Certified Alarm Technician Level I (CAT) — Questions and Answers

Question 1: A customer asks how quickly police will respond after an alarm is triggered. What is the most accurate response?

Advise them that police response is not part of the alarm service
Guarantee a 5-minute response time
Explain that response times vary by jurisdiction, call priority, and available units, and you cannot guarantee a specific time (Correct answer)
Tell them response time depends on their monitoring plan tier

Correct answer: Explain that response times vary by jurisdiction, call priority, and available units, and you cannot guarantee a specific time

Police response times depend on many factors outside the alarm company's control, so setting accurate expectations is critical.

Question 2: Which approach is most effective for problem-solving in Troubleshooting?

Random trial and error
Ignoring the problem until it resolves itself
Always asking someone else
Systematic analysis followed by evidence-based decision making (Correct answer)

Correct answer: Systematic analysis followed by evidence-based decision making

Systematic, evidence-based approaches lead to more reliable solutions than ad hoc methods.

Question 3: If a central station operator receives an 'unrestored trouble' signal from a subscriber's communicator that has not checked in within the expected supervision window, what does this most likely indicate?

The customer has voluntarily cancelled their monitoring service
The panel's backup battery needs to be replaced immediately
A burglary alarm was triggered and the zone was not reset by the user
The communication path between the panel and central station may be disrupted or the panel has lost power (Correct answer)

Correct answer: The communication path between the panel and central station may be disrupted or the panel has lost power

A missed supervisory check-in (unrestored trouble on the communication path) typically signals a loss of communication, possibly due to a cut phone line, network outage, or panel power failure.

Question 4: After replacing a control panel backup battery, what maintenance record should the technician complete?

No documentation is needed for a routine battery swap
Only note the replacement if the battery failed during a power outage
Document the date, battery model, and next recommended replacement date in the service log (Correct answer)
Record only if required by the customer's monitoring contract

Correct answer: Document the date, battery model, and next recommended replacement date in the service log

Proper documentation creates an audit trail and helps schedule the next replacement before the battery reaches end of life.

Question 5: What does the SIA DC-09 standard define in the alarm industry?

Central station staffing ratios and operator training requirements
The protocol for transmitting alarm signals over IP networks from field devices to receivers (Correct answer)
Wiring color codes and conductor sizing for alarm circuits
Installation requirements for motion detector placement and coverage

Correct answer: The protocol for transmitting alarm signals over IP networks from field devices to receivers

SIA DC-09 (Internet Protocol Event Reporting) defines the standard protocol for transporting alarm event messages between IP-based field communicators and central station receivers.

Question 6: Alarm technicians who work on fire alarm systems in most US states must hold a license issued by:

NFPA directly
Their employer only
The state licensing board or applicable state authority (Correct answer)
The federal Department of Homeland Security

Correct answer: The state licensing board or applicable state authority

Fire alarm licensing is a state-level requirement; most states require technicians to pass an exam and maintain a state-issued license.

Question 7: Which NFPA standard primarily governs the installation of fire alarm systems in the United States?

NFPA 25
NFPA 72 (Correct answer)
NFPA 101
NFPA 70

Correct answer: NFPA 72

NFPA 72, the National Fire Alarm and Signaling Code, is the primary standard for fire alarm system installation.

Question 8: During testing, a siren produces sound but at a significantly lower volume than specified. What is the most likely cause?

The control panel software needs updating
The siren is facing the wrong direction
Voltage drop due to undersized or excessively long wire run to the siren (Correct answer)
The siren is the wrong color for the installation

Correct answer: Voltage drop due to undersized or excessively long wire run to the siren

Insufficient wire gauge or excessive wire length causes voltage drop that reduces power to the siren, resulting in lower-than-rated sound output.

Question 9: What is a 'receiver' in the context of central station alarm monitoring equipment?

A passive infrared sensor used for perimeter intrusion detection
A handheld device used by technicians to test alarm sensors on-site
Equipment at the central station that accepts, decodes, and logs incoming alarm signals from field communicators (Correct answer)
A control panel output module that drives notification appliances

Correct answer: Equipment at the central station that accepts, decodes, and logs incoming alarm signals from field communicators

The central station receiver is the hardware that answers calls or network connections from field DACTs and decodes the transmitted alarm data for operator action.

Question 10: How often should a residential security alarm system undergo a full walk-test according to industry best practices?

Every 5 years
Every 10 years
Only after installation
Every 6 months (Correct answer)

Correct answer: Every 6 months

Industry best practices recommend a full walk-test every 6 months to ensure all sensors and zones are functioning properly.

Question 11: What is the primary purpose of standardized procedures in Alarm System Components?

To ensure consistency, safety, and quality across all practitioners (Correct answer)
To benefit only management
To slow down work processes
To create unnecessary bureaucracy

Correct answer: To ensure consistency, safety, and quality across all practitioners

Standardized procedures ensure that all practitioners deliver consistent, safe, and high-quality outcomes.

Question 12: During a periodic maintenance visit, a technician finds that a door contact sensor fails to trigger the alarm. What is the FIRST step?

Reprogram the control panel zone
Notify the monitoring center
Replace the entire sensor immediately
Inspect the magnet alignment and gap distance (Correct answer)

Correct answer: Inspect the magnet alignment and gap distance

Checking magnet alignment and gap is the quickest non-invasive first step before replacing hardware or reprogramming.

Question 13: What is required under UL 2050 for a central station to be considered UL-listed?

Annual payment of UL licensing fees only
A minimum of 50,000 subscriber accounts
Only the monitoring software must be UL certified
The facility must meet physical security, staffing, testing, and operational standards verified by UL audits (Correct answer)

Correct answer: The facility must meet physical security, staffing, testing, and operational standards verified by UL audits

UL 2050 sets comprehensive requirements for central station facilities covering construction, redundancy, staffing, testing, and ongoing UL inspections.

Question 14: How does technology impact modern practices in Troubleshooting?

Technology replaces all human judgment
Technology has no impact on this field
Technology improves efficiency, accuracy, and access to information while requiring new skills (Correct answer)
Technology is only useful for record keeping

Correct answer: Technology improves efficiency, accuracy, and access to information while requiring new skills

Technology enhances capabilities while also requiring practitioners to develop new competencies.

Question 15: When using a powder-actuated fastening tool on a fire alarm installation job, what PPE is mandatory per OSHA?

No PPE is required for low-velocity tools
Only steel-toed boots
Safety glasses and hearing protection at minimum, with a face shield recommended (Correct answer)
Only safety glasses

Correct answer: Safety glasses and hearing protection at minimum, with a face shield recommended

Powder-actuated tools produce noise above 140 dB and propel fasteners at high velocity, making eye and hearing protection mandatory per OSHA 29 CFR 1926.302.

Question 16: What is UL 681 the standard for?

Security camera systems
Central station alarm monitoring facilities
Fire alarm control panels
Installation and classification of burglar and holdup alarm systems (Correct answer)

Correct answer: Installation and classification of burglar and holdup alarm systems

UL 681 covers the installation requirements and performance classifications for burglar alarm and holdup alarm systems in residential and commercial applications.

Question 17: What is the primary purpose of performing a battery load test on a backup power supply?

To check the battery's physical dimensions
To reset the control panel clock
To confirm the battery voltage at rest
To verify the battery can sustain the system under actual load conditions (Correct answer)

Correct answer: To verify the battery can sustain the system under actual load conditions

A load test confirms the battery can deliver sufficient current under real operating conditions, not just at rest voltage.

Question 18: What does the NFPA 72 'pathway survivability' requirement address?

Fire alarm circuit wiring must remain operational during a fire in certain building types (Correct answer)
Alarm panels must survive water damage
Backup batteries must survive a 130°F environment
Sirens must operate in high-wind conditions

Correct answer: Fire alarm circuit wiring must remain operational during a fire in certain building types

Pathway survivability requires that alarm circuit wiring in high-rise and similar buildings be protected so it continues to function during a fire event.

Question 19: What does NEC Article 760 regulate?

Communications cables
General residential wiring
Fire alarm systems wiring and equipment (Correct answer)
Service entrance conductors

Correct answer: Fire alarm systems wiring and equipment

NEC Article 760 covers the installation of fire alarm systems, including power-limited and non-power-limited wiring methods and cable types.

Question 20: What does a 'heartbeat' signal in an alarm communication system indicate?

A smoke detector has entered self-test mode and is temporarily bypassed
The panel is periodically checking in with the central station to confirm the communication path is active (Correct answer)
The backup battery has completed a charge cycle and is at full capacity
The alarm system has detected a medical emergency and is requesting EMS dispatch

Correct answer: The panel is periodically checking in with the central station to confirm the communication path is active

A heartbeat (also called a supervisory check-in or test signal) is sent on a timed interval so the central station can detect if the path goes down between actual alarm events.

Question 21: A Class A initiating device circuit (IDC) differs from Class B primarily in that Class A:

Uses wireless devices only
Requires twice the number of conductors per device
Provides a supervised return path so a single open fault does not disable the entire circuit (Correct answer)
Is only used in commercial occupancies

Correct answer: Provides a supervised return path so a single open fault does not disable the entire circuit

Class A circuits use a return path (loop) so that a single open will not prevent all devices from reporting; Class B will lose devices beyond the fault.

Question 22: What are the key regulatory requirements affecting Troubleshooting?

There are no regulations
Only federal regulations apply
Regulations are optional guidelines
Compliance with applicable laws, industry standards, and licensing requirements specific to the field (Correct answer)

Correct answer: Compliance with applicable laws, industry standards, and licensing requirements specific to the field

Practitioners must comply with all applicable regulations, which may include federal, state, and industry-specific requirements.

Question 23: What does the acronym 'DACT' stand for in alarm system terminology?

Digital Alarm Communication Transmitter (Correct answer)
Dual Alarm Control Terminal
Direct Access Communication Transceiver
Digital Audio Communication Technology

Correct answer: Digital Alarm Communication Transmitter

DACT stands for Digital Alarm Communication Transmitter, the device within or connected to a control panel that dials the central station and sends alarm data.

Question 24: During installation, you discover the customer's expectations do not match the contracted scope of work. What should you do?

Complete the full contracted scope and invoice for undisclosed extras afterward
Proceed with the customer's verbal requests and ignore the contract
Stop work and communicate the discrepancy to both the customer and your supervisor before proceeding (Correct answer)
Install only what you feel is sufficient

Correct answer: Stop work and communicate the discrepancy to both the customer and your supervisor before proceeding

Clarifying scope discrepancies before proceeding prevents disputes, unauthorized changes, and liability issues.

Question 25: What is 'IP monitoring' in the context of central station alarm communication?

Intellectual property monitoring embedded in alarm panel firmware
Internal power monitoring of the panel's input and output voltages
Monitoring of IP address conflicts on the premises network
Transmitting alarm signals to the central station over an Internet Protocol broadband network (Correct answer)

Correct answer: Transmitting alarm signals to the central station over an Internet Protocol broadband network

IP monitoring (also called broadband or network monitoring) uses the customer's Internet connection to send alarm data to the central station, offering fast and reliable transmission.

Question 26: What does the term 'polling' mean in the context of alarm signal transmission?

The central station periodically querying a communicator to verify it is online (Correct answer)
Testing alarm panel batteries under load
Counting the number of active zones in a panel
Manually triggering zones to confirm sensor operation

Correct answer: The central station periodically querying a communicator to verify it is online

Polling is the process by which the central station receiver periodically sends a check-in request to the field communicator to confirm the communication path is active.

Question 27: A PIR detector is generating false alarms in a room with large windows facing west. What environmental factor is most likely responsible?

High humidity levels
Electrical interference from nearby wiring
Direct sunlight heating entering through the windows and causing thermal spikes (Correct answer)
Low room temperature

Correct answer: Direct sunlight heating entering through the windows and causing thermal spikes

Late afternoon sun can cause intense infrared radiation to enter through west-facing windows, creating thermal changes that PIR detectors misinterpret as motion.

Question 28: Which communication format is most widely used to transmit alarm signals from a control panel to a central monitoring station via telephone lines?

FSK tone burst only
SIA DC-09 IP
DTMF handshake only
Contact ID (Correct answer)

Correct answer: Contact ID

Contact ID is the industry-standard digital communication format adopted by virtually all alarm manufacturers for transmitting event data over POTS lines.

Question 29: What does ESA stand for in the alarm industry?

Electrical Standards Agency
Electronic Security Association (Correct answer)
Enforcement of Security Alarms
Emergency Systems Authority

Correct answer: Electronic Security Association

The Electronic Security Association (ESA) is the primary trade association for the alarm and electronic security industry in the United States.

Question 30: What is the primary reason for using shielded cable on alarm system wiring in commercial environments?

To reduce electromagnetic interference (EMI) from nearby electrical equipment (Correct answer)
To comply with fire rating requirements in commercial buildings
To increase the wire's current-carrying capacity
To allow longer runs without signal boosters

Correct answer: To reduce electromagnetic interference (EMI) from nearby electrical equipment

The foil or braid shield in shielded cable provides a Faraday cage effect that minimizes EMI pickup, which is common near motors, HVAC, and lighting equipment.

Question 31: What must occur before a newly installed fire alarm system can be placed into service?

Acceptance testing witnessed by the AHJ or their representative (Correct answer)
A 30-day trial run period
Panel self-diagnostic completion
Payment of the monitoring contract

Correct answer: Acceptance testing witnessed by the AHJ or their representative

NFPA 72 requires a formal acceptance test of all system functions performed in the presence of, or approved by, the AHJ before a fire alarm system goes live.

Question 32: What is the primary purpose of False Alarm Reduction (FAR) programs adopted by many US municipalities?

Mandate alarm permits for all residential users
Increase monitoring center revenue
Reduce the number of unnecessary emergency dispatches caused by system malfunctions or user error (Correct answer)
Require annual system inspections by the fire marshal

Correct answer: Reduce the number of unnecessary emergency dispatches caused by system malfunctions or user error

FAR programs use permit fees, fines, and dispatch policies to motivate alarm users and companies to reduce the burden of false alarms on emergency services.

Question 33: What is the most important foundational concept in Troubleshooting?

Ignoring established guidelines
Understanding core principles and their practical application in Troubleshooting (Correct answer)
Only following instructions from supervisors
Memorizing all rules without understanding

Correct answer: Understanding core principles and their practical application in Troubleshooting

Core principles provide the foundation for all decision-making and practice in Troubleshooting.

Question 34: When programming a digital communicator, which information is essential for the system to correctly route alarm signals to the central station?

Customer credit card number and billing address for the monitoring account
The local police department's non-emergency dispatch phone number
The technician's state license number and installing company name
Central station receiver phone numbers and the subscriber account code (Correct answer)

Correct answer: Central station receiver phone numbers and the subscriber account code

The communicator must have the central station's receiver phone number(s) to dial and the account code to identify the subscriber when the signal is received.

Question 35: What is the purpose of a 'handshake' in the Contact ID digital communication protocol?

To test the telephone line for noise and signal quality
To confirm the central station receiver has acknowledged and accepted the transmitted message (Correct answer)
To establish a live voice channel between the panel and the monitoring operator
To encrypt the signal payload before it is transmitted

Correct answer: To confirm the central station receiver has acknowledged and accepted the transmitted message

The handshake is the central station receiver's acknowledgment tone sent back to the DACT, confirming the message was received correctly and ending the transmission.

Question 36: A CAT exam candidate is asked about 'environmental testing' of alarm components. This refers to:

Testing for wildlife interference with outdoor sensors
Verifying that equipment operates within its specified temperature, humidity, and vibration tolerances (Correct answer)
Conducting soil surveys before outdoor sensor installation
Testing for compliance with EPA pollution standards

Correct answer: Verifying that equipment operates within its specified temperature, humidity, and vibration tolerances

Environmental testing confirms that alarm components meet performance specifications across the range of environmental conditions they will encounter in the field.

Question 37: Which state-level license type is most commonly required to install security alarm systems in the US?

General electrical contractor license
HVAC technician license
Fire suppression contractor license
Alarm contractor or burglar alarm installer license (Correct answer)

Correct answer: Alarm contractor or burglar alarm installer license

Most US states require alarm installers to hold a specific alarm contractor or burglar alarm technician license separate from a general electrical license.

Question 38: A glass break detector mounted on a ceiling consistently produces false alarms. What maintenance action should be taken FIRST?

Replace the detector with a motion sensor
Increase the alarm delay on the zone
Bypass the zone permanently
Reposition or re-angle the detector to reduce sensitivity to HVAC noise (Correct answer)

Correct answer: Reposition or re-angle the detector to reduce sensitivity to HVAC noise

HVAC ducts and metal objects near a ceiling-mounted glass break detector can generate false positives, so repositioning is the first corrective step.

Question 39: A customer requests that their alarm system not be tested during business hours because it disrupts employees. How should you handle this?

Test only the exterior sensors to minimize disruption
Skip the test entirely to accommodate the customer
Override their preference since testing is mandatory at any time
Acknowledge the concern and schedule the test during a mutually agreed low-disruption window (Correct answer)

Correct answer: Acknowledge the concern and schedule the test during a mutually agreed low-disruption window

Accommodating reasonable scheduling preferences while ensuring proper testing meets both customer service and technical obligations.

Question 40: A siren fails to sound during a maintenance test but the control panel logs the alarm event. What is the most likely cause?

Faulty keypad
Incorrect zone programming
Blown fuse or broken wire on the siren output circuit (Correct answer)
Dead backup battery

Correct answer: Blown fuse or broken wire on the siren output circuit

If the panel logs the event but the siren doesn't activate, the issue is in the output wiring or fuse, not the detection side.

Question 41: Which maintenance task helps prevent nuisance alarms caused by spider webs or insect intrusion on a PIR detector?

Reduce the zone sensitivity in the panel programming
Clean the detector lens and housing with a soft, dry cloth on each maintenance visit (Correct answer)
Apply insecticide spray directly inside the detector
Seal the detector housing with silicone caulk

Correct answer: Clean the detector lens and housing with a soft, dry cloth on each maintenance visit

Insects and debris on the lens scatter IR energy and cause false triggers; gentle cleaning removes the contamination without damaging optics.

Question 42: What is the purpose of a Central Station as defined by NFPA 72?

It is the primary electrical panel for the building
It is a facility that receives alarm, supervisory, and trouble signals and retransmits them to the appropriate authorities (Correct answer)
It is the control unit location inside the protected premises
It serves as the local fire department dispatch center

Correct answer: It is a facility that receives alarm, supervisory, and trouble signals and retransmits them to the appropriate authorities

A Central Station is a UL-listed, 24/7 staffed off-site monitoring facility that receives signals and notifies emergency services.

Question 43: Which wire gauge is most commonly used for connecting alarm system sensors to a control panel over short distances?

22 AWG (Correct answer)
10 AWG
6 AWG
14 AWG

Correct answer: 22 AWG

22 AWG is the standard wire gauge for low-voltage alarm sensor runs due to its balance of flexibility and conductivity.

Question 44: What does a high resistance reading on a normally closed (NC) detection loop indicate during a maintenance check?

Normal loop integrity
A loose wire connection or corroded terminal (Correct answer)
The sensor has been bypassed in software
A short circuit in the wiring

Correct answer: A loose wire connection or corroded terminal

Elevated resistance on an NC loop points to a poor connection or corrosion increasing resistance in the circuit.

Question 45: What wire gauge is most commonly used for low-voltage alarm system wiring?

6 AWG
22 AWG (Correct answer)
10 AWG
14 AWG

Correct answer: 22 AWG

22 AWG is the standard low-voltage wire gauge used in most residential and commercial alarm system installations.

Question 46: Which tool is most appropriate for verifying that a passive infrared (PIR) motion detector is properly detecting motion across its coverage area?

IR thermometer aimed at the lens
Oscilloscope on the sensor output wire
Multimeter set to AC voltage
Walk-test mode on the control panel with technician present (Correct answer)

Correct answer: Walk-test mode on the control panel with technician present

Walk-test mode activates zone indicator feedback so the technician can physically walk the coverage area and confirm detection.

Question 47: Which NFPA standard applies to the installation of residential burglar alarm systems?

NFPA 72
NFPA 101
NFPA 1
NFPA 731 (Correct answer)

Correct answer: NFPA 731

NFPA 731, the Standard for the Installation of Electronic Premises Security Systems, covers residential and commercial burglar alarm installation requirements.

Question 48: What is the importance of communication skills in Troubleshooting?

Communication is only important for managers
Clear communication prevents errors, builds relationships, and ensures understanding among all parties (Correct answer)
Technical skills are sufficient without communication
Communication skills cannot be learned

Correct answer: Clear communication prevents errors, builds relationships, and ensures understanding among all parties

Effective communication is essential for coordination, error prevention, and stakeholder relationships.

Question 49: What minimum sound pressure level does NFPA 72 require for fire alarm audible devices in sleeping areas?

60 dB at the device
75 dB at the pillow level (Correct answer)
90 dB at the panel
50 dB in the corridor

Correct answer: 75 dB at the pillow level

NFPA 72 requires audible fire alarm signals to produce at least 75 dB measured at the pillow to reliably awaken sleeping occupants.

Question 50: Which of the following best describes 'sensor tamper' supervision in an alarm system?

A keypad lockout after repeated incorrect codes
Software flag set when a zone is bypassed more than twice
A daily self-test signal sent to the monitoring center
A separate circuit that triggers an alert when a detector housing is opened or removed (Correct answer)

Correct answer: A separate circuit that triggers an alert when a detector housing is opened or removed

Tamper supervision uses a dedicated contact that opens when the sensor cover is removed, generating a tamper alert at the panel.

Certified Alarm Technician Level I (CAT)

The ESA/NBFAA Certified Alarm Technician Level I certification validates foundational skills in electronic security system installation, maintenance, signal transmission, troubleshooting, and industry codes for entry-level alarm technicians.

Questions

120 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds