CERTIFIED PROTECTION PROFESSIONAL (CPP)
PRACTICE EXAM 2 QUESTIONS AND ANSWERS
WITH RATIONALES 2025| VERIFIED FOR
GUARANTEED PASS LATEST UPDATE
1. What is the primary purpose of a security risk assessment?
A) To determine insurance costs
B) To identify vulnerabilities and threats to assets
C) To evaluate employee performance
D) To create an evacuation plan
Answer: B
Rationale: The main goal of a security risk assessment is to identify vulnerabilities
and threats that could negatively impact an organization's assets and operations.
2. Which of the following is the MOST important factor when designing a
physical security system?
A) Cost
B) Technology used
,C) Threat and risk analysis results
D) Number of security personnel available
Answer: C
Rationale: Physical security system design should be based primarily on the
results of a thorough threat and risk analysis to ensure appropriate protective
measures.
3. What is the concept of “defense in depth”?
A) Using a single security layer to protect assets
B) Employing multiple layers of security controls to protect assets
C) Relying solely on electronic security systems
D) Hiring more security guards than needed
Answer: B
Rationale: Defense in depth means layering multiple security measures so if one
fails, others continue to protect assets.
4. Which type of barrier provides the highest degree of protection against
forced entry?
A) Chain-link fence
B) Bollards
C) Reinforced concrete wall
D) Hedge row
, Answer: C
Rationale: Reinforced concrete walls provide substantial resistance to forced
entry compared to fencing or natural barriers.
5. Which of the following is NOT typically a component of a security policy?
A) Roles and responsibilities
B) Operational procedures
C) Marketing strategies
D) Security objectives
Answer: C
Rationale: Marketing strategies are unrelated to security policies, which focus on
roles, responsibilities, and operational guidelines.
6. What is the primary goal of incident management?
A) To investigate incidents for legal action
B) To quickly restore normal operations and minimize damage
C) To punish employees responsible for incidents
D) To increase security budgets
Answer: B
Rationale: Incident management focuses on minimizing impact and restoring
operations as quickly as possible.
7. Which of the following is an example of a physical security control?
PRACTICE EXAM 2 QUESTIONS AND ANSWERS
WITH RATIONALES 2025| VERIFIED FOR
GUARANTEED PASS LATEST UPDATE
1. What is the primary purpose of a security risk assessment?
A) To determine insurance costs
B) To identify vulnerabilities and threats to assets
C) To evaluate employee performance
D) To create an evacuation plan
Answer: B
Rationale: The main goal of a security risk assessment is to identify vulnerabilities
and threats that could negatively impact an organization's assets and operations.
2. Which of the following is the MOST important factor when designing a
physical security system?
A) Cost
B) Technology used
,C) Threat and risk analysis results
D) Number of security personnel available
Answer: C
Rationale: Physical security system design should be based primarily on the
results of a thorough threat and risk analysis to ensure appropriate protective
measures.
3. What is the concept of “defense in depth”?
A) Using a single security layer to protect assets
B) Employing multiple layers of security controls to protect assets
C) Relying solely on electronic security systems
D) Hiring more security guards than needed
Answer: B
Rationale: Defense in depth means layering multiple security measures so if one
fails, others continue to protect assets.
4. Which type of barrier provides the highest degree of protection against
forced entry?
A) Chain-link fence
B) Bollards
C) Reinforced concrete wall
D) Hedge row
, Answer: C
Rationale: Reinforced concrete walls provide substantial resistance to forced
entry compared to fencing or natural barriers.
5. Which of the following is NOT typically a component of a security policy?
A) Roles and responsibilities
B) Operational procedures
C) Marketing strategies
D) Security objectives
Answer: C
Rationale: Marketing strategies are unrelated to security policies, which focus on
roles, responsibilities, and operational guidelines.
6. What is the primary goal of incident management?
A) To investigate incidents for legal action
B) To quickly restore normal operations and minimize damage
C) To punish employees responsible for incidents
D) To increase security budgets
Answer: B
Rationale: Incident management focuses on minimizing impact and restoring
operations as quickly as possible.
7. Which of the following is an example of a physical security control?
