I85PREP
⌘ K
ANAC ICAR Theoretical Exam (AVSEC Cargo Instructor) study materials
ANAC ICAR Theoretical Exam (AVSEC Cargo Instructor) study resources

ANAC ICAR Theoretical Exam (AVSEC Cargo Instructor) practice questions

One question at a time. Build your ANAC ICAR Theoretical Exam (AVSEC Cargo Instructor) understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

Under ICAO Annex 17, which entity is responsible for establishing and implementing the national civil aviation security programme?

  1. Each contracting State Correct answer.
  2. Each individual aircraft operator
  3. The cargo agent's trade association
  4. The airport operator alone

Explanation

Annex 17 obliges each contracting State to establish a national civil aviation security programme and to designate an authority to implement it. Operators and airports then build their own programmes to comply with the State's requirements.

Question 2International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

What is the primary purpose of ICAO Annex 17?

  1. To harmonize customs tariffs on air cargo
  2. To regulate airline ticket pricing
  3. To safeguard international civil aviation against acts of unlawful interference Correct answer.
  4. To standardize aircraft maintenance procedures

Explanation

Annex 17 sets Standards and Recommended Practices to protect international civil aviation from acts of unlawful interference. It addresses security of passengers, cargo, mail and airport operations.

Question 3International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

Which ICAO Annex deals primarily with facilitation, including interfaces relevant to cargo documentation and clearance?

  1. Annex 6
  2. Annex 11
  3. Annex 17
  4. Annex 9 Correct answer.

Explanation

Annex 9 covers facilitation of international air transport, including documentation and clearance procedures that interface with security controls. Annex 17 covers security, Annex 6 operations, and Annex 11 air traffic services.

Question 4International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

ICAO Doc 8973 is best described as which of the following?

  1. A customs valuation handbook
  2. A treaty that supersedes national law
  3. A list of airline baggage allowances
  4. The security manual providing guidance for implementing Annex 17 Correct answer.

Explanation

Doc 8973, the Aviation Security Manual, gives detailed guidance to States and industry on implementing Annex 17 Standards and Recommended Practices. It is guidance, not a treaty that overrides national law.

Question 5International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

In the security framework, what does the term 'regulated agent' refer to?

  1. A freight forwarder without any security approval
  2. An entity approved by the competent authority to apply security controls to cargo Correct answer.
  3. An airline employee who boards passengers
  4. A customs broker who clears import shipments

Explanation

A regulated agent is approved by the competent authority to apply cargo and mail security controls in accordance with a security programme. Its approval distinguishes it from unapproved entities that cannot apply such controls.

Question 6International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

Which of the following best describes the concept of 'known consignor'?

  1. A shipper whose cargo origin and controls meet authority-approved security requirements Correct answer.
  2. An airline's frequent flyer programme member
  3. A warehouse operator located outside any airport
  4. A consignee who has previously received cargo

Explanation

A known consignor is a shipper approved because its origin, procedures and controls meet security requirements set by the competent authority. Cargo from a known consignor can be treated as having received security controls from origin.

Question 7International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

Under the Annex 17 framework, which of the following is a Standard rather than a Recommended Practice?

  1. States should encourage voluntary reporting of security incidents
  2. States may share best practices informally
  3. Each State must ensure cargo security controls are applied before loading Correct answer.
  4. States should consider public awareness campaigns

Explanation

A Standard is a mandatory requirement that States are expected to implement, such as ensuring security controls are applied to cargo before loading. Recommended Practices are desirable but not mandatory.

Question 8International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

What is the role of the national civil aviation security committee in many States?

  1. To issue airline tickets to passengers
  2. To operate airport screening equipment directly
  3. To certify aircraft airworthiness
  4. To coordinate security policy among government and industry stakeholders Correct answer.

Explanation

National security committees typically coordinate policy, share information and align government and industry stakeholders. They do not perform operational screening or airworthiness certification.

Question 9International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

A regulated agent receives cargo that has been in secure storage for an extended period beyond the approved time limit. What must the agent do before the cargo can be tendered as secured?

  1. Transfer it directly to the aircraft without further action
  2. Simply relabel the shipment as secure
  3. Only update the airway bill number
  4. Re-apply the required security controls before further handling Correct answer.

Explanation

Cargo loses its secured status if it leaves protected control beyond the approved time limits. The agent must re-apply the required security controls, such as screening or re-securing, before the cargo can be tendered as secured.

Question 10International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

A shipper wants to be recognized as a known consignor. Which requirement is most consistent with the framework?

  1. The shipper must be approved by the competent authority and apply specified controls Correct answer.
  2. The shipper must own its own aircraft
  3. The shipper must merely sign a self-declaration without review
  4. The shipper must be located inside an airport perimeter

Explanation

Known consignor status requires approval by the competent authority and demonstration that specified security controls are in place. Self-declaration without review or airport location does not confer the status.

Question 11International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

In the context of cargo screening, what does the term 'security control' encompass?

  1. Only the use of X-ray equipment
  2. Only the completion of customs paperwork
  3. Only the payment of security fees
  4. Measures such as screening, physical inspection, or secure chain of custody Correct answer.

Explanation

Security controls include a range of measures such as screening, physical inspection, and maintaining a secure chain of custody. They are not limited to a single technology or administrative step.

Question 12International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

How do ICAO Annex 17 provisions generally interact with national regulations?

  1. Annex 17 replaces national law entirely
  2. Annex 17 applies only to domestic flights
  3. States implement Annex 17 through national regulations and programmes Correct answer.
  4. National regulations are irrelevant once Annex 17 exists

Explanation

Annex 17 sets international Standards and Recommended Practices that States implement through their own national regulations and programmes. It does not replace national law but is given effect through it.

Question 13International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

A consignment arrives with a break in the secure chain of custody during road transport to the airport. What is the appropriate treatment?

  1. Accept it as secured because it was previously screened
  2. Ask the driver to confirm verbally that it is secure
  3. Load it immediately to avoid delay
  4. Treat the cargo as unsecured and apply controls before loading Correct answer.

Explanation

Any break in the secure chain of custody means the cargo can no longer be presumed secured. It must be treated as unsecured and subjected to the required controls before loading.

Question 14International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

Which statement best reflects the relationship between Annex 17 and Annex 9 in cargo operations?

  1. Annex 9 sets security requirements while Annex 17 addresses facilitation
  2. Both Annexes deal only with passenger screening
  3. Annex 9 supersedes Annex 17 for cargo
  4. Annex 17 sets security requirements while Annex 9 addresses facilitation procedures that must remain compatible Correct answer.

Explanation

Annex 17 provides the security Standards for cargo, while Annex 9 addresses facilitation of clearance and documentation. The two must operate compatibly so that security is not undermined by facilitation shortcuts.

Question 15International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

What does 'screening' of cargo typically aim to achieve?

  1. To determine whether the cargo contains prohibited items that pose a security threat Correct answer.
  2. To verify the aircraft's weight and balance
  3. To determine the customs duty payable
  4. To confirm the shipper's credit rating

Explanation

Screening aims to detect prohibited items or threats before the cargo is loaded. It is a security function distinct from customs duty assessment, weight and balance, or credit checks.

Question 16International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

An operator wishes to accept cargo from an entity that is neither a regulated agent nor a known consignor. What is the appropriate approach under the framework?

  1. Rely solely on the shipper's written assurance
  2. Apply the required security controls before the cargo is loaded Correct answer.
  3. Reject all cargo from such entities permanently
  4. Accept the cargo without controls because the entity is unapproved

Explanation

Cargo from unapproved entities must receive the required security controls before loading. It is not automatically acceptable without controls, nor is permanent rejection required.

Question 17International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

Which of the following is a key element of a national civil aviation security programme?

  1. Publication of airline schedules
  2. Setting of airport landing fees
  3. Designation of a competent authority and definition of security responsibilities Correct answer.
  4. Approval of aircraft paint schemes

Explanation

A national programme must designate the competent authority and define the security responsibilities of the various entities. Commercial matters like schedules, fees and paint schemes are not security programme elements.

Question 18International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

Why does the framework require background checks for personnel with access to secured cargo?

  1. To verify the personnel's academic qualifications
  2. To determine the personnel's salary grade
  3. To reduce the risk of insider threats to the secure supply chain Correct answer.
  4. To satisfy marketing requirements

Explanation

Background checks help mitigate insider threats by ensuring that personnel with access to secured cargo are reliable. They are a security measure, not an academic, salary or marketing exercise.

Question 19International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

A shipment is consolidated from multiple known consignors at a regulated agent's facility. What must the agent ensure?

  1. That the secure status of each consignment is maintained and documented throughout consolidation Correct answer.
  2. That documentation is discarded after consolidation
  3. That the consolidated shipment is treated as unsecured by default
  4. That only the largest consignment is secured

Explanation

Consolidation must preserve and document the secure status of each constituent consignment. Losing track of individual status or discarding records undermines the security chain.

Question 20International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

What is the significance of the 'secure supply chain' concept in air cargo security?

  1. Security is maintained from origin through to loading by continuous controls Correct answer.
  2. Security is applied only at the final loading point
  3. Security is the sole responsibility of the pilot
  4. Security depends only on customs inspection

Explanation

The secure supply chain concept means security controls are maintained continuously from origin to loading. Relying only on a final checkpoint or customs inspection leaves gaps in protection.

Question 21International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

How should a State treat a Recommended Practice in Annex 17 that it chooses not to implement?

  1. It may differ but should notify ICAO of the difference Correct answer.
  2. It must withdraw from ICAO
  3. It must ignore the Standard entirely
  4. It must immediately suspend all aviation operations

Explanation

States that cannot comply with a Standard or choose not to implement a Recommended Practice are expected to notify ICAO of the difference. This transparency allows the international community to understand the deviation.

Question 22International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

An inspector finds that a regulated agent accepts cargo from a known consignor but cannot produce evidence that the consignor's approval is current. What is the most appropriate finding?

  1. The cargo is automatically secured because the consignor claimed approval
  2. The finding is irrelevant if the airway bill is complete
  3. The cargo's secured status is not established and controls must be applied Correct answer.
  4. The cargo may be loaded if the agent promises to check later

Explanation

Without evidence that the known consignor's approval is current, the cargo's secured status cannot be established. The agent must apply the required controls before loading rather than relying on an unverified claim.

Question 23International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

Which scenario best illustrates the principle of 'security culture' within a regulated agent?

  1. Staff proactively report suspicious cargo behaviour and near misses Correct answer.
  2. Management prioritizes speed over all security checks
  3. Staff complete training once and never revisit procedures
  4. Security records are kept only when convenient

Explanation

A positive security culture is shown by proactive reporting of suspicious behaviour and near misses. One-off training, speed over security, and inconsistent recordkeeping indicate weak culture.

Question 24International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

In the context of mail security, why are postal operators and air carriers required to coordinate?

  1. To determine the colour of mail bags
  2. To manage employee holiday schedules
  3. To ensure mail receives appropriate security controls before air carriage Correct answer.
  4. To set the price of postage stamps

Explanation

Coordination between postal operators and air carriers ensures that mail receives the appropriate security controls before it is carried by air. Pricing, bag colour and scheduling are not security coordination matters.

Question 25International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

Which of the following best describes the concept of 'risk-based approach' in cargo security?

  1. Allocating security resources according to assessed threat and vulnerability Correct answer.
  2. Applying identical controls to every shipment regardless of risk
  3. Relying solely on random selection
  4. Eliminating all cargo screening

Explanation

A risk-based approach allocates security resources according to assessed threat, vulnerability and consequence. It does not mean identical controls for all shipments, elimination of screening, or reliance only on randomness.

Question 26International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

Under ICAO Doc 8973 guidance, which entity is responsible for approving a regulated agent's security programme before that agent may handle air cargo?

  1. The shipper who tenders the goods
  2. The competent authority designated by the State Correct answer.
  3. The aircraft operator that will load the consignment
  4. The airport operator owning the warehouse

Explanation

Doc 8973 assigns the approval and oversight of regulated agents to the designated competent authority of the State, which validates the security programme and may inspect the facility. Aircraft operators rely on that approval rather than granting it, and neither airport owners nor shippers hold this regulatory function.

Question 27International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

A State has implemented Annex 17 cargo provisions through national rules that also cover mail. Which instrument primarily governs the facilitation and customs interfaces for mail consignments?

  1. Annex 9 to the Chicago Convention Correct answer.
  2. Annex 17 to the Chicago Convention
  3. Annex 14 to the Chicago Convention
  4. Annex 18 to the Chicago Convention

Explanation

Annex 9 addresses facilitation of international air transport, including customs, postal and documentary interfaces that shape how mail moves. Annex 17 sets the security baseline, while the postal facilitation aspects sit with Annex 9 and must be read together with the security rules.

Question 28International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

A regulated agent in a State aligned with EU rules receives mail consignments from a postal operator. Which arrangement best reflects the required security relationship?

  1. The aircraft operator alone decides whether mail needs any controls
  2. The agent must open every mail bag to verify contents before acceptance
  3. The postal operator must be approved or recognized under the national programme, with agreed screening and handover controls Correct answer.
  4. The agent may treat all mail as screened because postal operators are State entities

Explanation

Mail security depends on the postal operator being brought within the national programme through approval or recognition, with documented screening and handover arrangements to the regulated agent. Controls are risk-based and documented rather than assumed from the operator's status.

Question 29International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

An ANAC-approved regulated agent wants to extend the maximum period cargo may remain in secure storage before additional measures are needed. Which action is consistent with the regulatory framework?

  1. Extend the period whenever the consignment is high-value perishable goods
  2. Apply the extension unilaterally and record it in the internal quality log
  3. Adopt the extension only after the competent authority approves the change to the security programme Correct answer.
  4. Follow the extension used by a foreign carrier operating at the same airport

Explanation

Time limits for secure storage are part of the approved security programme, so any change must be submitted to and approved by the competent authority before it takes effect. Internal records, foreign practice or the nature of the goods cannot substitute for that approval.

Question 30International and national regulatory framework for air cargo and mail security (ICAO Annex 17, Annex 9 facilitation interfaces, ICAO Doc 8973 guidance, EU/ICAO aligned national regulations, ANAC resolutions and directives)

A State's national rules reproduce Annex 17 cargo standards but add stricter screening for certain destinations. How should an instructor explain the legal effect of the stricter national rule on operators?

  1. Operators may ignore it because Annex 17 sets the only binding cargo requirements
  2. Operators must apply the stricter rule only to foreign-flagged carriers
  3. Operators may choose between the national rule and the Annex 17 standard
  4. Operators must comply with the stricter national rule, since Annex 17 sets a minimum that States may exceed Correct answer.

Explanation

Annex 17 establishes baseline standards that Contracting States implement through national regulations, and States retain the ability to impose more stringent measures. Once adopted nationally, the stricter rule is binding on the operators concerned, and the Annex standard does not operate as a ceiling.

Question 31Threat environment and acts of unlawful interference: explosive devices, improvised explosive devices, incendiary devices, insider threat, sabotage and attack methods relevant to cargo operations

In the context of aviation security, which statement best defines an improvised explosive device (IED)?

  1. A device constructed from commercial or homemade components, often concealed, that is designed to detonate and cause damage or injury Correct answer.
  2. A chemical agent dispenser designed to contaminate a water supply
  3. A pyrotechnic item intended solely for signaling and illumination
  4. A factory-manufactured military munition that is dropped from an aircraft

Explanation

An IED is assembled from non-standard or improvised components rather than produced as a certified munition, and it is typically designed to be concealed and initiated remotely or by a victim action. Recognizing that it can be built from everyday materials is central to cargo screening, because appearance alone cannot rule out a threat.

Question 32Threat environment and acts of unlawful interference: explosive devices, improvised explosive devices, incendiary devices, insider threat, sabotage and attack methods relevant to cargo operations

Which of the following best describes an incendiary device in the cargo threat context?

  1. A device that emits an electromagnetic pulse to disable electronics
  2. A device that releases radioactive material into the air
  3. A device that generates fire or intense heat to destroy cargo, without a high-explosive blast effect Correct answer.
  4. A device that produces a blast overpressure wave as its primary effect

Explanation

Incendiary devices are designed to start and sustain fire or produce extreme heat, and their primary purpose is destruction by burning rather than by blast. In cargo operations they can be as dangerous as explosives because a fire in a hold or container may spread undetected.

Question 33Threat environment and acts of unlawful interference: explosive devices, improvised explosive devices, incendiary devices, insider threat, sabotage and attack methods relevant to cargo operations

What is the primary purpose of the insider threat concept in air cargo security?

  1. To detect unauthorized persons attempting to climb the perimeter fence
  2. To focus on people with legitimate access who misuse that access to introduce a threat or defeat security controls Correct answer.
  3. To identify passengers who behave suspiciously at check-in counters
  4. To screen cargo for undeclared dangerous goods only

Explanation

The insider threat concerns individuals who already hold authorized access, such as employees or contractors, and who exploit that position to bypass or undermine security measures. Because they know procedures and blind spots, insiders can be harder to detect than external intruders.

Question 34Threat environment and acts of unlawful interference: explosive devices, improvised explosive devices, incendiary devices, insider threat, sabotage and attack methods relevant to cargo operations

Which statement correctly distinguishes sabotage from other acts of unlawful interference in a cargo facility?

  1. Sabotage is deliberate action intended to damage or disable systems, equipment, or cargo so that operations fail or become unsafe Correct answer.
  2. Sabotage is the theft of cargo for financial gain only
  3. Sabotage is a lawful protest activity conducted outside the facility
  4. Sabotage is any accidental damage caused by careless handling of cargo

Explanation

Sabotage involves intentional acts aimed at damaging or degrading equipment, systems, or cargo, often to cause disruption or create a vulnerability. The key element is deliberate intent to harm operations rather than accidental or purely financial motives.

Question 35Threat environment and acts of unlawful interference: explosive devices, improvised explosive devices, incendiary devices, insider threat, sabotage and attack methods relevant to cargo operations

A shipper delivers a densely packed parcel that feels unusually heavy for its size and has a faint chemical odor. Which action is most consistent with recognized cargo security practice?

  1. Place the parcel in a busy sorting area so that colleagues can inspect it
  2. Open the parcel immediately to identify the contents and the odor
  3. Refuse the shipment without notifying anyone and return it to the driver
  4. Treat the shipment as suspicious, do not open it, and report it through the established security channel Correct answer.

Explanation

Unusual weight, density, or smell are recognized indicators of a possible threat, and the correct response is to avoid handling or opening the item and to report it promptly. Opening a suspect item can trigger a device or expose staff to hazardous material.

Question 36Threat environment and acts of unlawful interference: explosive devices, improvised explosive devices, incendiary devices, insider threat, sabotage and attack methods relevant to cargo operations

Which of the following is a recognized behavioral indicator that may warrant attention under an insider threat program?

  1. An employee regularly arrives early and completes assigned tasks
  2. An employee requests standard training on dangerous goods handling
  3. An employee repeatedly attempts to access cargo areas outside their assigned duties and shows unusual interest in security procedures Correct answer.
  4. An employee takes annual leave at the same time each year

Explanation

Insider threat programs look for patterns such as repeated attempts to access areas beyond one's role, unusual curiosity about security controls, or attempts to bypass procedures. Ordinary reliable behavior or normal administrative requests do not by themselves indicate a threat.

Question 37Threat environment and acts of unlawful interference: explosive devices, improvised explosive devices, incendiary devices, insider threat, sabotage and attack methods relevant to cargo operations

What is the principal hazard of a postal or courier bomb delivered to a cargo facility?

  1. It is harmless until connected to an external power grid
  2. It only poses a risk after being stored for several weeks
  3. It can only be detected by X-ray and never by other means
  4. It is designed to function when handled or opened, placing staff and the facility at risk Correct answer.

Explanation

Mail and courier bombs are typically designed to detonate on opening or handling, which is why suspect items must not be moved or opened. Staff should isolate the item, keep people away, and alert security.

Question 38Threat environment and acts of unlawful interference: explosive devices, improvised explosive devices, incendiary devices, insider threat, sabotage and attack methods relevant to cargo operations

During screening, an operator notices a cargo item whose declared weight and dimensions do not match the shipment documentation. Why is this discrepancy security-relevant?

  1. It proves the shipment contains an explosive device
  2. It means the shipper has committed a customs offence
  3. It may indicate concealment of an undeclared item or falsified documentation, both of which warrant verification Correct answer.
  4. It indicates the cargo must be rejected without further checks

Explanation

Discrepancies between declared and observed characteristics are indicators that something may be concealed or that documentation is unreliable, so the shipment should be verified. A discrepancy alone does not prove a device is present, but it justifies further scrutiny.

Question 39Threat environment and acts of unlawful interference: explosive devices, improvised explosive devices, incendiary devices, insider threat, sabotage and attack methods relevant to cargo operations

A known consignor's employee, who has unescorted access to secure cargo, is seen photographing screening equipment and asking detailed questions about its detection limits. What is the most appropriate assessment?

  1. This is normal curiosity and requires no action
  2. This is a maintenance issue for the equipment manufacturer
  3. This is a training opportunity to explain the equipment's capabilities in detail
  4. This is a potential insider reconnaissance activity and should be reported for security review Correct answer.

Explanation

Photographing security equipment and probing its detection limits can be reconnaissance to identify weaknesses, which is a classic insider threat indicator. Such observations should be reported through the security reporting channel so that the behavior can be assessed.

Question 40Threat environment and acts of unlawful interference: explosive devices, improvised explosive devices, incendiary devices, insider threat, sabotage and attack methods relevant to cargo operations

Why is a layered screening approach, combining X-ray with physical inspection or explosive trace detection, more effective than a single method?

  1. Different methods detect different threat signatures, so combining them reduces the chance that a concealment technique defeats all checks Correct answer.
  2. Layered screening is required only for international shipments
  3. Combining methods eliminates the need for staff training
  4. A single method is sufficient if the operator is experienced

Explanation

No single technology detects every threat; X-ray reveals density and structure while trace detection identifies residues, and physical inspection confirms anomalies. Layering these methods makes it harder for a concealment technique to pass unnoticed.

Question 41Threat environment and acts of unlawful interference: explosive devices, improvised explosive devices, incendiary devices, insider threat, sabotage and attack methods relevant to cargo operations

A cargo handler finds an unattended bag near a loading dock with a visible wire protruding from a seam. What is the priority sequence of actions?

  1. Cut the wire to make the item safe, then continue loading
  2. Carry the bag to the lost property office for safekeeping
  3. Place the bag inside a metal container and resume work
  4. Do not touch it, move people away, secure the area, and notify security or police Correct answer.

Explanation

An unattended item with a protruding wire must be treated as a possible device: avoid contact, evacuate and cordon the immediate area, and call the responsible security or law enforcement authority. Only trained responders should approach or render an item safe.

Question 42Threat environment and acts of unlawful interference: explosive devices, improvised explosive devices, incendiary devices, insider threat, sabotage and attack methods relevant to cargo operations

Which practice most directly reduces the risk of an insider introducing an unauthorized item into a secure cargo chain?

  1. Allowing all staff to use any entrance to speed up operations
  2. Applying the principle of least privilege so that access is limited to what each role requires, with monitoring Correct answer.
  3. Reducing the frequency of random checks to improve productivity
  4. Relying on self-declaration of trustworthy behavior at hiring only

Explanation

Least privilege limits the opportunity for any single person to access sensitive areas or cargo, and monitoring deters and detects misuse. Access control is a preventive measure, whereas relying only on hiring declarations or reducing checks weakens deterrence.

Question 43Threat environment and acts of unlawful interference: explosive devices, improvised explosive devices, incendiary devices, insider threat, sabotage and attack methods relevant to cargo operations

An X-ray image shows a dense, irregular object with a thin external power source inside a shipment declared as clothing. What does this most reasonably suggest?

  1. A packaging defect that should be returned to the shipper unopened
  2. A possible concealed device requiring physical inspection and escalation Correct answer.
  3. A normal clothing accessory that needs no further action
  4. A dangerous goods declaration error only

Explanation

A dense irregular mass combined with a power source is inconsistent with a declaration of clothing and suggests possible concealment of an energetic device. The correct response is to escalate and conduct a controlled physical inspection rather than to accept the declaration.

Question 44Threat environment and acts of unlawful interference: explosive devices, improvised explosive devices, incendiary devices, insider threat, sabotage and attack methods relevant to cargo operations

Which statement about the placement of an explosive device in an aircraft cargo compartment is most accurate?

  1. Only devices in the passenger cabin can endanger a flight
  2. A cargo device poses a risk only after landing
  3. Cargo compartment devices are harmless because the area is unpressurized
  4. A device placed in a cargo compartment can threaten the aircraft even if it is not in the passenger cabin, because blast and fire effects may damage critical structure or systems Correct answer.

Explanation

Cargo compartments are adjacent to critical structure and systems, and a detonation there can cause catastrophic damage or fire. This is why cargo screening is a core security layer rather than a secondary check.

Question 45Threat environment and acts of unlawful interference: explosive devices, improvised explosive devices, incendiary devices, insider threat, sabotage and attack methods relevant to cargo operations

What is the security significance of a shipment whose documentation lists a consignee that cannot be verified and a return address that does not exist?

  1. It proves the shipment contains an incendiary device
  2. It is normal for freight forwarding and needs no action
  3. It means the shipment should be opened by the driver at the gate
  4. It may indicate a false front used to move a threat item, and the shipment should be held and verified before carriage Correct answer.

Explanation

Unverifiable consignee and return address details are red flags for a false front designed to obscure the origin or destination of a threat item. The shipment should be held and verified through the appropriate security process before it moves.

Question 46Threat environment and acts of unlawful interference: explosive devices, improvised explosive devices, incendiary devices, insider threat, sabotage and attack methods relevant to cargo operations

Which of the following best explains why an incendiary device may be harder to detect than an explosive device during routine cargo handling?

  1. It emits a continuous radio signal that is easy to locate
  2. It always contains metal components that trigger every alarm
  3. It is always larger than an explosive device
  4. It may produce no blast signature and only reveal itself through heat or smoke after it has already ignited Correct answer.

Explanation

Incendiary devices may rely on delayed ignition and produce no immediate blast or obvious signature, so the first sign can be heat or smoke after the item is already in the cargo stream. This makes early detection through screening and observation especially important.

Question 47Threat environment and acts of unlawful interference: explosive devices, improvised explosive devices, incendiary devices, insider threat, sabotage and attack methods relevant to cargo operations

A screener observes a package with a timer-like component, batteries, and putty-like material in the X-ray image. What is the most appropriate immediate action?

  1. Stop the screening process, isolate the item, and escalate to the bomb response authority without handling it Correct answer.
  2. Return the package to the shipper with a warning note
  3. Continue screening to see whether the next item is similar
  4. Open the package to confirm whether the putty is explosive

Explanation

The combination of a timing component, power source, and malleable mass is a classic device signature that requires immediate escalation and isolation. Staff must not handle or open the item; only trained responders should intervene.

Question 48Threat environment and acts of unlawful interference: explosive devices, improvised explosive devices, incendiary devices, insider threat, sabotage and attack methods relevant to cargo operations

Which factor makes a cargo facility particularly attractive to a person planning sabotage?

  1. Access to multiple shipments and aircraft with predictable schedules and many staff movements Correct answer.
  2. Regular security audits and drills
  3. A single controlled entry point with badge verification
  4. A strict access control system with continuous monitoring

Explanation

High volumes, predictable schedules, and many staff movements create opportunities to introduce or tamper with items while blending in. Strong access control, audits, and drills reduce rather than create that attractiveness.

Question 49Threat environment and acts of unlawful interference: explosive devices, improvised explosive devices, incendiary devices, insider threat, sabotage and attack methods relevant to cargo operations

An employee reports that a colleague offered money to leave a cargo door unlocked overnight. How should this report be handled?

  1. Ignore it because no actual breach has occurred
  2. Discuss it openly with the whole shift to deter others
  3. Treat it as a credible insider threat report, protect the reporter's identity, and refer it to the security authority for investigation Correct answer.
  4. Confront the colleague directly and ask for an explanation

Explanation

Offering inducement to defeat a security control is a serious insider threat indicator that must be reported and investigated through proper channels. Protecting the reporter's identity encourages future reporting and avoids tipping off the subject.

Question 50Threat environment and acts of unlawful interference: explosive devices, improvised explosive devices, incendiary devices, insider threat, sabotage and attack methods relevant to cargo operations

Which of the following best describes the concept of a 'Trojan' shipment in cargo security?

  1. A shipment that is returned to the sender due to documentation errors
  2. A shipment that is inspected twice by different operators
  3. A legitimate-looking consignment used to carry a concealed threat item past screening Correct answer.
  4. A consignment of perishable goods requiring priority handling

Explanation

A Trojan shipment exploits the appearance of routine, legitimate freight to smuggle a threat past screening undetected. Understanding this technique supports risk-based targeting and random inspection.