badge reader with logging capabilities
C. A standard keyed lock with shared keys
D. Increased lighting in the hallway
