IAHSS Advanced Officer Certification – Latest Update
2026/2027 |Complete Questions with Correct Answers &
Detailed Explanations
1. A healthcare security officer is asked to remove a visitor who is verbally
disruptive but has not made threats or attempted violence. What should
the officer do FIRST?
A. Immediately place the visitor in handcuffs
B. Assess the situation and attempt calm, professional communication
C. Physically remove the visitor from the facility
D. Call law enforcement without speaking to the visitor
Answer: B. Assess the situation and attempt calm, professional
communication
Explanation: The officer should first assess the behavior, determine the level
of risk, and use professional verbal communication to de-escalate the
situation. Immediate physical intervention is generally inappropriate when
there is no immediate threat. The response should be proportional to the
behavior and consistent with facility policy.
2. A security officer notices that a restricted hospital department has an
access-control door that frequently remains propped open. What is the
officer's most appropriate response?
A. Ignore it because employees use the doorway
B. Report and address the security vulnerability according to policy
C. Permanently disable the door
D. Allow only visitors to use the doorway
Answer: B. Report and address the security vulnerability according to
policy
Explanation: A propped-open restricted-access door creates an avoidable
security vulnerability. The officer should follow established procedures to
correct or report the issue and determine why the door is being propped
open. Advanced officers should recognize vulnerabilities and take appropriate
corrective action rather than simply observing them.
, 3. During a security incident, an officer receives conflicting instructions
from two hospital departments. What is the best approach?
A. Follow whichever instruction was received first
B. Ignore both departments
C. Clarify authority and coordinate through the established chain of command
D. Allow the loudest individual to make the decision
Answer: C. Clarify authority and coordinate through the established
chain of command
Explanation: Healthcare security incidents often involve multiple
departments. The officer should understand who has operational authority
and use the established chain of command to resolve conflicting instructions.
Clear coordination reduces confusion and helps maintain a consistent
response.
4. A security officer is preparing an incident report after a workplace
violence event. Which documentation is most appropriate?
A. Personal opinions about the employee involved
B. Objective observations and relevant factual information
C. Rumors heard from other employees
D. Emotional descriptions of the officer's feelings
Answer: B. Objective observations and relevant factual information
Explanation: Incident reports should be factual, objective, accurate, and
sufficiently detailed to document what occurred. Officers should distinguish
observed facts from statements made by witnesses or involved individuals.
Opinions, speculation, exaggeration, and inflammatory language reduce the
usefulness and credibility of the report.
5. A patient becomes increasingly agitated while waiting for treatment.
The patient begins pacing and speaking loudly but has not yet become
physically aggressive. Which approach is most appropriate?
A. Immediately use physical restraint
B. Use calm verbal communication and attempt de-escalation
,C. Challenge the patient aggressively
D. Turn away and ignore the behavior
Answer: B. Use calm verbal communication and attempt de-escalation
Explanation: Early recognition and de-escalation are important components
of healthcare security. A calm tone, appropriate distance, active listening, and
clear communication may prevent escalation. Physical intervention should be
reserved for situations in which the level of risk justifies it and according to
applicable policy.
6. A security officer is conducting a security assessment of a hospital unit.
Which finding represents the greatest vulnerability?
A. Employees wearing identification badges
B. A functioning access-control system
C. An unsecured emergency exit leading into a restricted area
D. A clearly marked visitor entrance
Answer: C. An unsecured emergency exit leading into a restricted area
Explanation: An unsecured entry point into a restricted area creates a direct
access-control vulnerability. During a security assessment, officers should
identify weaknesses that could permit unauthorized entry, theft, violence, or
other security incidents. Corrective action should follow facility policy and
applicable safety requirements.
7. A healthcare security officer observes an employee allowing an
unknown person to follow closely behind them through a badge-
controlled entrance. What security issue is this?
A. Tailgating
B. Perimeter lighting
C. Credential verification
D. Key control
Answer: A. Tailgating
Explanation: Tailgating occurs when an unauthorized person follows an
authorized individual through a controlled access point without
, independently presenting valid credentials. It is a common access-control
vulnerability. Officers should understand the facility's procedures for
addressing and reporting this behavior.
8. During an emergency, a security officer is asked to communicate
information to several hospital departments. Which characteristic is
most important?
A. Use of technical jargon
B. Accuracy and clarity
C. Providing unverified information quickly
D. Limiting communication to personal opinions
Answer: B. Accuracy and clarity
Explanation: Emergency communication must be clear, concise, accurate, and
timely. Unverified information can create confusion and interfere with the
organization's response. Security personnel should use established
communication channels and provide information within their role and
authority.
9. A security officer discovers an unattended package in a busy hospital
hallway. What should the officer do FIRST?
A. Open the package to identify the owner
B. Move the package to a storage room
C. Follow the facility's suspicious-package procedure and control access to the
area
D. Place the package in the trash
Answer: C. Follow the facility's suspicious-package procedure and
control access to the area
Explanation: An unattended package should be treated according to the
organization's established suspicious-item procedure. Officers should avoid
unnecessary handling or movement of the item and control access while
appropriate personnel are notified. The priority is protecting people while
preserving the scene.
2026/2027 |Complete Questions with Correct Answers &
Detailed Explanations
1. A healthcare security officer is asked to remove a visitor who is verbally
disruptive but has not made threats or attempted violence. What should
the officer do FIRST?
A. Immediately place the visitor in handcuffs
B. Assess the situation and attempt calm, professional communication
C. Physically remove the visitor from the facility
D. Call law enforcement without speaking to the visitor
Answer: B. Assess the situation and attempt calm, professional
communication
Explanation: The officer should first assess the behavior, determine the level
of risk, and use professional verbal communication to de-escalate the
situation. Immediate physical intervention is generally inappropriate when
there is no immediate threat. The response should be proportional to the
behavior and consistent with facility policy.
2. A security officer notices that a restricted hospital department has an
access-control door that frequently remains propped open. What is the
officer's most appropriate response?
A. Ignore it because employees use the doorway
B. Report and address the security vulnerability according to policy
C. Permanently disable the door
D. Allow only visitors to use the doorway
Answer: B. Report and address the security vulnerability according to
policy
Explanation: A propped-open restricted-access door creates an avoidable
security vulnerability. The officer should follow established procedures to
correct or report the issue and determine why the door is being propped
open. Advanced officers should recognize vulnerabilities and take appropriate
corrective action rather than simply observing them.
, 3. During a security incident, an officer receives conflicting instructions
from two hospital departments. What is the best approach?
A. Follow whichever instruction was received first
B. Ignore both departments
C. Clarify authority and coordinate through the established chain of command
D. Allow the loudest individual to make the decision
Answer: C. Clarify authority and coordinate through the established
chain of command
Explanation: Healthcare security incidents often involve multiple
departments. The officer should understand who has operational authority
and use the established chain of command to resolve conflicting instructions.
Clear coordination reduces confusion and helps maintain a consistent
response.
4. A security officer is preparing an incident report after a workplace
violence event. Which documentation is most appropriate?
A. Personal opinions about the employee involved
B. Objective observations and relevant factual information
C. Rumors heard from other employees
D. Emotional descriptions of the officer's feelings
Answer: B. Objective observations and relevant factual information
Explanation: Incident reports should be factual, objective, accurate, and
sufficiently detailed to document what occurred. Officers should distinguish
observed facts from statements made by witnesses or involved individuals.
Opinions, speculation, exaggeration, and inflammatory language reduce the
usefulness and credibility of the report.
5. A patient becomes increasingly agitated while waiting for treatment.
The patient begins pacing and speaking loudly but has not yet become
physically aggressive. Which approach is most appropriate?
A. Immediately use physical restraint
B. Use calm verbal communication and attempt de-escalation
,C. Challenge the patient aggressively
D. Turn away and ignore the behavior
Answer: B. Use calm verbal communication and attempt de-escalation
Explanation: Early recognition and de-escalation are important components
of healthcare security. A calm tone, appropriate distance, active listening, and
clear communication may prevent escalation. Physical intervention should be
reserved for situations in which the level of risk justifies it and according to
applicable policy.
6. A security officer is conducting a security assessment of a hospital unit.
Which finding represents the greatest vulnerability?
A. Employees wearing identification badges
B. A functioning access-control system
C. An unsecured emergency exit leading into a restricted area
D. A clearly marked visitor entrance
Answer: C. An unsecured emergency exit leading into a restricted area
Explanation: An unsecured entry point into a restricted area creates a direct
access-control vulnerability. During a security assessment, officers should
identify weaknesses that could permit unauthorized entry, theft, violence, or
other security incidents. Corrective action should follow facility policy and
applicable safety requirements.
7. A healthcare security officer observes an employee allowing an
unknown person to follow closely behind them through a badge-
controlled entrance. What security issue is this?
A. Tailgating
B. Perimeter lighting
C. Credential verification
D. Key control
Answer: A. Tailgating
Explanation: Tailgating occurs when an unauthorized person follows an
authorized individual through a controlled access point without
, independently presenting valid credentials. It is a common access-control
vulnerability. Officers should understand the facility's procedures for
addressing and reporting this behavior.
8. During an emergency, a security officer is asked to communicate
information to several hospital departments. Which characteristic is
most important?
A. Use of technical jargon
B. Accuracy and clarity
C. Providing unverified information quickly
D. Limiting communication to personal opinions
Answer: B. Accuracy and clarity
Explanation: Emergency communication must be clear, concise, accurate, and
timely. Unverified information can create confusion and interfere with the
organization's response. Security personnel should use established
communication channels and provide information within their role and
authority.
9. A security officer discovers an unattended package in a busy hospital
hallway. What should the officer do FIRST?
A. Open the package to identify the owner
B. Move the package to a storage room
C. Follow the facility's suspicious-package procedure and control access to the
area
D. Place the package in the trash
Answer: C. Follow the facility's suspicious-package procedure and
control access to the area
Explanation: An unattended package should be treated according to the
organization's established suspicious-item procedure. Officers should avoid
unnecessary handling or movement of the item and control access while
appropriate personnel are notified. The priority is protecting people while
preserving the scene.
