SECURITY PROGRAM INTEGRATION
PROFESSIONAL CERTIFICATION
COMPREHENSIVE EXAM QUESTIONS AND
CORRECT ANSWERS STUDY GUIDE
●● What is a Design Basis Threat (DBT)?
Answer: The profile of the type, composition, and capabilities of an
adversary that a security system is designed to defend against.
●● What does CPTED stand for?
Answer: Crime Prevention Through Environmental Design
●● What are the three core principles of CPTED?
Answer: Natural Surveillance, Natural Access Control, and Territorial
Reinforcement
●● In CPTED, what is Natural Surveillance?
Answer: The placement of physical features, activities, and people in a
way that maximizes visibility to deter crime.
●● In CPTED, what is Territorial Reinforcement?
,Answer: The use of physical attributes (like fences, signage, and
landscaping) to express ownership and define public, semi-public, and
private spaces.
●● In CPTED, what is Natural Access Control?
Answer: The physical guidance of people and vehicles to and from a
space by the placement of entrances, exits, fencing, and landscaping.
●● What is a vulnerability assessment?
Answer: The systematic examination of an asset or system to identify
weaknesses that could be exploited by a threat.
●● What is a quantitative risk assessment?
Answer: A risk assessment that uses verifiable, objective metrics and
assigns numerical or monetary values to risk components.
●● What is a qualitative risk assessment?
Answer: A risk assessment that uses subjective measures, such as
High/Medium/Low, based on expert judgment and experience.
●● What is the Annualized Loss Expectancy (ALE)?
Answer: The expected monetary loss for an asset due to a risk over a
one-year period (ALE = Single Loss Expectancy x Annualized Rate of
Occurrence).
,●● What is Single Loss Expectancy (SLE)?
Answer: The monetary loss expected from a single security incident
(SLE = Asset Value x Exposure Factor).
●● What is the Annualized Rate of Occurrence (ARO)?
Answer: The estimated frequency with which a specific threat will occur
within a single year.
●● What is risk mitigation?
Answer: The application of security measures or controls to reduce the
likelihood or impact of a vulnerability being exploited.
●● What is risk transfer?
Answer: Shifting the financial consequence of a risk to a third party,
most commonly through insurance.
●● What is risk avoidance?
Answer: Eliminating the risk entirely by ceasing the activity, removing
the asset, or changing the environment that causes the risk.
●● What is risk acceptance?
, Answer: Acknowledging a risk and choosing not to implement
mitigation strategies, usually because the cost of mitigation exceeds the
potential loss.
●● What is the primary purpose of a physical security site survey?
Answer: To identify existing physical security measures, evaluate their
effectiveness, and discover vulnerabilities.
●● What are the concentric circles of protection (also known as defense
in depth)?
Answer: A security concept involving multiple layers of security
controls (perimeter, exterior, interior) that an adversary must defeat to
reach the asset.
●● What is the "clear zone" in perimeter security?
Answer: An unobstructed area maintained on both sides of a perimeter
barrier to ensure clear visibility and deny cover to intruders.
●● What is the standard recommended height for a high-security chain-
link fence?
Answer: A minimum of 7 feet (often topped with barbed wire or razor
ribbon to reach 8 to 9 feet total).
●● What is the recommended wire gauge for high-security chain-link
fences?
PROFESSIONAL CERTIFICATION
COMPREHENSIVE EXAM QUESTIONS AND
CORRECT ANSWERS STUDY GUIDE
●● What is a Design Basis Threat (DBT)?
Answer: The profile of the type, composition, and capabilities of an
adversary that a security system is designed to defend against.
●● What does CPTED stand for?
Answer: Crime Prevention Through Environmental Design
●● What are the three core principles of CPTED?
Answer: Natural Surveillance, Natural Access Control, and Territorial
Reinforcement
●● In CPTED, what is Natural Surveillance?
Answer: The placement of physical features, activities, and people in a
way that maximizes visibility to deter crime.
●● In CPTED, what is Territorial Reinforcement?
,Answer: The use of physical attributes (like fences, signage, and
landscaping) to express ownership and define public, semi-public, and
private spaces.
●● In CPTED, what is Natural Access Control?
Answer: The physical guidance of people and vehicles to and from a
space by the placement of entrances, exits, fencing, and landscaping.
●● What is a vulnerability assessment?
Answer: The systematic examination of an asset or system to identify
weaknesses that could be exploited by a threat.
●● What is a quantitative risk assessment?
Answer: A risk assessment that uses verifiable, objective metrics and
assigns numerical or monetary values to risk components.
●● What is a qualitative risk assessment?
Answer: A risk assessment that uses subjective measures, such as
High/Medium/Low, based on expert judgment and experience.
●● What is the Annualized Loss Expectancy (ALE)?
Answer: The expected monetary loss for an asset due to a risk over a
one-year period (ALE = Single Loss Expectancy x Annualized Rate of
Occurrence).
,●● What is Single Loss Expectancy (SLE)?
Answer: The monetary loss expected from a single security incident
(SLE = Asset Value x Exposure Factor).
●● What is the Annualized Rate of Occurrence (ARO)?
Answer: The estimated frequency with which a specific threat will occur
within a single year.
●● What is risk mitigation?
Answer: The application of security measures or controls to reduce the
likelihood or impact of a vulnerability being exploited.
●● What is risk transfer?
Answer: Shifting the financial consequence of a risk to a third party,
most commonly through insurance.
●● What is risk avoidance?
Answer: Eliminating the risk entirely by ceasing the activity, removing
the asset, or changing the environment that causes the risk.
●● What is risk acceptance?
, Answer: Acknowledging a risk and choosing not to implement
mitigation strategies, usually because the cost of mitigation exceeds the
potential loss.
●● What is the primary purpose of a physical security site survey?
Answer: To identify existing physical security measures, evaluate their
effectiveness, and discover vulnerabilities.
●● What are the concentric circles of protection (also known as defense
in depth)?
Answer: A security concept involving multiple layers of security
controls (perimeter, exterior, interior) that an adversary must defeat to
reach the asset.
●● What is the "clear zone" in perimeter security?
Answer: An unobstructed area maintained on both sides of a perimeter
barrier to ensure clear visibility and deny cover to intruders.
●● What is the standard recommended height for a high-security chain-
link fence?
Answer: A minimum of 7 feet (often topped with barbed wire or razor
ribbon to reach 8 to 9 feet total).
●● What is the recommended wire gauge for high-security chain-link
fences?
