Ship Security Officer (SSO) Certification Exam — Questions and Answers

Question 1: Razor wire or electric fence installed along a ship's railings is classified as which type of security measure?

Deterrence and delay measure (Correct answer)
Response measure
Communication measure
Detection measure

Correct answer: Deterrence and delay measure

Physical barriers like razor wire deter boarding attempts and delay intruders, buying time for the crew to respond — they are classified as deterrence and delay measures.

Question 2: What action must an SSO take if a person refuses to submit to a security search before boarding?

Conduct a mandatory physical search
Deny the person access to the ship (Correct answer)
Allow boarding and report the refusal to the master
Immediately contact port state authorities

Correct answer: Deny the person access to the ship

The SSO must deny boarding to anyone who refuses to comply with security screening procedures to maintain the ship's security integrity.

Question 3: What is the primary purpose of a Ship Security Assessment (SSA)?

To document past security incidents
To establish communication protocols between ship and port
To identify vulnerabilities and threats to the ship (Correct answer)
To train crew members in security procedures

Correct answer: To identify vulnerabilities and threats to the ship

The SSA is conducted to identify existing and potential threats, vulnerabilities, and areas of concern that could be exploited to attack the ship or its cargo.

Question 4: Which pricing model is most appropriate when procuring long-term security equipment maintenance contracts under ISPS Code requirements?

Fixed-price contract
Time-and-materials with a not-to-exceed cap (Correct answer)
Spot pricing
Cost-plus contract

Correct answer: Time-and-materials with a not-to-exceed cap

A time-and-materials contract with a not-to-exceed cap provides cost control while accommodating variable maintenance needs typical in long-term security equipment upkeep.

Question 5: What is the primary purpose of maintaining a security performance dashboard on a vessel?

To impress port state control inspectors during examinations
To automate the reporting of incidents to the flag state
To provide real-time visibility of key metrics that enable timely, evidence-based decisions by the SSO and CSO (Correct answer)
To replace the requirement for written security records under ISPS

Correct answer: To provide real-time visibility of key metrics that enable timely, evidence-based decisions by the SSO and CSO

A performance dashboard consolidates key metrics so decision-makers can identify trends and act on evidence quickly rather than reactively.

Question 6: What are the three security levels defined under the ISPS Code?

Green, Yellow, and Red
Alert, Warning, and Emergency
Low, Medium, and High
Security Levels 1, 2, and 3 (Correct answer)

Correct answer: Security Levels 1, 2, and 3

The ISPS Code establishes three security levels: Level 1 (normal), Level 2 (heightened), and Level 3 (exceptional threat).

Question 7: Under the ISPS Code, which party is responsible for approving a Ship Security Plan (SSP)?

The Administration (flag state) (Correct answer)
The Classification Society on behalf of the company
The Port State Control authority
The Company Security Officer

Correct answer: The Administration (flag state)

The Administration (flag state) or a recognized security organization acting on its behalf is responsible for approving the Ship Security Plan.

Question 8: Which body is responsible for approving a ship's Security Plan under the ISPS Code?

The flag state Administration or a Recognized Security Organization acting on its behalf (Correct answer)
The Company Security Officer
The port state control authority
The International Maritime Organization (IMO)

Correct answer: The flag state Administration or a Recognized Security Organization acting on its behalf

The flag state Administration, or a Recognized Security Organization (RSO) it authorizes, is responsible for reviewing and approving the Ship Security Plan.

Question 9: What is the SSO's role in training ship's crew on security matters?

Security training is solely the responsibility of the ship's Master
Training is conducted only when a new SSP is issued
The SSO must ensure crew receive training and are familiar with their security duties under the SSP (Correct answer)
Only designated security personnel need security training

Correct answer: The SSO must ensure crew receive training and are familiar with their security duties under the SSP

The SSO is responsible for ensuring that all ship's personnel receive appropriate security training and are familiar with their duties under the Ship Security Plan.

Question 10: Which scenario best illustrates the correct use of a Ship Security Alert System (SSAS)?

A deck officer activates the SSAS during a man-overboard emergency to summon rescue
The master activates the SSAS to notify the company of a late cargo delivery
The SSAS is activated during every port arrival as a routine check-in signal
The SSO activates the SSAS when armed pirates board the vessel and take control of the bridge (Correct answer)

Correct answer: The SSO activates the SSAS when armed pirates board the vessel and take control of the bridge

The SSAS is designed exclusively for genuine security threats such as piracy or armed robbery, transmitting a covert alert to authorities without alerting the attacker.

Question 11: Which standard of practice is MOST important for ensuring quality in Cost & Pricing Analysis?

Minimizing documentation to focus on practical work
Using the most advanced technology available regardless of need
Following evidence-based protocols while adapting to specific circumstances (Correct answer)
Strictly adhering to the same procedure in every situation

Correct answer: Following evidence-based protocols while adapting to specific circumstances

Evidence-based protocols provide a foundation of proven practices, but effective Ship Security Officer professionals must also adapt their approach based on specific circumstances and individual case needs within Cost & Pricing Analysis.

Question 12: When testing CCTV cameras for security coverage effectiveness, what is the most important factor an SSO should verify?

Camera resolution is set to maximum
Cameras are visible and act as a deterrent
Footage is stored in color rather than black-and-white
All designated access points and restricted areas are covered without blind spots (Correct answer)

Correct answer: All designated access points and restricted areas are covered without blind spots

Effective CCTV coverage requires that all critical areas such as gangways, engine room entries, and the bridge are fully monitored without blind spots.

Question 13: During a performance review of security personnel, the SSO notices a watchstander consistently fails to challenge unescorted individuals in a restricted zone. This is best addressed by:

Ignoring it if no incident has occurred as a result
Reassigning the crew member to non-security duties permanently
Providing retraining and documenting the performance gap in security records (Correct answer)
Reporting the crew member to the flag state immediately

Correct answer: Providing retraining and documenting the performance gap in security records

Targeted retraining and documentation ensures the deficiency is corrected and provides a traceable record for QA purposes.

Question 14: Under Security Level 3, which action is most appropriate for the Ship Security Officer?

Maintaining normal security watch rotations
Implementing all measures specified in the Ship Security Plan for Level 3 (Correct answer)
Requesting a Declaration of Security from the nearest port
Reducing crew access to secure areas only

Correct answer: Implementing all measures specified in the Ship Security Plan for Level 3

At Security Level 3, the SSO must implement all specific security measures identified in the SSP for that level, as an imminent attack is probable or has occurred.

Question 15: What action should an SSO take if a crewmember refuses to participate in a mandatory security drill?

Accept the refusal since security drills are voluntary under IMO guidelines
Excuse the crewmember if they provide a written reason for refusal
Immediately revoke the crewmember's access rights as a disciplinary measure
Document the refusal, report it to the master, and ensure the crewmember is trained through an alternative arrangement (Correct answer)

Correct answer: Document the refusal, report it to the master, and ensure the crewmember is trained through an alternative arrangement

The SSO must document the refusal, escalate to the master, and arrange alternative training to ensure the crewmember achieves the required security competence.

Question 16: When conducting a threat assessment, the SSO should consider which combination of factors?

The ship's profitability and commercial routes only
The personal security history of each crew member only
The ship type, cargo, trading routes, and regional threat intelligence (Correct answer)
Only incidents that have previously occurred on the vessel itself

Correct answer: The ship type, cargo, trading routes, and regional threat intelligence

A comprehensive threat assessment combines ship-specific factors such as type, cargo, and routes with available intelligence about threats in the regions the ship will transit.

Question 17: When assessing a potential supplier of security personnel, an SSO discovers the company lacks documented training records. The BEST course of action is to:

Disqualify the supplier immediately without further review
Reduce the contract scope and proceed
Request documented proof of training before proceeding with evaluation (Correct answer)
Accept verbal assurances from the supplier

Correct answer: Request documented proof of training before proceeding with evaluation

Documented training records are essential evidence of competency; requesting them allows the evaluation to proceed on objective grounds.

Question 18: Which device is used to monitor access to restricted areas on a ship?

Automatic sprinkler
CCTV system (Correct answer)
Radar scanner
Smoke detector

Correct answer: CCTV system

A Closed-Circuit Television (CCTV) system is specifically designed for surveillance and monitoring, making it ideal for observing access points and restricted areas on a ship. It provides real-time visual information, allowing security personnel to detect unauthorized entry or suspicious activities. This visual record also serves as evidence for investigations if a security incident occurs.

Question 19: What is the role of the Company Security Officer (CSO) in the Ship Security Assessment process?

The CSO is responsible for ensuring the SSA is conducted by qualified personnel (Correct answer)
The CSO approves the SSA on behalf of the flag state
The CSO only reviews the SSA after it is completed by the SSO
The CSO has no role in the SSA process

Correct answer: The CSO is responsible for ensuring the SSA is conducted by qualified personnel

The CSO is responsible for ensuring that the Ship Security Assessment is properly conducted, either personally or through qualified security professionals.

Question 20: What is the PRIMARY purpose of continuing education requirements in Contract Types & Administration for SSO professionals?

Maintaining current knowledge and competency as the field evolves (Correct answer)
Networking with other professionals in the field
Earning additional credentials for career advancement
Fulfilling mandatory regulatory requirements only

Correct answer: Maintaining current knowledge and competency as the field evolves

Continuing education in Contract Types & Administration ensures professionals maintain current knowledge and skills as standards, technologies, and best practices evolve in the Ship Security Officer field.

Question 21: When a contracting officer issues a stop-work order on a vessel security contract under FAR 52.242-15, what is the contractor's primary obligation?

Demobilize all personnel and equipment within 24 hours
Stop work on the specified areas and take steps to minimize incurred costs (Correct answer)
Submit a termination settlement proposal within 30 days
Immediately terminate all subcontracts

Correct answer: Stop work on the specified areas and take steps to minimize incurred costs

Upon receipt of a stop-work order under FAR 52.242-15, the contractor must immediately stop the specified work and take all reasonable steps to minimize costs during the work stoppage.

Question 22: Under FAR Subpart 42.15, a contractor's past performance on previous vessel security contracts is evaluated using which government-wide reporting system?

Federal Procurement Data System – Next Generation (FPDS-NG)
System for Award Management (SAM)
Excluded Parties List System (EPLS)
Contractor Performance Assessment Reporting System (CPARS) (Correct answer)

Correct answer: Contractor Performance Assessment Reporting System (CPARS)

CPARS (Contractor Performance Assessment Reporting System) is the mandatory system for recording and retrieving contractor past performance information as required by FAR Subpart 42.15.

Question 23: Under ISPS Code Part A, which entity is responsible for approving a Ship Security Plan (SSP)?

The company security officer
The port facility security officer
The master of the vessel
The flag State Administration (Correct answer)

Correct answer: The flag State Administration

The flag State Administration (or an RSO on its behalf) is responsible for approving the Ship Security Plan.

Question 24: A Ship Security Officer is evaluating a proposal to outsource vessel patrols. The in-house cost is $95,000/year; the outsourced quote is $78,000/year plus a $10,000 transition fee. What is the net first-year savings from outsourcing?

$27,000
$7,000 (Correct answer)
$5,000
$17,000

Correct answer: $7,000

First-year savings = $95,000 − ($78,000 + $10,000) = $95,000 − $88,000 = $7,000.

Question 25: A Declaration of Security (DoS) is an agreement between:

The flag State and the port State
A ship and a port facility (or another ship) (Correct answer)
The master and the port authority
The CSO and the SSO

Correct answer: A ship and a port facility (or another ship)

A Declaration of Security is a formal agreement between a ship and a port facility (or ship-to-ship) defining each party's security responsibilities for an interface.

Question 26: When the SSO evaluates a security system integrator, which capability is MOST important to verify for long-term operational reliability?

Whether the integrator also sells non-security products
Availability of post-installation support, maintenance, and spare parts (Correct answer)
The integrator's headquarters country
Whether the integrator offers the lowest installation price

Correct answer: Availability of post-installation support, maintenance, and spare parts

Long-term reliability of security systems depends on ongoing maintenance and support availability; initial installation cost is secondary to sustained operational capability.

Question 27: A Ship Security Alert System (SSAS) operates on which principle when activated?

It sounds a loud alarm audible throughout the ship
It broadcasts a radio distress message on Channel 16
It automatically locks all exterior doors and gates
It transmits a covert distress alert to maritime authorities without alerting the threat (Correct answer)

Correct answer: It transmits a covert distress alert to maritime authorities without alerting the threat

The SSAS sends a silent, covert alert to competent authorities without triggering any audible alarm on board so as not to escalate a piracy or hijacking situation.

Question 28: What is the purpose of a Declaration of Security (DoS)?

To document the security measures agreed between a ship and a port facility (Correct answer)
To authorize the embarkation of additional security personnel
To certify that a ship's security plan has been approved
To formally report a security incident to authorities

Correct answer: To document the security measures agreed between a ship and a port facility

A DoS documents the security responsibilities and specific measures that both the ship and port facility agree to implement during their interface.

Question 29: How often should security equipment be tested?

When a threat is suspected
According to the SSP maintenance schedule (Correct answer)
Only before leaving port
Annually during dry dock

Correct answer: According to the SSP maintenance schedule

The Ship Security Plan (SSP) is a comprehensive document that outlines all security procedures and equipment maintenance requirements for a specific vessel. It includes a detailed schedule for testing and maintaining security equipment to ensure its continuous operational readiness. Adhering to the SSP's maintenance schedule is crucial for compliance with international regulations and for guaranteeing that all security systems function correctly when needed.

Question 30: When a conflict arises between standard procedures and a unique situation in Federal Acquisition Regulations, what should a SSO professional prioritize?

Safety and ethical obligations while seeking expert consultation (Correct answer)
The preference of the client or stakeholder
The most cost-effective solution available
Strict adherence to written procedures without exception

Correct answer: Safety and ethical obligations while seeking expert consultation

Safety and ethics always take priority in Federal Acquisition Regulations. When standard procedures don't adequately address a unique situation, consulting with experienced colleagues or supervisors ensures both safety and professional standards are maintained.

Question 31: A ship without a valid ISSC arriving at a US port may be subject to which action under 33 CFR Part 104?

Expulsion from US waters permanently
Criminal prosecution of the master only
Mandatory dry-docking
Detention, denial of entry, or expulsion from port (Correct answer)

Correct answer: Detention, denial of entry, or expulsion from port

Under 33 CFR Part 104, a vessel without a valid ISSC may be detained, denied entry, or expelled from the port by the USCG.

Question 32: What is the required response when the Ship Security Alert System (SSAS) is accidentally activated?

Send a follow-up SSAS alert coded as 'test'
Contact the nearest port facility security officer by radio
Immediately notify the competent authority that the alert was a false alarm (Correct answer)
Do nothing; the system resets automatically after 30 minutes

Correct answer: Immediately notify the competent authority that the alert was a false alarm

Accidental SSAS activation must be immediately reported to the competent authority to prevent unnecessary security response deployment.

Question 33: Which information gathered during a Ship Security Assessment is treated as confidential?

The ship's name and IMO number
The ship's scheduled port calls
The number of crew members aboard
Identified vulnerabilities and specific countermeasures in the Ship Security Plan (Correct answer)

Correct answer: Identified vulnerabilities and specific countermeasures in the Ship Security Plan

Vulnerabilities identified in the SSA and the countermeasures outlined in the Ship Security Plan are confidential to prevent adversaries from exploiting this knowledge.

Question 34: A Contracting Government may exempt certain ships from ISPS Code requirements if those ships:

Are under 300 GT
Operate exclusively within a single Contracting Government's waters under bilateral agreements (Correct answer)
Are not carrying dangerous goods
Were built before July 1, 2004

Correct answer: Operate exclusively within a single Contracting Government's waters under bilateral agreements

Contracting Governments may grant exemptions to ships operating on domestic voyages within their own waters or between two States under equivalent security agreements.

Question 35: Why is post-incident reporting important?

To assign blame
To terminate uncooperative crew
To delay audits
To document actions and improve procedures (Correct answer)

Correct answer: To document actions and improve procedures

Post-incident reporting is crucial for several reasons, primarily to document all actions taken during the incident and to identify areas for improvement in security procedures. This documentation provides a factual record, aids in investigations, and allows for a thorough review of the effectiveness of the Ship Security Plan and crew response. Learning from past incidents helps refine protocols and enhance future security preparedness.

Question 36: An audit of the SSP reveals that restricted area markings are faded and unreadable. Who is primarily responsible for correcting this deficiency?

The flag state administration directly
The classification society surveyor
The PFSO of the next port call
The SSO in coordination with the CSO (Correct answer)

Correct answer: The SSO in coordination with the CSO

Maintaining physical security measures including proper marking of restricted areas is an SSO responsibility carried out in coordination with the CSO.

Question 37: What action should a Ship Security Officer (SSO) take during a Security Level 3 situation?

Relax security protocols
Cancel security drills
Follow directives and implement maximum precautions (Correct answer)
Disable security systems

Correct answer: Follow directives and implement maximum precautions

During a Security Level 3 situation, which indicates a probable or imminent security incident, the Ship Security Officer (SSO) must follow specific directives from authorities and implement maximum precautions. This includes intensifying security measures outlined in the Ship Security Plan, such as restricting access, increasing patrols, and preparing for potential threats. The goal is to protect the vessel, crew, and cargo with the highest level of vigilance.

Question 38: Which best describes the difference between Security Level 1 and Security Level 2?

Level 1 applies to passenger ships; Level 2 applies to cargo ships
Level 1 requires a Declaration of Security; Level 2 does not
Level 1 applies in port; Level 2 applies at sea
Level 1 is the normal operating state; Level 2 is set when there is a heightened risk of a security incident (Correct answer)

Correct answer: Level 1 is the normal operating state; Level 2 is set when there is a heightened risk of a security incident

Security Level 1 represents normal operations with minimum appropriate protective security measures, while Level 2 is set when there is a heightened risk of a security incident.

Question 39: The ISPS Code defines a 'security incident' as:

Any suspicious act or circumstance threatening ship, port, or person security (Correct answer)
Any crew injury during cargo operations
Any fire or flooding on board
Any stowaway discovery

Correct answer: Any suspicious act or circumstance threatening ship, port, or person security

A security incident is any suspicious act or circumstance threatening the security of a ship, port facility, or any person therein.

Question 40: Which of the following is considered a primary threat category in maritime security risk assessment?

Acts of terrorism or piracy (Correct answer)
Cargo weight imbalance
Navigational hazards
Equipment maintenance failures

Correct answer: Acts of terrorism or piracy

Acts of terrorism, piracy, and armed robbery against ships are the primary threat categories addressed in maritime security risk assessments.

Question 41: During a security training session, an officer asks why crew members must learn to recognize signs of tampering with security equipment. What is the most accurate response?

It is purely a regulatory requirement with no practical security value
Tampered equipment may fail at a critical moment, and early detection allows restoration before a threat materializes (Correct answer)
Tampering is extremely rare and not worth devoting training time to
Only the SSO and master need to recognize tampering signs; general crew awareness is unnecessary

Correct answer: Tampered equipment may fail at a critical moment, and early detection allows restoration before a threat materializes

Threat actors may pre-disable cameras, alarms, or locks before an attack; trained crew who recognize tampering can restore equipment and raise the alarm before an incident occurs.

Question 42: Which document contains the specific security procedures and measures a ship must follow at each security level?

International Safety Management (ISM) Code Certificate
Ship Security Plan (SSP) (Correct answer)
Continuous Synopsis Record
Maritime Declaration of Health

Correct answer: Ship Security Plan (SSP)

The Ship Security Plan (SSP) contains all security procedures, measures, and actions the ship must implement at Security Levels 1, 2, and 3.

Question 43: A ship's night vision equipment used for security watch-keeping primarily aids in:

Identifying the nationality of approaching vessels by their flag
Detecting unauthorized approaches in darkness or low-visibility conditions (Correct answer)
Recording color footage for CCTV archiving
Measuring the distance to other vessels with radar accuracy

Correct answer: Detecting unauthorized approaches in darkness or low-visibility conditions

Night vision devices amplify ambient light or detect thermal signatures, enabling security watchstanders to identify approaching threats during nighttime or low-visibility periods.

Question 44: A Ship Security Assessment must include an evaluation of which of the following?

Weather routing and navigation plans
Existing security measures, procedures, and operations (Correct answer)
Cargo pricing and commercial agreements
Crew salary scales and employment contracts

Correct answer: Existing security measures, procedures, and operations

The SSA must evaluate all existing security measures, procedures, and operations to identify their strengths and weaknesses relative to identified threats.

Question 45: What is the primary purpose of the Automatic Identification System (AIS) in the context of maritime security?

To verify crew credentials against international databases
To provide vessel identification and tracking information to authorities (Correct answer)
To replace the Ship Security Alert System during emergencies
To communicate security threats to nearby vessels automatically

Correct answer: To provide vessel identification and tracking information to authorities

AIS transmits vessel identity, position, and voyage data that authorities use for monitoring, tracking, and identifying vessels for security purposes.

Question 46: During supplier evaluation, the SSO discovers that a security training provider uses outdated ISPS Code materials from 2004. This should be treated as:

A negotiating point to reduce training fees
A critical disqualifying deficiency requiring immediate rejection or remediation (Correct answer)
An acceptable minor issue if pricing is good
Irrelevant since the core concepts have not changed

Correct answer: A critical disqualifying deficiency requiring immediate rejection or remediation

Security training must reflect current ISPS Code amendments and threat environments; outdated materials indicate non-compliance and inadequate training.

Question 47: How often must SSO drills incorporating security equipment checks typically be conducted under the ISPS Code?

Annually
Monthly
At least once every three months (Correct answer)
Only when new crew members are signed on

Correct answer: At least once every three months

The ISPS Code requires that drills be conducted at least once every three months to ensure crew familiarity with security equipment and procedures.

Question 48: Which document records the maintenance history, testing dates, and deficiencies of shipboard security equipment?

Ship Security Plan
Security Equipment Maintenance Log (Correct answer)
Continuous Synopsis Record
Certificate of Fitness

Correct answer: Security Equipment Maintenance Log

A Security Equipment Maintenance Log tracks inspection results, test dates, repairs, and deficiencies for all shipboard security devices to ensure accountability and compliance.

Question 49: Why is security equipment calibration and testing documentation important during a Port State Control (PSC) inspection?

PSC officers use calibration data to calculate the vessel's cargo capacity
Calibration certificates replace the need for a current Ship Security Certificate
It is required only for vessels carrying dangerous goods
It demonstrates to inspectors that equipment is maintained in operational condition and deficiencies are being tracked (Correct answer)

Correct answer: It demonstrates to inspectors that equipment is maintained in operational condition and deficiencies are being tracked

PSC inspectors review maintenance and testing records to verify that security equipment is operationally ready and that the ship is managing deficiencies in compliance with the ISPS Code.

Question 50: Under ISPS Code Part A, which items must the SSP specifically address at each security level?

Duties of all shipboard personnel, restricted areas, handling of threats, and drills (Correct answer)
Only access control and cargo inspections
Manning levels, watch schedules, and speed restrictions
Customs clearance, immigration, and quarantine procedures

Correct answer: Duties of all shipboard personnel, restricted areas, handling of threats, and drills

The SSP must cover personnel duties, restricted areas, threat handling, and security drills for each of the three security levels.

Question 51: What is the recommended minimum number of personnel who should know the location and operation of each SSAS activation point?

The master and at least one other designated officer (Correct answer)
Only the SSO
Only the master
All crew members

Correct answer: The master and at least one other designated officer

Best practice requires that the master and at least one other designated officer know every SSAS activation point location and operation to ensure activation capability if one person is incapacitated.

Question 52: What is a 'vulnerability' in the context of a Ship Security Assessment?

A known security incident that occurred on the vessel
A crew member who lacks security training
An area of the ship that is difficult to navigate
A weakness that could be exploited by a threat actor (Correct answer)

Correct answer: A weakness that could be exploited by a threat actor

A vulnerability is any weakness or gap in security measures that could be exploited by a hostile actor to compromise ship security.

Ship Security Officer (SSO) Certification Exam

This certification is for individuals designated to ensure the security of a ship, including implementing and maintaining the ship security plan, conducting security inspections, and coordinating with port facility security officers.

Questions

60 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds