Physical security Exam Questions
with All Correct Answers 2025-2026
Updated.
Equipment - Answer Lighting, weapons, closed circuit TV, fences, and locking mechanisms
are examples of what category of countermeasure?
Asset Owner - Answer An asset value should be assigned based on the perspective of the
___________?
False - Answer TRUE or FALSE. You are the one who decides what constitutes an acceptable
level of risk for an organization's assets.
What is the adversary's goal? *
What are the vulnerabilities of the risk management system?
What level of risk are the adversaries likely to accept? *
Are the adversaries willing to risk getting caught? * - Answer Which of the following
questions are used to identify and adversary's intent?
Countermeasure Analysis Chart - Answer After you've completed all other steps, what final
chart would you use to summarize and record your information in order to get the total cost for
all countermeasures.
Companies - Answer To assist in analyzing threat data, adversaries are typically grouped into
all EXCEPT which of the following categories?
Companies
Organizations
Governments
Individuals
Risk - Answer After completing the vulnerability assessment in the risk management process,
the next step is the __________ assessment.
Vulnerability Assessment - Answer After completing the threat assessment step of the risk
management process, what step should be completed next?
1. Facilities - Answer Which of the following is one of the five categories of assets?
,1. Facilities
2. Countermeasures
3. Vulnerabilities
3. Has the adversary been suspected of attacking or exploiting assets? - Answer Which of the
following is NOT a good interview question for determining and adversary's history?
1. Does the adversary have the weapons or tools for exploiting or attacking an asset?
2. Has the adversary attacked or exploited assets and personnel before?
3. Has the adversary been suspected of attacking or exploiting assets?
4. Might some foreseeable event cause the adversary to attempt an attack in the future?
3. Asset is assessed as 80 (critical), threat is assessed as .24 (low), and the vulnerability is
assessed as .37 (medium). - Answer Using the formula R=(I[TxV]) which of the examples
below poses the highest risk?
1. Asset is assessed as 3 (low), threat is assessed as .75 (critical), and the vulnerability is
assessed as .74 (high).
2. Asset is assessed as 13 (medium), threat is assessed as .50 (high), and the vulnerability is
assessed as .74 (high).
3. Asset is assessed as 80 (critical), threat is assessed as .24 (low), and the vulnerability is
assessed as .37 (medium).
False - Answer TRUE or FALSE. The risk management process uses four linguistic values:
critical, high, medium and significant.
Facility - Answer Poor perimeter lighting and unsecured doors are examples of a/an
___________ vulnerability.
Risk, Impact, Threat, Vulnerability - Answer The formula R=I[TxV] is used for calculating a risk
rating. what risk factors do R, I, T, and V represent?
Procedural - Answer Awarness programs, two person rules, and passwords are examples of
what category of countermeasure?
False - Answer TRUE or FALSE. The time to implement and oversee the countermeasure, the
time to prepare for its implementation and any time required for follow-up evaluation have no
impact when determining the cost of a countermeasure.
regression analysis - Answer Identify and caracterize the specific vulnerabilities that still
exist, given the current countermeasures is a step necessary for _________ _________.
, cost/benifit analysis - Answer The process in chich the costs and benefits of each alternative
countermeasure are compared and the most appropriate alternative is selected is
called______________.
Quality - Answer The degree of difficulty required to exploit a single vulnerability defines
what vulnerability criteria?
Quantity - Answer The number of complementay vulnerabilities that can be exploited
defines what vulnerability criteria?
Low - Answer Your research shows that specific threat category indicates little or no
evidence of capability or intent with no history of actual or planned threats against the assets.
the linguistic rating you assign to this asset category is ________?
True - Answer TRUE or FALSE. When determining an adversary's history, it is a good idea to
ask if the adverary has been suspected of attacking or exploiting assets.
Capability - Answer Determining if an adversary has the requisite technology and skills helps
to determine the adversary's _______.
1. What is the impact of an undesirable event? - Answer One way to describe asset value is:
1. What is the impact of an undesirable event?
2. What is the potential for an event to take place?
3. What is the level of weakness at the site?
4. What is the capability of the secific threat?
False - Answer TRUE or FALSE. Identifying the ineffective countermeasures is the first step in
the regressive analysis process.
22.8 - Answer Given the equation (R=I[TxV]), what is the overall risk after your assessment
determined that asset is 75, the threat level is .62, and the vulnerability level is .49?
True - Answer TRUE or FALSE. A threat is any indication, circumstance, or event, while an
adversary is an individual, group, organization, or government.
Identify potential undesirable events - Answer When following the risk management process
what is the next thing you should do after identifying significant assets?
with All Correct Answers 2025-2026
Updated.
Equipment - Answer Lighting, weapons, closed circuit TV, fences, and locking mechanisms
are examples of what category of countermeasure?
Asset Owner - Answer An asset value should be assigned based on the perspective of the
___________?
False - Answer TRUE or FALSE. You are the one who decides what constitutes an acceptable
level of risk for an organization's assets.
What is the adversary's goal? *
What are the vulnerabilities of the risk management system?
What level of risk are the adversaries likely to accept? *
Are the adversaries willing to risk getting caught? * - Answer Which of the following
questions are used to identify and adversary's intent?
Countermeasure Analysis Chart - Answer After you've completed all other steps, what final
chart would you use to summarize and record your information in order to get the total cost for
all countermeasures.
Companies - Answer To assist in analyzing threat data, adversaries are typically grouped into
all EXCEPT which of the following categories?
Companies
Organizations
Governments
Individuals
Risk - Answer After completing the vulnerability assessment in the risk management process,
the next step is the __________ assessment.
Vulnerability Assessment - Answer After completing the threat assessment step of the risk
management process, what step should be completed next?
1. Facilities - Answer Which of the following is one of the five categories of assets?
,1. Facilities
2. Countermeasures
3. Vulnerabilities
3. Has the adversary been suspected of attacking or exploiting assets? - Answer Which of the
following is NOT a good interview question for determining and adversary's history?
1. Does the adversary have the weapons or tools for exploiting or attacking an asset?
2. Has the adversary attacked or exploited assets and personnel before?
3. Has the adversary been suspected of attacking or exploiting assets?
4. Might some foreseeable event cause the adversary to attempt an attack in the future?
3. Asset is assessed as 80 (critical), threat is assessed as .24 (low), and the vulnerability is
assessed as .37 (medium). - Answer Using the formula R=(I[TxV]) which of the examples
below poses the highest risk?
1. Asset is assessed as 3 (low), threat is assessed as .75 (critical), and the vulnerability is
assessed as .74 (high).
2. Asset is assessed as 13 (medium), threat is assessed as .50 (high), and the vulnerability is
assessed as .74 (high).
3. Asset is assessed as 80 (critical), threat is assessed as .24 (low), and the vulnerability is
assessed as .37 (medium).
False - Answer TRUE or FALSE. The risk management process uses four linguistic values:
critical, high, medium and significant.
Facility - Answer Poor perimeter lighting and unsecured doors are examples of a/an
___________ vulnerability.
Risk, Impact, Threat, Vulnerability - Answer The formula R=I[TxV] is used for calculating a risk
rating. what risk factors do R, I, T, and V represent?
Procedural - Answer Awarness programs, two person rules, and passwords are examples of
what category of countermeasure?
False - Answer TRUE or FALSE. The time to implement and oversee the countermeasure, the
time to prepare for its implementation and any time required for follow-up evaluation have no
impact when determining the cost of a countermeasure.
regression analysis - Answer Identify and caracterize the specific vulnerabilities that still
exist, given the current countermeasures is a step necessary for _________ _________.
, cost/benifit analysis - Answer The process in chich the costs and benefits of each alternative
countermeasure are compared and the most appropriate alternative is selected is
called______________.
Quality - Answer The degree of difficulty required to exploit a single vulnerability defines
what vulnerability criteria?
Quantity - Answer The number of complementay vulnerabilities that can be exploited
defines what vulnerability criteria?
Low - Answer Your research shows that specific threat category indicates little or no
evidence of capability or intent with no history of actual or planned threats against the assets.
the linguistic rating you assign to this asset category is ________?
True - Answer TRUE or FALSE. When determining an adversary's history, it is a good idea to
ask if the adverary has been suspected of attacking or exploiting assets.
Capability - Answer Determining if an adversary has the requisite technology and skills helps
to determine the adversary's _______.
1. What is the impact of an undesirable event? - Answer One way to describe asset value is:
1. What is the impact of an undesirable event?
2. What is the potential for an event to take place?
3. What is the level of weakness at the site?
4. What is the capability of the secific threat?
False - Answer TRUE or FALSE. Identifying the ineffective countermeasures is the first step in
the regressive analysis process.
22.8 - Answer Given the equation (R=I[TxV]), what is the overall risk after your assessment
determined that asset is 75, the threat level is .62, and the vulnerability level is .49?
True - Answer TRUE or FALSE. A threat is any indication, circumstance, or event, while an
adversary is an individual, group, organization, or government.
Identify potential undesirable events - Answer When following the risk management process
what is the next thing you should do after identifying significant assets?
