I85PREP
⌘ K
IB Security Assistant study materials
IB Security Assistant study resources

IB Security Assistant practice questions

One question at a time. Build your IB Security Assistant understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1General Awareness

Under the Indian Constitution, which body is vested with the executive power of the Union?

  1. The President of India Correct answer.
  2. The Union Cabinet Secretary
  3. The Council of Ministers headed by the Prime Minister
  4. The Prime Minister alone

Explanation

Article 53 states that the executive power of the Union is vested in the President and is exercised by him directly or through officers subordinate to him. The President acts on the aid and advice of the Council of Ministers under Article 74, but the vesting itself is in the President.

Question 2General Awareness

In the Indian security administration, what does the term 'MHA' commonly refer to?

  1. Maritime Harbour Authority
  2. Ministry of Home Affairs Correct answer.
  3. Ministry of Health Administration
  4. Military Headquarters Administration

Explanation

The Ministry of Home Affairs is the central ministry responsible for internal security, border management, and police administration. It is the parent ministry for organizations such as the IB, NIA, and CAPFs.

Question 3General Awareness

Which intelligence organisation in India functions under the Ministry of Home Affairs and handles domestic intelligence?

  1. National Technical Research Organisation
  2. Intelligence Bureau Correct answer.
  3. Research and Analysis Wing
  4. Defence Intelligence Agency

Explanation

The Intelligence Bureau is India's domestic intelligence agency and reports to the Ministry of Home Affairs. RAW handles external intelligence, while NTRO and DIA have specialised technical and defence roles.

Question 4General Awareness

Which fundamental right under the Indian Constitution protects a person from arbitrary arrest and detention?

  1. Right to equality before law
  2. Right to life and personal liberty Correct answer.
  3. Right to freedom of speech
  4. Right to constitutional remedies

Explanation

Article 21 guarantees the right to life and personal liberty, and courts have read procedural safeguards against arbitrary arrest into it. Article 22 provides additional protections on arrest and detention.

Question 5General Awareness

In security terminology, what does the term 'CAPF' stand for?

  1. Coastal Armed Patrol Force
  2. Central Agency for Public Fraud
  3. Civil Auxiliary Police Federation
  4. Central Armed Police Forces Correct answer.

Explanation

Central Armed Police Forces is the collective term for forces such as the CRPF, BSF, CISF, ITBP, SSB, and Assam Rifles. These forces are under the administrative control of the Ministry of Home Affairs.

Question 6General Awareness

Which body is the apex constitutional authority for conducting elections to the Lok Sabha and State Legislative Assemblies?

  1. Election Commission of India Correct answer.
  2. Ministry of Parliamentary Affairs
  3. NITI Aayog
  4. Law Commission of India

Explanation

Article 324 establishes the Election Commission of India as the authority for superintendence, direction, and control of elections to Parliament and State legislatures. It also oversees elections to the offices of President and Vice-President.

Question 7General Awareness

Which agency is India's national nodal body for investigating terrorist offences under the NIA Act, 2008?

  1. Narcotics Control Bureau
  2. National Investigation Agency Correct answer.
  3. Central Bureau of Investigation
  4. Enforcement Directorate

Explanation

The National Investigation Agency was created by the NIA Act, 2008, to investigate and prosecute offences relating to terrorism and other scheduled offences. It has jurisdiction throughout India without requiring special state consent.

Question 8General Awareness

What is the primary purpose of the Official Secrets Act, 1923 in India?

  1. To protect state secrets and prevent espionage Correct answer.
  2. To regulate the publication of government advertisements
  3. To govern the recruitment of civil servants
  4. To manage public records and archives

Explanation

The Official Secrets Act, 1923 penalises spying and the unauthorised disclosure of information that is secret or sensitive for national security. It is one of the oldest laws used in espionage-related prosecutions in India.

Question 9General Awareness

Which of the following best describes the role of a Security Assistant in a government security setup?

  1. Conducting criminal trials in special courts
  2. Framing national defence policy
  3. Supporting intelligence collection, verification, and security-related record keeping Correct answer.
  4. Commanding armed police battalions in the field

Explanation

A Security Assistant typically supports intelligence and security work through information collection, verification, surveillance support, and maintenance of records. The role is assistive and analytical rather than judicial or command-oriented.

Question 10General Awareness

Which of the following is a scheduled offence under the NIA Act, 2008?

  1. A civil suit for breach of contract
  2. A dispute over property boundaries between neighbours
  3. A consumer complaint about defective goods
  4. An act of terrorism as defined in the Unlawful Activities (Prevention) Act Correct answer.

Explanation

The Schedule to the NIA Act lists offences, including those under the Unlawful Activities (Prevention) Act, that the NIA may investigate. Ordinary civil or consumer disputes fall outside this schedule.

Question 11General Awareness

A person is arrested and not produced before a magistrate within 24 hours. Which constitutional safeguard is most directly violated?

  1. Article 29
  2. Article 25
  3. Article 22(2) Correct answer.
  4. Article 19(1)(a)

Explanation

Article 22(2) requires that an arrested person be produced before the nearest magistrate within 24 hours of arrest, excluding travel time. Failure to do so breaches a fundamental safeguard against arbitrary detention.

Question 12General Awareness

Which of the following would most likely constitute an offence under the Prevention of Money Laundering Act?

  1. Depositing undisclosed cash from a drug sale into a bank account Correct answer.
  2. Publishing an unverified news report
  3. Failing to renew a trade licence
  4. Filing income tax returns late

Explanation

Money laundering involves concealing the proceeds of a scheduled offence, such as drug trafficking, by integrating them into the legitimate financial system. Late tax filing or licensing lapses are administrative matters, not laundering.

Question 13General Awareness

In the context of border management, what is the role of the Border Security Force?

  1. Guarding India's land borders during peacetime and preventing trans-border crime Correct answer.
  2. Conducting counter-insurgency operations only within cities
  3. Patrolling India's territorial waters
  4. Providing security to airports and seaports

Explanation

The BSF is tasked with guarding India's land borders, particularly with Pakistan and Bangladesh, and with preventing smuggling and trans-border infiltration. Maritime and airport security are handled by other agencies.

Question 14General Awareness

A candidate for a security-sensitive post fails to disclose a prior arrest that was later closed without charge. Why does this matter in a security vetting context?

  1. Incomplete disclosure undermines reliability and can be treated as a security concern Correct answer.
  2. Vetting only examines educational qualifications
  3. Arrests are automatically expunged and need not be mentioned
  4. Only convictions matter, so the omission is irrelevant

Explanation

Security vetting assesses integrity and reliability, not just convictions. Concealing an arrest, even one that ended without charge, can indicate untrustworthiness and is itself a security concern.

Question 15General Awareness

Which of the following best describes the term 'sedition' as used in Indian law?

  1. A private disagreement between two officials
  2. Conduct that brings the government established by law into hatred or contempt Correct answer.
  3. Refusal to pay municipal taxes
  4. Any criticism of government policy published in a newspaper

Explanation

Sedition, historically under Section 124A of the Indian Penal Code, targets conduct that excites disaffection or brings the government established by law into hatred or contempt. Mere criticism of policy is not, by itself, sedition.

Question 16General Awareness

Which organisation is responsible for the security of India's airports and key installations such as nuclear and space facilities?

  1. Assam Rifles
  2. Indo-Tibetan Border Police
  3. Sashastra Seema Bal
  4. Central Industrial Security Force Correct answer.

Explanation

The CISF provides security to airports, seaports, and critical installations including nuclear and space facilities. It is a Central Armed Police Force under the Ministry of Home Affairs.

Question 17General Awareness

A suspicious package is found at a railway station. Which sequence best reflects sound first-response practice for a security assistant?

  1. Open the package to identify the contents, then inform the police
  2. Carry the package to the nearest police station
  3. Announce the contents to the crowd to reduce panic
  4. Cordon off the area, avoid touching the object, and alert the bomb disposal and police authorities Correct answer.

Explanation

Standard first-response practice is to isolate the area, avoid handling the object, and alert trained bomb disposal and police units. Handling or opening the package risks detonation and destroys forensic evidence.

Question 18General Awareness

Which of the following is the clearest example of a 'sleeper cell' in counter-terrorism terminology?

  1. A committee reviewing intelligence budgets
  2. A team of police negotiators trained for hostage crises
  3. A unit of soldiers deployed along a ceasefire line
  4. A group of operatives living quietly in society while awaiting orders to act Correct answer.

Explanation

A sleeper cell is a covert group that blends into normal society and remains dormant until activated for an operation. This distinguishes it from overt security units or administrative bodies.

Question 19General Awareness

Which of the following best explains why 'need to know' is a core principle in handling classified information?

  1. It requires publishing classified documents for transparency
  2. It applies only to information older than ten years
  3. It limits access to persons whose duties require the information Correct answer.
  4. It ensures every employee in an office can access all files

Explanation

The need-to-know principle restricts access to classified information to individuals whose official duties require it. This minimises the risk of leakage and limits the damage if a breach occurs.

Question 20General Awareness

Which of the following would be treated as a 'scheduled offence' under the Unlawful Activities (Prevention) Act framework when linked to terrorism?

  1. Applying for a passport renewal
  2. Raising funds for an organisation declared unlawful Correct answer.
  3. Disputing a bank service charge
  4. Filing a complaint against a neighbour

Explanation

UAPA penalises activities such as raising funds for unlawful associations and supporting terrorist acts. Ordinary administrative or civil complaints do not fall within the Act's scope.

Question 21General Awareness

An officer discovers that a colleague has been photographing classified documents with a mobile phone. What is the most appropriate immediate action under security discipline?

  1. Delete the photographs from the colleague's phone personally
  2. Ignore it because the colleague is senior
  3. Discuss the incident in a group chat to gather opinions
  4. Report the incident to the designated security officer and preserve evidence Correct answer.

Explanation

Security discipline requires prompt reporting to the designated authority and preservation of evidence for investigation. Personal intervention or informal discussion can compromise the case and violate protocol.

Question 22General Awareness

Which of the following best describes the constitutional position of the Intelligence Bureau in relation to Parliament?

  1. It is an autonomous body outside the Union executive
  2. It is an executive agency under the Ministry of Home Affairs and accountable through the executive Correct answer.
  3. It is a constitutional body directly elected by Parliament
  4. It functions under the Supreme Court's direct supervision

Explanation

The IB is an executive agency under the Ministry of Home Affairs and is accountable through the executive chain rather than being a constitutional body. It is not directly elected or supervised by the judiciary.

Question 23General Awareness

In the context of Indian federalism, why can the CBI investigate a case in a state only with that state's consent (or under a court order)?

  1. Because the CBI is a private organisation
  2. Because police and public order are state subjects under the Constitution Correct answer.
  3. Because the CBI has no statutory existence whatsoever
  4. Because states have their own currency

Explanation

Police and public order are State List subjects, so the CBI, though established under the Delhi Special Police Establishment Act, generally requires state consent to operate within a state. Courts can direct the CBI in appropriate cases.

Question 24General Awareness

Which of the following best captures the distinction between 'intelligence' and 'information' in security work?

  1. They are identical terms with no practical difference
  2. Information is always classified while intelligence is always public
  3. Intelligence refers only to military troop counts
  4. Intelligence is information that has been processed, analysed, and evaluated for relevance to a decision Correct answer.

Explanation

Intelligence is the product of collecting, collating, and analysing information so that it supports a decision or action. Raw information becomes intelligence only after evaluation and interpretation.

Question 25General Awareness

A state government wishes to withdraw consent given earlier for CBI investigation of a case. What is the most accurate statement of the legal position?

  1. Only the President of India can withdraw state consent
  2. Withdrawal automatically nullifies all prior investigation and court proceedings
  3. Consent, once given, can never be withdrawn under any circumstance
  4. Consent is generally case-specific and can be withdrawn prospectively, though it does not invalidate actions already taken Correct answer.

Explanation

CBI consent is generally case-specific and can be withdrawn prospectively by the state, but withdrawal does not automatically invalidate steps already completed or orders of a court. The Supreme Court has clarified this position in several rulings.

Question 26General Awareness

A Security Assistant is asked to verify a visitor's identity at the reception of a protected government building. Which document check is the most reliable single step?

  1. Accepting a business card printed by the visitor's employer as proof of identity
  2. Comparing the photograph on a government-issued photo identity card with the visitor's face Correct answer.
  3. Relying on a verbal introduction from a staff member who knows the visitor
  4. Recording only the visitor's mobile number in the register

Explanation

Identity verification requires matching a person to a document that carries both a photograph and an issuing authority. A government-issued photo identity card supports that comparison because it is standardised and difficult to forge casually. Other signals such as business cards or verbal introductions carry no independent authentication value.

Question 27General Awareness

In Indian government security practice, what does the classification label 'Restricted' indicate about a document?

  1. It may be circulated freely within the department and shared with the public on request
  2. It is the highest classification and requires Cabinet-level authorisation to open
  3. It applies only to documents that contain foreign-origin material
  4. It is the lowest level of security classification and is meant only for limited official use Correct answer.

Explanation

Indian security classifications run in an ascending order of sensitivity, and 'Restricted' sits at the lowest rung of that ladder. It marks material intended for limited official circulation rather than public release. It is not the top classification, which is reserved for far more sensitive categories.

Question 28General Awareness

A Security Assistant notices that a fire exit in the office corridor has been padlocked to prevent unauthorised entry. What is the most appropriate immediate response?

  1. Break the lock personally so the exit stays open permanently
  2. Leave it locked because security of the premises takes precedence over fire safety
  3. Report it to the fire safety officer or administrative authority so the exit is restored Correct answer.
  4. Note the observation in a register and wait for the next annual inspection

Explanation

Fire exits must remain unobstructed and operable at all times, so a padlocked exit is a reportable safety violation. The correct action is to escalate it promptly to the officer responsible for fire safety or building administration. Security and fire safety are complementary duties, not competing ones.

Question 29General Awareness

Which of the following best describes the purpose of a visitor management register maintained at the gate of a protected installation?

  1. It creates a legal record of who entered, when, and for what stated purpose Correct answer.
  2. It is maintained only for audit of the canteen and transport facilities
  3. It is used to rank visitors by their seniority in their own organisations
  4. It replaces the need for identity verification at the gate

Explanation

A visitor register provides an auditable trail of entries and exits, including the stated purpose of the visit. This record supports investigation after an incident and deters unauthorised entry. It supplements, but never substitutes for, identity verification.

Question 30General Awareness

A Security Assistant receives a phone call from a person claiming to be a senior officer and asking for the duty roster of the installation. What is the soundest course of action?

  1. Provide the roster because refusing a senior officer could invite disciplinary action
  2. Ask the caller to send the request on WhatsApp and then share the roster
  3. Decline to share, verify the caller's identity through official channels, and report the call Correct answer.
  4. Share only the names on the roster but withhold the shift timings

Explanation

Duty rosters reveal guard deployment patterns and are sensitive operational information. A telephonic claim of authority cannot be verified on the spot, so the request must be authenticated through official channels before any disclosure. Reporting the attempt also lets the organisation track social-engineering probes.

Question 31General Awareness

What is the primary function of a photo identity pass worn by employees inside a high-security government complex?

  1. It serves as a substitute for the employee's service record
  2. It authorises the employee to carry firearms within the complex
  3. It enables quick visual confirmation that the wearer is authorised for that area Correct answer.
  4. It indicates the employee's pay grade and seniority

Explanation

An identity pass allows guards and staff to confirm at a glance that a person is authorised to be in a given area. It supports continuous, low-friction verification across the premises. It does not confer powers or privileges beyond access.

Question 32General Awareness

Which of the following behaviours by an employee most clearly warrants reporting to security authorities as a possible counter-intelligence concern?

  1. Repeatedly photographing security layouts and asking detailed questions about guard change timings Correct answer.
  2. Requesting a transfer to another department through the proper channel
  3. Regularly taking work files home to complete reports over the weekend with prior approval
  4. Attending an official training programme on physical security procedures

Explanation

Unexplained interest in security layouts and guard rotation timings is a classic indicator of pre-operational reconnaissance. Such behaviour departs from a person's legitimate work requirement and should be reported. The other listed actions are normal, approved workplace conduct.

Question 33General Awareness

What does the term 'contraband' mean in the context of searches conducted at a protected government establishment?

  1. Any item that is not listed in the establishment's inventory register
  2. Only items that have been stolen from the establishment itself
  3. Any goods or material whose possession or entry is prohibited by law or by establishment rules Correct answer.
  4. Documents that have not been stamped by the receiving section

Explanation

Contraband refers to goods that are prohibited by law or barred by the rules of the establishment, such as unauthorised weapons or banned substances. The concept turns on prohibition, not on inventory status or ownership history. Detecting contraband is a core purpose of gate searches.

Question 34General Awareness

A Security Assistant is handed a sealed envelope marked for a senior officer and is asked to leave it on an unattended desk. What is the correct handling practice?

  1. Leave it on the desk as instructed and inform the officer later
  2. Open the envelope to confirm the contents before delivery
  3. Hand it over against a signature to an authorised recipient or secure it in the designated mail system Correct answer.
  4. Ask a passing colleague to deliver it whenever convenient

Explanation

Official correspondence must move through a chain of accountability, normally evidenced by signature or a secure mail system. Leaving material unattended creates a risk of loss, tampering, or unauthorised disclosure. Opening the envelope exceeds the assistant's authority.

Question 35General Awareness

Which of the following best explains why security staff are rotated periodically between posts in a sensitive installation?

  1. Rotation is required because guards cannot legally work the same post twice
  2. Rotation reduces the risk of collusive familiarity and complacency at a single post Correct answer.
  3. Rotation is done purely to equalise travel time for all staff
  4. Rotation ensures that every guard learns the entire filing system

Explanation

Long, unbroken tenure at one post can breed complacency and allow improper familiarity or collusion to develop. Periodic rotation disrupts these patterns and broadens each guard's awareness of the installation. It is a risk-management measure rather than a legal mandate.

Question 36General Awareness

During a bomb-threat call received at a government office, which action by the receiver yields the most useful intelligence for responders?

  1. Announcing over the public address system that a threat has been received
  2. Keeping the caller talking and noting exact words, background sounds, and time of call Correct answer.
  3. Hanging up immediately so that the line is free for outgoing calls
  4. Transferring the call to the security guard without listening further

Explanation

A threat caller is a source of information about the device, location, and timing, so prolonging the conversation while recording details is the priority. Background noise, accent, and exact phrasing all assist the subsequent investigation. Immediate disconnection destroys that evidence.

Question 37General Awareness

A sealed parcel arrives at the mail room and shows an oily stain, a wire protruding from one corner, and an unusual chemical smell. What should the mail-room staff do first?

  1. Carry the parcel to the security office for examination by the officer on duty
  2. Spray the parcel with water to neutralise any chemical hazard
  3. Place it gently in an isolated area, evacuate nearby staff, and alert bomb disposal Correct answer.
  4. Open the parcel carefully to identify the contents before deciding

Explanation

These indicators match the recognised warning signs of a suspected explosive or hazardous device. The correct response is to avoid handling, isolate the item, move people away, and call trained responders. Any manipulation risks detonation or exposure.

Question 38General Awareness

Which of the following best captures the difference between 'authentication' and 'authorisation' in access control?

  1. Authentication confirms who a person is; authorisation determines what that person may access Correct answer.
  2. Authentication applies only to visitors, while authorisation applies only to employees
  3. Authentication determines what a person may access; authorisation confirms identity
  4. Both terms describe the same check performed at different gates

Explanation

Authentication establishes identity, typically through a credential or biometric check. Authorisation then maps that verified identity to a set of permitted resources or areas. The two are sequential and distinct control functions.

Question 39General Awareness

A Security Assistant is directed by a junior officer to allow a contractor into a server room without an escort. The access rules require an escort for all contractors. What is the best response?

  1. Comply, because a direct instruction from any officer overrides written procedure
  2. Refuse and politely explain the escort requirement, escalating if the instruction is repeated Correct answer.
  3. Ask the contractor to sign a personal indemnity and then allow entry
  4. Allow entry but note the deviation in the register afterwards

Explanation

Written access procedures exist to control risk and are not overridden by informal instructions from a junior officer. The assistant should decline, state the rule, and escalate persistent pressure to the appropriate authority. This protects both the installation and the assistant.

Question 40General Awareness

What is the principal security reason for the 'two-person rule' applied to vaults and strong rooms?

  1. It guarantees that both staff members learn the combination
  2. It ensures that no single person can access the contents without a witness Correct answer.
  3. It reduces salary costs by sharing duties between staff
  4. It satisfies a requirement that all tasks be performed by committees

Explanation

The two-person rule requires simultaneous presence of two authorised individuals, so access cannot occur without a witness. This deters insider theft and makes collusion harder to conceal. The rule is a control on individual access, not an administrative convenience.

Question 41General Awareness

A cyber cafe near a defence establishment is frequented by persons who ask staff about the movement of military vehicles. From a security standpoint, what does this pattern most likely represent?

  1. Possible hostile surveillance and elicitation that should be reported to local security or police Correct answer.
  2. A legitimate transport survey authorised by the municipal body
  3. Routine commercial curiosity with no security significance
  4. A matter exclusively for the cyber cafe's private management

Explanation

Systematic questioning about the movement of military vehicles fits the pattern of hostile surveillance and elicitation. Such indicators are meant to be reported so that intelligence and police agencies can assess them. Treating it as ordinary curiosity would leave a potential threat unexamined.

Question 42General Awareness

Which of the following is the most appropriate way to dispose of draft documents that contain details of a security deployment plan?

  1. Shredding them through a cross-cut shredder or placing them in the designated classified-waste container Correct answer.
  2. Leaving them in a recycling bag for the housekeeping staff
  3. Tearing them into four pieces and placing them in the ordinary waste bin
  4. Storing them indefinitely in an unlocked cupboard to preserve the record

Explanation

Sensitive drafts must be destroyed so that they cannot be reconstructed, which requires cross-cut shredding or a controlled classified-waste channel. Ordinary waste and recycling expose the content to unauthorised readers. Indefinite unlocked storage defeats the purpose of disposal.

Question 43General Awareness

A visitor at a protected site becomes agitated and refuses to leave the reception area after being denied entry. Which response best reflects sound security practice?

  1. Argue with the visitor to establish who is right in front of other visitors
  2. Maintain distance, keep the voice calm, call for backup, and follow the site's incident procedure Correct answer.
  3. Physically restrain the visitor immediately without any warning
  4. Ignore the visitor and continue with routine paperwork until the person leaves

Explanation

De-escalation through calm communication and maintaining a safe distance reduces the chance of violence while backup is arranged. Following the documented incident procedure ensures a coordinated and defensible response. Immediate force or confrontation escalates risk unnecessarily.

Question 44General Awareness

What does 'need to know' mean when applied to a classified briefing shared within a security team?

  1. Access is limited to those whose duties genuinely require the specific information Correct answer.
  2. The briefing may be shared once the recipient signs a general confidentiality bond
  3. Only the most senior officer in the team may ever read the briefing
  4. Every member of the team is entitled to the briefing because they hold the same rank

Explanation

The need-to-know principle limits access to information to persons whose current duties require it, irrespective of rank or clearance alone. A general confidentiality bond does not by itself establish that requirement. This containment limits the damage from any single leak.

Question 45General Awareness

During an emergency evacuation of a government building, a Security Assistant is at the main gate. Which action best supports both safety and security?

  1. Directing evacuees to the nearest exit regardless of whether it opens onto a secure area
  2. Locking all exits so that no one can leave until the police arrive
  3. Leaving the post immediately to join the crowd exiting the building
  4. Guiding evacuation through designated routes while preventing unauthorised entry through the gate Correct answer.

Explanation

The gate post must continue to serve its access-control function even during an evacuation. Guiding people along designated routes while blocking unauthorised entry protects both life safety and perimeter integrity. Abandoning the post or sealing exits would create new hazards.

Question 46General Awareness

A senior officer instructs a Security Assistant to bypass the metal detector for a visiting delegation to avoid delay. What is the most defensible course of action?

  1. Bypass the check but record the names of delegation members in the register
  2. Request written authorisation from the competent authority and follow the prescribed exemption procedure Correct answer.
  3. Bypass the check because the officer has accepted responsibility verbally
  4. Follow the instruction only if the delegation is larger than ten persons

Explanation

Any relaxation of screening must rest on written authority from the competent officer and follow the established exemption procedure. A verbal instruction leaves no accountable record and exposes the assistant to serious risk. Documented authorisation preserves both security accountability and the assistant's position.

Question 47General Awareness

An assistant finds that a colleague routinely removes official files from the office without any outward or inward entry. Which combination of actions best reflects the correct security response?

  1. Quietly return the files to the cupboard and say nothing to avoid conflict
  2. Wait until the colleague's annual performance review to raise the matter
  3. Report the observation factually to the appropriate supervisory or security authority without tipping off the colleague Correct answer.
  4. Confront the colleague publicly and demand an explanation in front of the team

Explanation

Unauthorised removal of official files is a reportable security concern that may indicate espionage, leakage, or theft. The correct response is a factual report to the competent authority, which preserves the investigation and protects the informant. Confrontation or concealment risks destroying evidence and escalating the harm.

Question 48General Awareness

A Security Assistant is asked to prepare a post-incident report about an unauthorised entry. Which feature most distinguishes a report that will be useful to investigators?

  1. It avoids naming any individual so that no one is embarrassed
  2. It summarises the incident in a single sentence to save reading time
  3. It offers a detailed theory of the intruder's motive and background
  4. It records facts, times, persons, and observations in chronological order without speculation Correct answer.

Explanation

Investigative value comes from a precise, chronological record of verifiable facts and observations. Speculation about motive contaminates the record and can mislead the inquiry. A report must also identify persons and be detailed enough to reconstruct events.

Question 49General Awareness

In a threat assessment, a person posts online about the layout of a protected installation, purchases large quantities of a precursor chemical, and abruptly withdraws from family contact. What does this pattern most strongly suggest to a trained security analyst?

  1. A convergence of capability, intent, and preparation indicators that warrants escalation Correct answer.
  2. A harmless hobbyist interest in chemistry and architecture
  3. A matter solely for the social media platform's content moderators
  4. A routine change in personal circumstances requiring no attention

Explanation

Threat assessment looks for convergence of capability, intent, and preparation rather than any single indicator. Precursor acquisition supplies capability, layout reconnaissance suggests targeting, and social withdrawal is a common behavioural change. Together they justify escalation to the competent authority.

Question 50General Awareness

A guard at a sensitive installation notices that a CCTV camera covering a rear boundary has been pointing at the wall for two days. Why is this observation significant beyond a simple equipment fault?

  1. It is relevant only to the maintenance contractor's work schedule
  2. It may represent deliberate blinding of a surveillance blind spot and should be investigated as a possible security breach Correct answer.
  3. It proves that a burglary has already occurred at the installation
  4. It indicates that the camera model is obsolete and needs replacement

Explanation

A camera that has been repositioned to cover nothing effectively creates a surveillance gap, and deliberate tampering is a known method of preparing an intrusion. The observation therefore needs investigation as a possible breach, not merely as a maintenance ticket. It does not by itself prove that any crime has occurred.