ALOA Certified Professional Locksmith (CPL) — Questions and Answers

Question 1: What is 'tailgating' or 'piggybacking' as a physical security threat?

A technique used to pick a pin tumbler lock without a key
Monitoring employee access patterns to identify insider threats
Following an authorized person through a secured entry without presenting credentials (Correct answer)
Installing a secondary lock on a door that already has one

Correct answer: Following an authorized person through a secured entry without presenting credentials

Tailgating occurs when an unauthorized person follows an authorized user through a secured door, bypassing access control without detection.

Question 2: A locksmith discovers during a service call that the lock they are opening appears to have been previously tampered with. The best course of action is to:

Call law enforcement immediately without noting it on the work order
Refuse all future service to this customer
Ignore it and complete the job quickly
Document the observation, inform the customer, and note it on the work order (Correct answer)

Correct answer: Document the observation, inform the customer, and note it on the work order

Documenting observed tampering protects the locksmith from liability and informs the customer of potential security issues.

Question 3: What term describes the security principle of using multiple overlapping layers of protection to safeguard an asset?

Layered access control
Defense in depth (Correct answer)
Security redundancy
Zone partitioning

Correct answer: Defense in depth

Defense in depth applies multiple security layers so that if one barrier fails, others continue to protect the asset against unauthorized access.

Question 4: In CPTED-based security surveys, what is the significance of 'sight lines'?

The cable routing path for security camera installations
The maximum distance at which a lock brand can be visually identified
Unobstructed views that enable natural surveillance of an area (Correct answer)
The line-of-sight required for electronic key fobs to communicate with readers

Correct answer: Unobstructed views that enable natural surveillance of an area

Clear sight lines support natural surveillance by allowing occupants and passersby to observe and deter suspicious activity, a foundational CPTED principle.

Question 5: When is a locksmith legally and ethically justified in refusing a service request?

When the tools required are unavailable
Whenever the job is difficult
Only when the requestor is rude
When the requestor cannot provide sufficient proof of authorization or ownership (Correct answer)

Correct answer: When the requestor cannot provide sufficient proof of authorization or ownership

Lack of sufficient proof of authorization is the primary ethical and legal basis for declining a locksmith service request.

Question 6: Which document should a locksmith review first when beginning a security assessment for a commercial facility?

The facility's existing security policy and risk management plan (Correct answer)
The manufacturer's installation guides for existing locks
The building's electrical schematics
The building permit records

Correct answer: The facility's existing security policy and risk management plan

Reviewing the existing security policy establishes the baseline and objectives against which current vulnerabilities are measured.

Question 7: Which of the following is a fundamental principle of safe manipulation & lock opening as it applies to Certified Professional Locksmith?

Avoiding documentation to streamline workflow efficiency
Prioritizing speed of completion over accuracy and compliance
Relying solely on personal experience without reference to guidelines
Systematic evaluation and adherence to established industry standards (Correct answer)

Correct answer: Systematic evaluation and adherence to established industry standards

A fundamental principle of safe manipulation & lock opening in Certified Professional Locksmith is the systematic evaluation and adherence to established industry standards, which ensures consistency, quality, and regulatory compliance across all professional activities.

Question 8: Which ethical obligation does a locksmith have when a law enforcement officer verbally requests access to a premises without a warrant?

Provide access only if the officer is in uniform
Request to see proper written authorization or warrant before providing access (Correct answer)
Refuse all law enforcement requests regardless of documentation
Always comply immediately with any law enforcement verbal request

Correct answer: Request to see proper written authorization or warrant before providing access

Without proper legal documentation, a locksmith should request written authorization to avoid civil liability for unauthorized entry.

Question 9: Which encryption standard is used by MIFARE DESFire EV2 cards to secure card-to-reader communication?

DES (56-bit)
AES-128 (Correct answer)
RSA-2048
3DES (112-bit)

Correct answer: AES-128

MIFARE DESFire EV2 uses AES-128 encryption for mutual authentication between the card and reader, replacing older DES-based schemes.

Question 10: Which ANSI/BHMA grade rating indicates the highest performance level for electrified hardware?

Grade 0
Grade 3
Grade 2
Grade 1 (Correct answer)

Correct answer: Grade 1

ANSI/BHMA Grade 1 is the highest performance classification, required for high-traffic commercial and institutional applications.

Question 11: When a deadbolt thumb turn is visible through a mail slot or cat flap, a locksmith may use:

A long bent tool to rotate the thumb turn (Correct answer)
A loid
A plug spinner
An air wedge

Correct answer: A long bent tool to rotate the thumb turn

A long bent tool inserted through an opening can reach and rotate an interior thumb turn to retract the deadbolt.

Question 12: Which of the following is a fundamental principle of pin tumbler & cylinder mechanisms as it applies to Certified Professional Locksmith?

Relying solely on personal experience without reference to guidelines
Prioritizing speed of completion over accuracy and compliance
Avoiding documentation to streamline workflow efficiency
Systematic evaluation and adherence to established industry standards (Correct answer)

Correct answer: Systematic evaluation and adherence to established industry standards

A fundamental principle of pin tumbler & cylinder mechanisms in Certified Professional Locksmith is the systematic evaluation and adherence to established industry standards, which ensures consistency, quality, and regulatory compliance across all professional activities.

Question 13: A locksmith's advertising that guarantees a flat rate but then charges additional fees at the job site may violate:

OSHA safety standards
Federal Trade Commission (FTC) guidelines on deceptive advertising (Correct answer)
UL listing requirements
ANSI/BHMA grading standards

Correct answer: Federal Trade Commission (FTC) guidelines on deceptive advertising

The FTC enforces rules against deceptive advertising, and bait-and-switch pricing by locksmiths has been a subject of FTC action.

Question 14: What does REX stand for in the context of access control systems?

Relay Exit
Remote Entry Exchange
Request to Exit (Correct answer)
Restricted Entry eXit

Correct answer: Request to Exit

REX (Request to Exit) sensors detect when someone approaches a door from the secure side, shunting the alarm and unlocking the door for egress.

Question 15: What is the primary tool used for lock installation?

Pliers
Keyway cutter (Correct answer)
Wrench
Hammer

Correct answer: Keyway cutter

While other tools might be used in conjunction, a keyway cutter (or a specialized door lock installation kit) is specifically designed to create the necessary holes and recesses in a door for the lock cylinder and latch mechanism. It ensures the precise and correct fitting of the lock components, which is crucial for proper installation and function.

Question 16: Which practice best protects a locksmith business from false accusations after completing a residential lock-out?

Record a voice memo only
Leave a business card at the property
Ask a neighbor to witness verbally
Photograph the door and lock area before and after service and retain signed authorization (Correct answer)

Correct answer: Photograph the door and lock area before and after service and retain signed authorization

Before/after photographs combined with signed authorization create a clear evidentiary record protecting against false property damage claims.

Question 17: In an electrified mortise lock, the 'monitoring' function typically detects which condition?

Door closer speed
Deadbolt and latchbolt position (Correct answer)
Card reader credential validity
Power supply voltage level

Correct answer: Deadbolt and latchbolt position

Monitoring switches in electrified mortise locks report bolt position (extended/retracted) back to the access control panel for status tracking.

Question 18: An installer is terminating a Wiegand reader cable. Which color wire typically carries the DATA0 line per standard Wiegand convention?

Red
Black
Green (Correct answer)
White

Correct answer: Green

By industry convention, the green wire carries DATA0 and the white wire carries DATA1 in a standard Wiegand interface cable.

Question 19: What minimum fence height is typically recommended for commercial property perimeter security?

4 feet
8 feet (Correct answer)
10 feet
6 feet

Correct answer: 8 feet

An 8-foot fence is commonly recommended as the minimum for commercial perimeter security because it is difficult to climb without specialized equipment.

Question 20: Which wireless lock communication technology offers the longest read range and is used in vehicle gate and parking access systems?

UHF RFID (900 MHz) (Correct answer)
NFC (13.56 MHz)
Bluetooth Classic
125 kHz HID Prox

Correct answer: UHF RFID (900 MHz)

UHF RFID operating around 900 MHz achieves read ranges of several meters, making it suitable for drive-through vehicle access control applications.

Question 21: A biometric fingerprint reader fails to recognize an enrolled user's finger. What type of error is this?

Crossover Error Rate condition
False Reject Rate error (Correct answer)
False Accept Rate error
Equal Error Rate condition

Correct answer: False Reject Rate error

A False Reject Rate (FRR) error occurs when a legitimate enrolled user is denied access, also called a Type I error in biometrics.

Question 22: When evaluating an outswing door during a security survey, which hinge-related factor represents the greatest security vulnerability?

The brand and manufacturer of the hinges installed
Having only two hinges installed rather than three
Exposed exterior hinges with removable pins that allow the door to be lifted off (Correct answer)
The finish color matching the other door hardware

Correct answer: Exposed exterior hinges with removable pins that allow the door to be lifted off

On outswing doors, exposed hinges with removable pins are a critical vulnerability because an attacker can remove the pins to lift the door off its frame without defeating the lock.

Question 23: When installing an electric door strike in a hollow metal frame, which consideration is most critical?

Matching the strike lip depth to the lockset (Correct answer)
Selecting the correct paint color
Ensuring proper voltage drop across the wire run
Using stainless steel screws only

Correct answer: Matching the strike lip depth to the lockset

The strike lip must match the depth and projection of the latchbolt to ensure proper engagement and smooth mechanical operation.

Question 24: In a master key system, what is a 'keyway' and why is its selection important?

The profile of the plug face that guides the key into the cylinder
The warding cuts on a key blade that prevent the wrong key from entering a lock (Correct answer)
The angle at which a key is inserted into a cylinder
The path a key follows when inserted; selection affects which blanks can be duplicated on standard machines

Correct answer: The warding cuts on a key blade that prevent the wrong key from entering a lock

The keyway is the cross-sectional profile of the key and keyhole; choosing a restricted or proprietary keyway limits unauthorized duplication and enhances system security.

Question 25: When disposing of old key codes or customer records, a professional locksmith should:

Discard in regular trash for convenience
Shred or securely destroy documents to prevent unauthorized key cutting from discarded codes (Correct answer)
Keep all records indefinitely with no destruction policy
Donate old records to training programs

Correct answer: Shred or securely destroy documents to prevent unauthorized key cutting from discarded codes

Secure destruction of key codes and customer records prevents criminals from obtaining key-cutting information from discarded materials.

Question 26: Which organization offers the CPL (Certified Professional Locksmith) credential in the United States?

ALOA Security Professionals Association (Correct answer)
National Locksmith Guild
U.S. Bureau of Labor Statistics
Associated Locksmiths of North America (ALOA only by legacy name)

Correct answer: ALOA Security Professionals Association

ALOA Security Professionals Association administers the CPL and other professional locksmith certifications in the United States.

Question 27: A smart lock's companion app shows 'lock tampered' alert. What does this notification typically indicate?

A firmware update is available
The lock's battery fell below 10%
The app's subscription has expired
The lock's tamper sensor detected unexpected physical force or manipulation of the device (Correct answer)

Correct answer: The lock's tamper sensor detected unexpected physical force or manipulation of the device

Tamper alerts are triggered by internal accelerometers or sensors that detect unauthorized physical manipulation, such as attempts to pry, drill, or forcibly remove the lock.

Question 28: Which part of a lock needs regular lubrication to maintain functionality?

Spring mechanism
Pin and tumbler mechanism (Correct answer)
Lock cylinder
Lock housing

Correct answer: Pin and tumbler mechanism

The pin and tumbler mechanism is the intricate core of most locks, where small pins align to allow the key to turn. This mechanism contains many moving parts that experience friction during operation. Regular lubrication helps these pins and tumblers move smoothly, preventing sticking, wear, and ultimately ensuring the lock's reliable functionality and longevity.

Question 29: When performing emergency entry on a door equipped with a spool pin or serrated security pin, what picking technique adjustment is required?

Use a rake exclusively
Apply heavier tension
Drill immediately
Use lighter tension and feel for false sets (Correct answer)

Correct answer: Use lighter tension and feel for false sets

Security pins create false sets; lighter tension and sensing the counter-rotation feedback prevents over-setting them.

Question 30: A 'key blank cross-reference' is primarily used to:

Translate a lock code number into cut depths
Identify alternate manufacturer blanks that fit the same keyway as a given original blank (Correct answer)
Calculate the MACS value for a bitting combination
Determine which locks a particular key will open

Correct answer: Identify alternate manufacturer blanks that fit the same keyway as a given original blank

A cross-reference guide identifies compatible aftermarket or alternate brand blanks that share the same keyway profile as a specific original blank.

Question 31: Which authentication factor does a fingerprint biometric smart lock represent?

Something you have
Something you know
Something you are (Correct answer)
Something you do

Correct answer: Something you are

Biometric identifiers like fingerprints represent the 'something you are' authentication factor because they are inherent to the individual.

Question 32: A technician needs to program a key for a vehicle with a crypto-secured transponder system (like Megamos Crypto). What is required?

On-board programming sequence only
Resistor pellet matching
Only a cloner tool
Advanced programming device with vehicle-specific software and possibly PIN/CS code (Correct answer)

Correct answer: Advanced programming device with vehicle-specific software and possibly PIN/CS code

Crypto-secured transponder systems require specialized programming equipment, often with vehicle-specific software, and may require a PIN or CS (crypto secret) code.

Question 33: Which type of electric strike is designed to work with mortise locksets and allows the latchbolt to retract without turning the lever?

Solenoid strike
Deadlatch strike
Keeper strike
Latch-retracting strike (Correct answer)

Correct answer: Latch-retracting strike

A latch-retracting electric strike uses a powered mechanism to retract the latchbolt, enabling egress without mechanical lever actuation.

Question 34: What does 'UL Listed' mean when referenced for a lock product?

The lock meets minimum BHMA requirements
The lock is approved for use in the United States only
The lock has been tested and certified by Underwriters Laboratories to specific performance criteria (Correct answer)
The lock meets universal locksmith standards

Correct answer: The lock has been tested and certified by Underwriters Laboratories to specific performance criteria

UL Listed means Underwriters Laboratories has independently tested the product and verified it meets specific safety and performance standards.

Question 35: When a locksmith creates a key for a customer, which record-keeping practice is considered best professional practice?

Only record the customer's name
Log the key code, date, customer ID, and authorization verification (Correct answer)
Record nothing to protect customer privacy
Store only the key code with no customer data

Correct answer: Log the key code, date, customer ID, and authorization verification

Comprehensive records including authorization verification protect the locksmith legally and demonstrate professional due diligence.

Question 36: What is the purpose of biometric security systems?

To track movement in a building
To verify identity using physical traits (Correct answer)
To create digital keys
To ensure no one can lock a door

Correct answer: To verify identity using physical traits

The primary purpose of biometric security systems is to verify an individual's identity by analyzing their unique physical or behavioral traits. This includes characteristics like fingerprints, facial features, iris patterns, or voice. Biometric authentication offers a high level of security because these traits are difficult to forge or replicate, providing a robust and personalized form of access control.

Question 37: Which document should a locksmith require before performing a lock-out service on a residence?

A verbal statement
A signed blank work order
A credit card only
Proof of ownership or authorization (Correct answer)

Correct answer: Proof of ownership or authorization

Locksmiths must obtain proof of ownership or legal authorization before granting entry to protect against facilitating unauthorized access.

Question 38: Which scenario legally PROHIBITS a locksmith from performing emergency entry even with apparent consent?

A vehicle owner locked out of their registered car
A tenant requesting entry to their own unit
A property manager requesting entry for a welfare check
A person requesting entry into a property under an active restraining order prohibiting their access (Correct answer)

Correct answer: A person requesting entry into a property under an active restraining order prohibiting their access

A restraining order legally bars the person from accessing the property regardless of their claim of ownership or tenancy.

Question 39: Which standard governs the testing and certification of access control system units in the United States?

ISO 9001
UL 294 (Correct answer)
ANSI A156.25
NFPA 101

Correct answer: UL 294

UL 294 is the Underwriters Laboratories standard for access control system units, covering construction, performance, and marking requirements.

Question 40: When a locksmith says a master key system uses 'progression,' what does this mean?

The system requires progressively longer keys for higher security levels
The lock cylinders are upgraded from pin tumbler to disc detainer
The key bittings are assigned sequentially using defined increments across cut positions (Correct answer)
The master key wears out and must be progressively replaced

Correct answer: The key bittings are assigned sequentially using defined increments across cut positions

Progression assigns key bittings by systematically incrementing cut depths across positions according to a defined pattern, ensuring all combinations are methodically covered.

Question 41: In an access control security assessment, what does 'credential management' refer to?

The process of verifying and renewing a locksmith's professional certifications
The system for issuing, tracking, and revoking access credentials throughout their lifecycle (Correct answer)
The installation and programming of electronic locks and card readers
The process of duplicating physical keys for all building tenants

Correct answer: The system for issuing, tracking, and revoking access credentials throughout their lifecycle

Credential management encompasses the full lifecycle of access credentials—issuing them to authorized users, auditing who has access, and promptly revoking credentials when access is no longer needed.

Question 42: A customer calls requesting a key duplication for a 'do not duplicate' stamped key. What should a professional locksmith do?

Duplicate it freely since the stamp is not legally binding
Require additional authorization from the key system owner before duplicating (Correct answer)
Charge double the fee and duplicate without verification
Refuse all service permanently

Correct answer: Require additional authorization from the key system owner before duplicating

While 'do not duplicate' is not universally legally binding, professional ethics require verifying authorization before duplicating restricted keys.

Question 43: How often must a CPL certification holder renew their credential under ALOA guidelines?

Every four years with continuing education requirements (Correct answer)
Every ten years with no continuing education
Every year with a written exam
Only once at initial certification

Correct answer: Every four years with continuing education requirements

ALOA requires CPL holders to renew every four years by completing continuing education units (CEUs) to maintain current knowledge.

Question 44: What is the primary purpose of a door position switch (DPS) in an access control system?

To control the door closer speed
To monitor whether the door is open or closed (Correct answer)
To read proximity cards
To power the electric strike

Correct answer: To monitor whether the door is open or closed

A door position switch provides real-time status of whether a door is open or closed, enabling door-held-open alarms and audit logging.

Question 45: What is the primary purpose of a physical security survey?

To test emergency exit procedures
To create a master key system for a building
To identify vulnerabilities and recommend security improvements (Correct answer)
To install new locks throughout a facility

Correct answer: To identify vulnerabilities and recommend security improvements

A physical security survey identifies weaknesses in a facility's security and recommends improvements to reduce overall risk.

Question 46: What is the primary purpose of maintaining a job log or service record for each locksmith call?

To record customer credit scores
To log vehicle mileage only
To document proof of authorization and services rendered (Correct answer)
To track tool inventory

Correct answer: To document proof of authorization and services rendered

A detailed job log documents authorization, services performed, and protects the locksmith from liability disputes.

Question 47: What feature is essential for smart locks?

Multiple manual override mechanisms
Mechanical keys only
Remote access via apps or voice commands (Correct answer)
Simpler lock mechanisms

Correct answer: Remote access via apps or voice commands

A defining and essential feature for smart locks is their capability for remote access and control. This allows users to lock or unlock doors, grant temporary access to guests, and receive real-time notifications about door activity from anywhere via smartphone applications or voice commands. This remote functionality significantly enhances convenience, flexibility, and security management.

Question 48: What distinguishes a locksmith from a security consultant under most state licensing laws?

There is no legal distinction in any U.S. state
Security consultants can install locks without a license
Locksmiths must have higher education degrees
Locksmiths perform hands-on mechanical installation and opening services, while security consultants primarily provide advisory services (Correct answer)

Correct answer: Locksmiths perform hands-on mechanical installation and opening services, while security consultants primarily provide advisory services

Most state licensing laws define locksmiths by the physical service of installing, repairing, and opening locks, separate from consulting-only roles.

Question 49: According to industry standards, what is the minimum recommended deadbolt bolt throw (projection) for a residential door?

3/4 inch
1-1/4 inch
1/2 inch
1 inch (Correct answer)

Correct answer: 1 inch

A minimum 1-inch bolt throw is the industry standard for deadbolts, providing adequate engagement into the strike to resist forced entry.

Question 50: Which code system uses alphanumeric codes that directly represent the depth and spacing of key cuts?

Blind codes
Direct codes (Correct answer)
Indirect codes
Shadow codes

Correct answer: Direct codes

Direct codes (also called direct reading codes) represent actual cut depths and spacing values that can be used immediately without consulting a code book translation.

Question 51: What is the role of an access control panel in security systems?

To control and grant access to doors (Correct answer)
To monitor all physical security cameras
To maintain physical locks
To record the time of day

Correct answer: To control and grant access to doors

The access control panel serves as the central processing unit or 'brain' of an electronic security system. It receives input from various access devices like card readers or keypads, processes this information against programmed access rules, and then sends commands to electric locks. Its role is crucial for accurately controlling and granting or denying access to specific doors and areas within a facility.

Question 52: What does 'forced entry resistance' testing primarily measure in physical security evaluation?

A lock cylinder's resistance to picking and manipulation attacks
The time and tools required to defeat a barrier or locking device by force (Correct answer)
The psychological deterrence value of visible security hardware
How quickly an authorized key can open a lock under stress

Correct answer: The time and tools required to defeat a barrier or locking device by force

Forced entry resistance testing quantifies how long and what tools are needed to breach a barrier, establishing its protective rating against physical attacks.

Question 53: When a commercial locksmith pins a high-security cylinder to a master key system, which additional pin(s) are used compared to a standard system?

Spools or serrated master wafers (security pins) (Correct answer)
Driver pins only
Top pins only
Standard driver pins with longer springs

Correct answer: Spools or serrated master wafers (security pins)

High-security cylinders use spool or serrated driver pins that create false sets during picking attempts, increasing pick resistance.

Question 54: Which ANSI/BHMA grade rating indicates the highest level of security performance for residential door hardware?

Grade 0
Grade 2
Grade 1 (Correct answer)
Grade 3

Correct answer: Grade 1

ANSI/BHMA Grade 1 is the highest security rating for door hardware, indicating the strongest performance and greatest durability under standardized testing.

Question 55: A CPL professional encounters an unfamiliar situation while performing smart lock & iot security duties. What is the most appropriate first action?

Proceed based on general assumptions to avoid delays
Skip the task entirely and move to the next assignment
Apply a solution from an unrelated field without verification
Consult relevant standards, guidelines, or a qualified supervisor before proceeding (Correct answer)

Correct answer: Consult relevant standards, guidelines, or a qualified supervisor before proceeding

When facing unfamiliar situations in smart lock & iot security, the most appropriate action is to consult relevant standards, guidelines, or a qualified supervisor. This ensures safety, accuracy, and compliance while building professional knowledge.

Question 56: In physical security, what is a 'security vulnerability'?

An alarm system with a rapid response time
A door with a self-closing and self-latching mechanism
A newly installed high-security lock requiring special keys
A weakness that could be exploited to gain unauthorized access (Correct answer)

Correct answer: A weakness that could be exploited to gain unauthorized access

A vulnerability is any weakness—physical, procedural, or environmental—that could be exploited by an attacker to breach security.

Question 57: What type of perimeter lighting is generally considered most effective for deterring crime while minimizing energy costs?

Continuous incandescent floodlights on timer switches
Motion-activated LED lighting (Correct answer)
Continuous high-pressure sodium vapor lighting
Infrared lighting paired with night-vision cameras

Correct answer: Motion-activated LED lighting

Motion-activated LED lighting deters criminals by unexpectedly illuminating their activity while consuming significantly less energy than continuous lighting systems.

Question 58: An electric latch retraction (ELR) device is used on exit devices (panic bars) to allow which function?

Remote or timed unlocking to allow free entry from the outside (Correct answer)
Monitoring of the pushbar depression force
Automatic re-keying of the cylinder
Remote locking of the exit device from a security console

Correct answer: Remote or timed unlocking to allow free entry from the outside

ELR devices retract the latch on a crash bar via an electric signal, allowing the door to be held or remotely released for entry from the outside.

Question 59: Which code requirement mandates that doors in certain occupancies must unlock automatically when a fire alarm is triggered?

NFPA 72 Alarm Output
UL 294 Standard
ADA Title III
IBC Section 1010 (Correct answer)

Correct answer: IBC Section 1010

IBC Section 1010 (and related Life Safety Code NFPA 101) requires that electrified locking systems release upon fire alarm activation to allow free egress.

Question 60: What is a common vulnerability of electronic locks?

They can be easily fixed by anyone
They are immune to tampering
They can be vulnerable to hacking or failure (Correct answer)
They require no power supply

Correct answer: They can be vulnerable to hacking or failure

While electronic locks offer advanced features, they introduce new vulnerabilities not present in purely mechanical systems. They can be susceptible to cyberattacks, where malicious actors might exploit software flaws or network weaknesses to gain unauthorized access. Additionally, electronic components can fail due to power outages, hardware malfunctions, or software glitches, potentially compromising security or access.

Question 61: When a key is described as 'cut on the high side' of tolerances, this means:

The cuts are deeper than the nominal depth, removing more metal
The cuts are shallower than the nominal depth, reducing the key's height at each cut (Correct answer)
The key was cut at a higher speed than recommended
The key was cut with a dull cutter causing rough edges

Correct answer: The cuts are shallower than the nominal depth, reducing the key's height at each cut

Cutting on the high side means cuts are shallower (less material removed), leaving the key taller at each cut position, which can cause the key to feel stiff in the lock.

Question 62: Which organization publishes the Grade 1, 2, and 3 ratings used for door hardware security performance in the US?

ALOA (Associated Locksmiths of America)
NFPA (National Fire Protection Association)
ANSI/BHMA (American National Standards Institute / Builders Hardware Manufacturers Association) (Correct answer)
UL (Underwriters Laboratories)

Correct answer: ANSI/BHMA (American National Standards Institute / Builders Hardware Manufacturers Association)

ANSI/BHMA establishes and publishes the performance grading standards (Grade 1, 2, 3) for door hardware security and durability.

Question 63: What is the primary purpose of a 'delayed egress' locking device in commercial settings?

To prevent all unauthorized entry
To slow exit and deter shoplifting while allowing emergency egress (Correct answer)
To replace panic hardware on fire doors
To lock doors permanently during business hours

Correct answer: To slow exit and deter shoplifting while allowing emergency egress

Delayed egress devices introduce a timed delay (typically 15–30 seconds) to deter theft while still allowing emergency exit.

Question 64: Which UL listing is most relevant when evaluating the security rating of safes during a commercial security assessment?

UL 437 (Key Locks)
UL 2050 (Central Station Monitoring)
UL 687 (Burglary-Resistant Safes) (Correct answer)
UL 768 (Combination Locks)

Correct answer: UL 687 (Burglary-Resistant Safes)

UL 687 covers testing and rating standards for burglary-resistant safes, making it the primary standard for evaluating safe security in a commercial assessment.

Question 65: What is the recommended minimum age for a locksmith apprentice in most U.S. state licensing frameworks?

21 years old
18 years old (Correct answer)
25 years old
16 years old

Correct answer: 18 years old

Most U.S. states set the minimum age for locksmith licensing or apprenticeship registration at 18, aligning with adult contractual capacity.

Question 66: What is a 'dead lock' feature in automotive door systems?

A lock that cannot be opened from inside or outside when engaged (Correct answer)
A backup mechanical lock when electronics fail
A lock that fails permanently after tampering
A lock requiring two key turns to open

Correct answer: A lock that cannot be opened from inside or outside when engaged

A deadlock (or double-lock) prevents the door from being opened from inside even if the interior handle is pulled, providing extra security against break-in.

Question 67: When a lock cylinder is stiff and difficult to turn with the correct key, what maintenance step should be performed FIRST?

Adjust the strike plate
Rekey the lock
Replace the cylinder
Clean and lubricate the cylinder (Correct answer)

Correct answer: Clean and lubricate the cylinder

Cleaning and lubricating the cylinder is the first maintenance step when a lock is stiff, as dirt and dried lubricant are common causes of binding.

Question 68: When recommending strike plate hardware during a security survey for a wood-frame door, what screw length is recommended to resist kick-in attacks?

1-inch wood screws
2-inch wood screws
3-inch wood screws (Correct answer)
Lag bolts only

Correct answer: 3-inch wood screws

3-inch screws penetrate through the door jamb into the wall stud, providing structural resistance against the kick-in forces that typically split the frame at the strike.

Question 69: What is the purpose of a locksmith surety bond?

To provide financial protection to customers if the locksmith commits fraud or fails to complete work (Correct answer)
To guarantee the lowest price
To replace general liability insurance
To insure the locksmith's tools

Correct answer: To provide financial protection to customers if the locksmith commits fraud or fails to complete work

A surety bond protects customers by ensuring financial recourse if the locksmith performs dishonestly or incompletely.

Question 70: Which standard governs the physical security rating and testing of high-security cylinder locks in the US?

NFPA 80
ASTM F883
ANSI/BHMA A156.30
UL 437 (Correct answer)

Correct answer: UL 437

UL 437 is the standard for high-security cylinder locks, covering pick, drill, and manipulation resistance testing.

Question 71: What does the term 'rolling code' refer to in remote keyless entry systems?

A code used only during initial pairing
A fixed code transmitted each time the button is pressed
A code that changes with every button press to prevent replay attacks (Correct answer)
A code that rotates based on time of day

Correct answer: A code that changes with every button press to prevent replay attacks

Rolling codes (also called hopping codes) change with every transmission, preventing thieves from capturing and replaying the signal.

Question 72: Which communication protocol is most commonly used by access control panels to communicate with card readers in commercial installations?

I2C
SPI
RS-232
Wiegand (Correct answer)

Correct answer: Wiegand

Wiegand is the industry-standard protocol for connecting card readers to access control panels, transmitting card data as a series of pulses.

Question 73: During a welfare check entry, a locksmith discovers the door is secured by a chain latch from the inside. The appropriate tool to release it without cutting the chain is:

Air wedge
Slim jim
Chain release tool or bent wire hook (Correct answer)
Loid

Correct answer: Chain release tool or bent wire hook

A chain release tool or bent wire hook inserted through the door gap can manipulate and slide the chain out of its track.

Question 74: A customer reports their smart lock is draining batteries every two weeks instead of the expected 6–12 months. Which setting is most likely responsible?

The lock's Bluetooth auto-lock feature is turned off
The customer is using lithium batteries instead of alkaline
The lock's encryption algorithm is consuming excessive power
The lock is performing too many auto-lock retries due to a misaligned bolt (Correct answer)

Correct answer: The lock is performing too many auto-lock retries due to a misaligned bolt

A misaligned door or strike plate causes the motor to work harder or retry multiple times on each locking cycle, dramatically increasing power consumption.

Question 75: When a smart lock vendor discontinues support for an older lock model, what is the primary security risk for the end user?

The lock reverts to a mechanical-only mode
No more security patches will be issued, leaving known vulnerabilities permanently unaddressed (Correct answer)
The lock will stop functioning entirely
The lock's warranty is extended automatically

Correct answer: No more security patches will be issued, leaving known vulnerabilities permanently unaddressed

End-of-life status means the vendor will no longer release security updates, so any newly discovered vulnerabilities in that firmware will never be patched.

Question 76: Which federal law most directly impacts locksmiths who work on vehicles and must handle personal identifying information?

Gramm-Leach-Bliley Act and state privacy statutes (Correct answer)
The Clean Air Act
The Fair Housing Act
The Brady Handgun Violence Prevention Act

Correct answer: Gramm-Leach-Bliley Act and state privacy statutes

State privacy statutes and federal data protection laws govern how customer personal and vehicle information must be stored and protected.

Question 77: In a security survey context, what does 'dwell time' refer to?

The time required to rekey a lock cylinder on-site
The delay before an alarm system activates after a breach
The time a door remains propped open after being unlocked
The estimated time an intruder would need to defeat a security measure (Correct answer)

Correct answer: The estimated time an intruder would need to defeat a security measure

Dwell time is the estimated time an attacker would need to overcome a security barrier; higher dwell time indicates better resistance.

Question 78: In most U.S. states, a locksmith who operates without a required license may face:

Only a written warning
A mandatory training course with no penalty
Fines and possible criminal charges (Correct answer)
Loss of tools only

Correct answer: Fines and possible criminal charges

Unlicensed locksmith practice in states with licensing laws can result in fines, civil liability, and in some cases criminal prosecution.

Question 79: What are the benefits of a keyless entry system?

They do not need regular maintenance
They can only be used in specific locks
They increase the risk of unauthorized access
They eliminate the need for physical keys (Correct answer)

Correct answer: They eliminate the need for physical keys

A significant benefit of keyless entry systems is the complete elimination of traditional physical keys. This removes the risks associated with lost, stolen, or duplicated keys, simplifying access management. Users can gain entry using alternative methods such as keypads, keycards, biometric scans, or smartphone applications, offering enhanced convenience and security control.

Question 80: What is a common cause of a lock not turning smoothly?

Dirt or debris in the lock (Correct answer)
Overuse of lubrication
Improper installation
Wrong key inserted

Correct answer: Dirt or debris in the lock

A common reason a lock does not turn smoothly is the accumulation of dirt, dust, grime, or other foreign debris within the lock cylinder or mechanism. These particles can interfere with the precise movement of the internal pins and springs, causing friction and making it difficult for the key to fully engage and turn the cylinder. Regular cleaning and appropriate lubrication can often resolve this issue.

Question 81: What is an electric strike lock?

A simple bolt lock
A lock with a rotating dial
A lock that releases upon applying electric current (Correct answer)
A lock with a pin and tumbler mechanism

Correct answer: A lock that releases upon applying electric current

An electric strike lock is an electromechanical device that replaces a standard strike plate on a door frame. It works in conjunction with a conventional mechanical lock and, upon receiving an electric current, retracts or pivots a portion of the strike. This action allows the door's latch bolt to release, enabling the door to be opened without manually turning the knob or lever.

Question 82: What is a restricted key?

A key that can only be duplicated with authorization (Correct answer)
A key that anyone can duplicate at any time
A key that can be used in any lock
A key with no restrictions

Correct answer: A key that can only be duplicated with authorization

A restricted key is a specialized key blank that is legally protected, often by patent, and only available through authorized locksmiths or manufacturers. This design prevents unauthorized individuals from easily duplicating the key at a standard key cutting service. Duplication typically requires specific authorization from the property owner or designated key control manager, significantly enhancing security.

Question 83: Which regulation requires federal facilities and their contractors to use FIPS 201-compliant smart cards for physical access control?

NIST SP 800-53
FISMA
FedRAMP
HSPD-12 / PIV standard (Correct answer)

Correct answer: HSPD-12 / PIV standard

Homeland Security Presidential Directive 12 (HSPD-12) mandates use of Personal Identity Verification (PIV) credentials meeting FIPS 201 for federal facility access.

Question 84: A door latch bolt is not retracting fully when the knob is turned. What is the MOST likely cause?

Improper strike plate alignment
Broken return spring inside the latch mechanism (Correct answer)
Worn key cuts
Incorrect door backset

Correct answer: Broken return spring inside the latch mechanism

A broken or weakened return spring inside the latch mechanism is the most common cause of incomplete latch retraction when the knob is turned.

Question 85: High-security locks that comply with ANSI/BHMA Grade 1 must withstand a minimum of how many open/close cycles?

100,000 cycles
250,000 cycles (Correct answer)
500,000 cycles
50,000 cycles

Correct answer: 250,000 cycles

ANSI/BHMA Grade 1 commercial hardware must withstand a minimum of 250,000 operating cycles to meet durability requirements.

Question 86: Which type of insurance is most critical for a professional locksmith running a service business?

Health insurance only
Collision insurance only
Life insurance
General liability insurance (Correct answer)

Correct answer: General liability insurance

General liability insurance protects the locksmith against claims of property damage or bodily injury arising from their work.

Question 87: What is the purpose of a 'shunt' relay in an alarm system connected to an access control door?

To boost the power supply to the maglock
To lock the door during an alarm condition
To reset the access control panel remotely
To temporarily bypass the door alarm when an authorized user opens the door (Correct answer)

Correct answer: To temporarily bypass the door alarm when an authorized user opens the door

A shunt relay suppresses the door-open alarm during the brief period an authorized user passes through, preventing nuisance alarms.

Question 88: Which physical characteristic of a door frame most significantly affects its resistance to kick-in forced entry?

The depth and profile of the door stop molding
The species and grain direction of the wood used in the door frame
The gauge of metal reinforcement in the jamb and the fastener penetration depth into the wall stud (Correct answer)
The color and finish applied to the door frame surface

Correct answer: The gauge of metal reinforcement in the jamb and the fastener penetration depth into the wall stud

A reinforced door jamb with long fasteners penetrating 3 or more inches into the wall stud is the critical factor in resisting kick-in forces, which typically split the jamb at the strike plate.

Question 89: In the context of pin tumbler & cylinder mechanisms, what role does continuous professional development play for CPL practitioners?

It ensures practitioners remain current with evolving standards, technologies, and best practices (Correct answer)
It serves primarily as a networking opportunity with no practical benefit
It is optional and only needed for career advancement
It is required only during the first year of certification

Correct answer: It ensures practitioners remain current with evolving standards, technologies, and best practices

Continuous professional development is essential in pin tumbler & cylinder mechanisms because it ensures CPL practitioners remain current with evolving standards, technologies, and best practices, maintaining competency throughout their careers.

Question 90: How do you fix a misaligned lock?

Replace the entire lock system
Tighten the screws
Apply more lubrication to the lock
Adjust or realign the strike plate (Correct answer)

Correct answer: Adjust or realign the strike plate

A misaligned lock often occurs when the door or door frame shifts over time, preventing the latch bolt or deadbolt from properly engaging with the strike plate. The most effective solution is to adjust or realign the strike plate on the door frame so that it perfectly receives the bolt. This ensures the lock functions smoothly and securely, often involving loosening screws, repositioning, and re-tightening.

Question 91: What does the acronym 'CPTED' stand for in physical security planning?

Comprehensive Protection Technology and Entry Deterrence
Certified Professional Training for Entry Defense
Commercial Property Threat Evaluation and Detection
Crime Prevention Through Environmental Design (Correct answer)

Correct answer: Crime Prevention Through Environmental Design

CPTED (Crime Prevention Through Environmental Design) uses design elements such as lighting, landscaping, and sight lines to deter criminal activity.

Question 92: In a high-security door frame installation, which reinforcement product is used to prevent door frame kick-in?

Floor stop
Door barricade bar
Strike plate with 3-inch screws and door jamb reinforcement (Correct answer)
Surface bolt

Correct answer: Strike plate with 3-inch screws and door jamb reinforcement

A reinforced strike plate secured with 3-inch screws that reach the wall studs, combined with a door jamb reinforcement kit, prevents frame kick-in.

Question 93: What is the difference between a master key and a sub-master key?

The master key is for a single lock, and the sub-master key is for multiple locks
The master key opens all locks, and the sub-master key opens a specific subset (Correct answer)
The master key can open specific locks, while the sub-master key opens all locks
There is no difference

Correct answer: The master key opens all locks, and the sub-master key opens a specific subset

A master key system is hierarchical, designed for comprehensive access control. The master key is at the highest level, capable of opening every lock within a specific system. In contrast, a sub-master key is designed to open only a designated group or subset of locks within that larger system, providing more granular access control for different departments or areas.

Question 94: What is the primary purpose of a written security survey report delivered to a client after an assessment?

To certify that the building meets all applicable local security codes
To provide prioritized vulnerability findings, recommendations, and estimated costs (Correct answer)
To document the locksmith's liability limitations for future security incidents
To serve as a marketing document promoting additional security upgrades

Correct answer: To provide prioritized vulnerability findings, recommendations, and estimated costs

A security survey report documents identified vulnerabilities, prioritizes recommendations by risk level, and provides cost estimates to help the client make informed security investment decisions.

Question 95: A school district wants a key system where custodians can access all classrooms but teachers can only open their own room. What system structure achieves this?

Interchangeable core system with no master keying
Single master key with no change keys
Change keys for teachers and a master key for custodians (Correct answer)
Grand master key with only one level below

Correct answer: Change keys for teachers and a master key for custodians

Issuing teachers individual change keys and custodians a master key creates a two-level hierarchy that matches the access requirements.

Question 96: When troubleshooting a cylindrical lockset where the latch bolt has broken off flush with the face of the door, which method allows the door to be opened without damaging the frame?

Cutting the door with a reciprocating saw
Prying the door frame at the strike
Removing the lock body via the rose screws and manually retracting the mechanism (Correct answer)
Drilling out the latch through the door edge

Correct answer: Removing the lock body via the rose screws and manually retracting the mechanism

Removing the lock body by backing out the rose screws exposes the mechanism so the broken latch can be retracted manually, preserving the door frame.

Question 97: A CPL is programming guest access codes on a smart lock for a vacation rental property. What is the most secure approach to managing these codes?

Create unique, time-limited access codes for each guest that expire at checkout (Correct answer)
Disable all PIN codes and rely on the property manager's smartphone only
Use one permanent code shared with all guests and change it annually
Program the master PIN as the guest code for simplicity

Correct answer: Create unique, time-limited access codes for each guest that expire at checkout

Unique, time-limited codes ensure that each guest's access automatically expires at checkout, eliminating the need to remember to delete old codes and preventing code sharing.

Question 98: Which device is used to protect access control system wiring from electrical surges caused by lightning or power fluctuations?

Transformer
Surge protector / transient voltage suppressor (Correct answer)
End-of-line resistor
Relay module

Correct answer: Surge protector / transient voltage suppressor

Transient voltage suppressors (TVS) or surge protectors clamp voltage spikes before they can damage sensitive access control electronics.

Question 99: An electromagnetic lock (maglock) requires continuous power to remain locked. What is this locking mode called?

Fail-passive
Fail-safe (Correct answer)
Fail-secure
Fail-open

Correct answer: Fail-safe

Fail-safe (also called fail-open) means the lock releases when power is lost, allowing free egress during emergencies such as fire alarms.

Question 100: How do keycard systems work?

By requiring a physical key
By using a magnetic stripe or chip to authenticate access (Correct answer)
By using a PIN code only
By using a barcode scanner

Correct answer: By using a magnetic stripe or chip to authenticate access

Keycard systems function by requiring users to present a physical card, typically equipped with a magnetic stripe or an embedded microchip, to a reader. The reader then authenticates the card's data against a stored database of authorized credentials. If valid, an electronic signal is sent to unlock the door, providing a secure and trackable method of access.

ALOA Certified Professional Locksmith (CPL)

The CPL is the second tier of ALOA's locksmith certification pathway, requiring mastery of advanced locksmithing topics including key systems, physical security, electronic locking, and business practices across a series of elective examinations.

100

Questions

120 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds