ASIS Updated ASIS-PSP Exam Questions and Answers by dean

The correct answer is D. retinal pattern recognition.

In PSP physical security design, access control is part of integrated physical security systems and countermeasure implementation. ASIS describes the PSP credential as covering physical security assessments, integrated physical security systems, and implementation/evaluation of security measures.

Retinal pattern recognition is a biometric access control method. It verifies a person based on a unique physical characteristic rather than something the person carries or knows. Biometric authentication uses unique body characteristics such as retinas, fingerprints, facial structure, or other biological traits for security and authentication.

The other options provide lower security by comparison:

A. Proximity card — possession-based credential; it can be lost, stolen, shared, or cloned.

B. Computer-controlled keypad — knowledge-based credential; PINs can be observed, guessed, shared, or compromised.

C. Smart card — stronger than a basic proximity card, but still a possession-based credential unless combined with PIN or biometric verification.

D. Retinal pattern recognition — biometric; tied directly to the individual and therefore provides the highest level of security among the listed options.

Therefore, for a high-security area such as a data center, the best answer is D. retinal pattern recognition.

Holography on ID badges provides a unique, hard-to-replicate visual feature that significantly reduces the chances of badge counterfeiting. Holograms are difficult to duplicate with standard printing technologies, thus enhancing the integrity of badge-based access control systems.

Theft (A) and Intrusion (C) are indirect risks that holography helps mitigate by reducing counterfeiting.

Security (D) is a broad concept rather than a specific risk being addressed.

Vicarious liability refers to an indirect legal responsibility held by an organization for the actions or omissions of its employees or agents. This is particularly relevant in the security industry when an enterprise employs or contracts security personnel. If those personnel cause harm or violate rights while performing their duties, the employer can be held liable—even if the employer did not directly engage in the act.

Strict (A) refers to liability without fault.

Negligence (B) is direct liability due to carelessness.

Loose (D) is not a recognized legal term.

Line executives are individuals in the direct chain of command who are responsible for achieving the core objectives of an organization. They have authority over subordinate personnel and direct responsibility for organizational results. They differ from staff personnel, who provide advice or support but do not directly manage line functions.

Management (A) is a broader term that includes both line and staff.

Authorized directives (B) are formal instructions, not people.

Stockholders (D) are owners, not organizational authorities.