Certified Protection Professional (CPP)
Exam 2 Questions and correct Answers
(Verified Answers) with Rationales 2025
Domain Coverage: Security Principles and Practices, Business Principles,
Personnel Security, Physical Security, Information Security, Crisis Management,
Investigations, Legal Aspects
1. Which of the following best defines risk?
A. Probability of a threat exploiting a vulnerability
B. The potential for loss, damage, or destruction of an asset
C. The absence of security controls
D. The likelihood of a successful attack
Rationale:
Risk is commonly defined as the potential for loss or damage when a threat
exploits a vulnerability.
2. What is the primary purpose of a security survey?
A. To train employees on emergency procedures
B. To detect unauthorized activities
,C. To assess vulnerabilities and recommend improvements
D. To test surveillance equipment
Rationale:
A security survey is a comprehensive review used to identify vulnerabilities and
propose risk mitigation strategies.
3. The principle of "least privilege" is best applied in which context?
A. Physical access control
B. Logical access control
C. Guard patrol routes
D. Surveillance camera placement
Rationale:
Least privilege refers to granting users the minimum access necessary, and it's a
fundamental concept in logical (information) security.
4. What is the primary benefit of a CPTED (Crime Prevention Through
Environmental Design) strategy?
A. Faster police response times
B. Reducing crime by influencing offender decisions through environmental
design
C. Lower lighting costs
D. Enhanced privacy for users
, Rationale:
CPTED focuses on reducing crime through design features like natural
surveillance and territorial reinforcement.
5. Which legal concept holds employers liable for negligent hiring or retention?
A. Res ipsa loquitur
B. Vicarious liability
C. Strict liability
D. Assumption of risk
Rationale:
Vicarious liability means an employer can be held responsible for an employee’s
wrongful acts, especially if due diligence was not done during hiring.
6. What is the main objective of business continuity planning (BCP)?
A. Reduce insurance premiums
B. Ensure critical operations can continue during a disruption
C. Monitor employee performance
D. Increase profit margins
Rationale:
BCP is designed to maintain essential functions during and after a crisis.
7. In a typical investigation, what is the first step?
A. Define the objective and scope of the investigation
Exam 2 Questions and correct Answers
(Verified Answers) with Rationales 2025
Domain Coverage: Security Principles and Practices, Business Principles,
Personnel Security, Physical Security, Information Security, Crisis Management,
Investigations, Legal Aspects
1. Which of the following best defines risk?
A. Probability of a threat exploiting a vulnerability
B. The potential for loss, damage, or destruction of an asset
C. The absence of security controls
D. The likelihood of a successful attack
Rationale:
Risk is commonly defined as the potential for loss or damage when a threat
exploits a vulnerability.
2. What is the primary purpose of a security survey?
A. To train employees on emergency procedures
B. To detect unauthorized activities
,C. To assess vulnerabilities and recommend improvements
D. To test surveillance equipment
Rationale:
A security survey is a comprehensive review used to identify vulnerabilities and
propose risk mitigation strategies.
3. The principle of "least privilege" is best applied in which context?
A. Physical access control
B. Logical access control
C. Guard patrol routes
D. Surveillance camera placement
Rationale:
Least privilege refers to granting users the minimum access necessary, and it's a
fundamental concept in logical (information) security.
4. What is the primary benefit of a CPTED (Crime Prevention Through
Environmental Design) strategy?
A. Faster police response times
B. Reducing crime by influencing offender decisions through environmental
design
C. Lower lighting costs
D. Enhanced privacy for users
, Rationale:
CPTED focuses on reducing crime through design features like natural
surveillance and territorial reinforcement.
5. Which legal concept holds employers liable for negligent hiring or retention?
A. Res ipsa loquitur
B. Vicarious liability
C. Strict liability
D. Assumption of risk
Rationale:
Vicarious liability means an employer can be held responsible for an employee’s
wrongful acts, especially if due diligence was not done during hiring.
6. What is the main objective of business continuity planning (BCP)?
A. Reduce insurance premiums
B. Ensure critical operations can continue during a disruption
C. Monitor employee performance
D. Increase profit margins
Rationale:
BCP is designed to maintain essential functions during and after a crisis.
7. In a typical investigation, what is the first step?
A. Define the objective and scope of the investigation
