ANAC ISCR Theoretical Exam (AVSEC Security Screening Instructor) common mistakes
ANAC ISCR Theoretical Exam (AVSEC Security Screening Instructor) · Understand the traps and how to avoid them.
Citing only the national ANAC decree when asked how a screening procedure is justified, without tracing it back to the ICAO Annex 17 Standard or Recommended Practice it implements.
Candidates memorize the local regulation text in isolation and never build a mental map from Annex 17 Standards to national implementing rules, so they cannot explain the regulatory lineage when a question asks for the source or rationale.
What to do instead
For each major national requirement, write a one-line cross-reference to the corresponding Annex 17 provision (and Annex 9 or Doc 8973 where relevant), and practise answering 'what international obligation does this implement?' before 'what does the local rule say?'.
Treating Annex 17 Standards and Recommended Practices as interchangeable, and answering 'must' for items that are actually recommendations or guidance material.
The Annex 17 text is short and dense; candidates skim it and recall topic headings rather than the binding force of each provision, and they conflate Standards with Doc 8973 guidance.
What to do instead
Build a two-column table of Standards versus Recommended Practices for each Annex 17 chapter, annotate the verb used in each provision, and drill on distinguishing binding obligations from guidance before answering any compliance question.
Classifying a scenario as an act of unlawful interference based only on the outcome (e.g. 'no one was hurt, so it was a security incident, not unlawful interference') rather than on the defined elements of the offence.
Candidates reason from consequence and severity instead of from the legal definition, and they have not internalized the enumerated categories of unlawful interference in the international conventions and Annex 17.
What to do instead
Memorize the enumerated categories and test each scenario against the elements (intent, violence or threat, against civil aviation), then practise sorting a mixed list of 20 scenarios into unlawful interference, security incident, and breach of procedure with a written justification for each.
Performing a risk assessment by listing threats only, without assigning likelihood and impact or identifying the vulnerability that lets the threat succeed.
Candidates confuse threat identification with risk assessment and have not practised the threat-vulnerability-consequence structure, so they produce descriptive lists instead of an assessed risk.
What to do instead
Use a fixed template for every answer: threat, vulnerability, consequence, likelihood rating, impact rating, resulting risk level, and one mitigating control with its residual risk. Practise on airport-specific scenarios such as insider access abuse and perimeter intrusion.
Describing access control as 'checking badges at doors' without addressing authorization levels, need-to-know and need-to-access principles, escorting of unescorted-clearance exceptions, and the audit trail.
Candidates recall the visible front-end task but not the layered system behind it, and they have not studied how identification, authorization, and accountability interact in a security programme.
What to do instead
For each access point type, write the full control chain: identity verification, authorization check, escort rule, recording, and review cycle. Then answer practice questions by naming the specific layer being tested rather than describing the checkpoint generally.
Answering passenger and cabin baggage screening questions with a single generic 'X-ray the bag' step, omitting the sequence of divestment, primary screening, resolution of alarms, physical search, and the decision authority for each stage.
Candidates learn the equipment but not the procedural flow, so they cannot place the correct action at the correct stage or identify who may clear an alarm.
What to do instead
Draw the full screening flow as a numbered diagram for both passenger and cabin baggage, annotate the decision authority at each node, and rehearse 'what happens next if this alarm is not resolved at this stage?' until the sequence is automatic.
Identifying a prohibited item in an image by naming the object only (e.g. 'a knife') without stating its location, orientation, and why it is prohibited under the applicable category.
Candidates practise recognition but not reporting, and exam items that require justification expose the gap between spotting a shape and articulating a defensible finding.
What to do instead
Adopt a fixed reporting format: item, position by clock reference and depth, orientation, category of prohibition, and handling action. Practise verbalizing findings aloud on unfamiliar images until the format is habitual.
Describing equipment operation as pressing buttons, without covering system checks, calibration and routine testing, image quality verification, and the fault-reporting and maintenance escalation path.
Candidates treat the machine as a black box and skip the operator-level performance assurance duties that the exam treats as core instructor knowledge.
What to do instead
Build a pre-shift checklist and a weekly performance verification routine for each equipment type, and be able to state the operator's responsibility boundary versus the technician's, including what must be recorded and to whom faults are escalated.
Writing a lesson plan that lists content topics but omits measurable learning objectives, assessment method, timing, and the link between objective and evaluation.
Candidates come from operational backgrounds and write content outlines rather than instructional designs, so they never connect what is taught to how competence is verified.
What to do instead
Use a constructivist alignment template: one observable objective per block using a measurable verb, the activity that develops it, the assessment that evidences it, and the time allocation. Rewrite any objective that cannot be observed or measured.
Designing assessments that only test recall (multiple choice on definitions) when the stated objective is a practical skill such as image interpretation or alarm resolution, and then failing to define a pass standard.
Candidates default to the assessment format they themselves experienced and do not match assessment method to the cognitive or psychomotor level of the objective.
What to do instead
Map each objective to a Bloom level and choose the matching method: performance test with a checklist for psychomotor skills, scenario-based judgement for decision-making. State the pass criteria, the number of attempts, and the remediation path explicitly.