Ship Security Officer (SSO) Certification Exam — Questions and Answers

Question 1: Under Security Level 3, which action is most appropriate for the Ship Security Officer?

Reducing crew access to secure areas only
Implementing all measures specified in the Ship Security Plan for Level 3 (Correct answer)
Maintaining normal security watch rotations
Requesting a Declaration of Security from the nearest port

Correct answer: Implementing all measures specified in the Ship Security Plan for Level 3

At Security Level 3, the SSO must implement all specific security measures identified in the SSP for that level, as an imminent attack is probable or has occurred.

Question 2: How often should security equipment be tested?

Only before leaving port
Annually during dry dock
When a threat is suspected
According to the SSP maintenance schedule (Correct answer)

Correct answer: According to the SSP maintenance schedule

The Ship Security Plan (SSP) is a comprehensive document that outlines all security procedures and equipment maintenance requirements for a specific vessel. It includes a detailed schedule for testing and maintaining security equipment to ensure its continuous operational readiness. Adhering to the SSP's maintenance schedule is crucial for compliance with international regulations and for guaranteeing that all security systems function correctly when needed.

Question 3: A long-range acoustic device (LRAD) used as a maritime security measure operates primarily by:

Creating a visible laser barrier around the ship's perimeter
Firing rubber projectiles at boarding parties
Jamming communications signals from approaching craft
Emitting a high-intensity sound beam that can deter and disorient approaching threats (Correct answer)

Correct answer: Emitting a high-intensity sound beam that can deter and disorient approaching threats

An LRAD projects a focused, high-decibel sound beam that causes discomfort and disorientation, serving as a non-lethal deterrent against approaching threats.

Question 4: How often must ship security drills be conducted according to ISPS Code?

Every 3 months (Correct answer)
Annually
Every 6 months
Monthly

Correct answer: Every 3 months

According to the International Ship and Port Facility Security (ISPS) Code, ship security drills must be conducted at intervals not exceeding three months. This regular frequency ensures that the crew remains familiar with their duties and responsibilities under the Ship Security Plan. Frequent drills help maintain a high level of preparedness and proficiency in responding to potential security threats.

Question 5: What action should an SSO take upon discovering evidence of tampering with access control equipment protecting a restricted area?

Conduct a personal search of all crew in the affected area
Treat it as a security incident, restrict access, investigate, and report per the SSP (Correct answer)
Immediately evacuate the vessel and contact the USCG National Response Center
Suspend all cargo operations until the ISSC is re-verified by an RSO

Correct answer: Treat it as a security incident, restrict access, investigate, and report per the SSP

Tampered access control equipment constitutes a security incident requiring restricted access, investigation, and reporting through channels defined in the Ship Security Plan.

Question 6: A port facility security officer requests a copy of the Ship Security Plan prior to the vessel's arrival. How should the SSO respond?

Decline to provide the plan as it is confidential, but offer relevant sections if legally required (Correct answer)
Only share the plan with flag state officials
Email the full plan to port authorities as a courtesy
Provide a full copy immediately as required by the ISPS Code

Correct answer: Decline to provide the plan as it is confidential, but offer relevant sections if legally required

The SSP is a confidential document; the SSO may share relevant portions required by law but is not obligated to provide the full plan to port facility personnel.

Question 7: What type of training is mandatory for all crew members regarding security?

Medical first aid
Cargo loading
Navigation chart plotting
Security awareness training (Correct answer)

Correct answer: Security awareness training

International maritime regulations, such as the ISPS Code, mandate that all shipboard personnel receive appropriate security awareness training. This training ensures that every crew member understands their role in maintaining ship security, recognizing security threats, and knowing how to respond. It fosters a collective security culture, making the ship less vulnerable to security incidents.

Question 8: Which of the following is NOT a required element of a Ship Security Plan under ISPS Code Part A?

Procedures for responding to security threats
Cargo insurance arrangements (Correct answer)
Duties of shipboard personnel with security responsibilities
Measures to prevent unauthorized access

Correct answer: Cargo insurance arrangements

Cargo insurance arrangements are a commercial matter and are not a required element of the Ship Security Plan.

Question 9: What is the function of an 'anti-piracy citadel' on a vessel?

A secure cargo hold designed to prevent theft of high-value goods
A reinforced room where crew can shelter and maintain communications with authorities during a piracy attack (Correct answer)
A gun turret for defensive fire against pirates
A raised observation platform for security watch-keeping

Correct answer: A reinforced room where crew can shelter and maintain communications with authorities during a piracy attack

A citadel is a designated, hardened compartment where crew can shelter during a piracy attack, with independent communications to alert authorities while the vessel is boarded.

Question 10: What is the legal effect of incorporating an 'arbitration clause' into a charter party or bill of lading?

It requires all disputes to be resolved in a US federal court
It waives the carrier's right to appeal
It limits claims to the vessel's value
It mandates that disputes be resolved through arbitration rather than litigation (Correct answer)

Correct answer: It mandates that disputes be resolved through arbitration rather than litigation

An arbitration clause requires the parties to submit disputes to an agreed arbitral tribunal (e.g., London or New York arbitration) instead of pursuing court litigation.

Question 11: Which level of security under the ISPS Code indicates an increased risk of a security incident?

Security Level 0
Security Level 3
Security Level 2 (Correct answer)
Security Level 1

Correct answer: Security Level 2

The ISPS Code defines three security levels to indicate the risk of a security incident. Security Level 2 signifies an increased risk of a security incident, requiring the ship and port facility to implement appropriate additional protective measures beyond routine operations. This level indicates a heightened state of alert and preparedness.

Question 12: Why is security equipment calibration and testing documentation important during a Port State Control (PSC) inspection?

PSC officers use calibration data to calculate the vessel's cargo capacity
It demonstrates to inspectors that equipment is maintained in operational condition and deficiencies are being tracked (Correct answer)
It is required only for vessels carrying dangerous goods
Calibration certificates replace the need for a current Ship Security Certificate

Correct answer: It demonstrates to inspectors that equipment is maintained in operational condition and deficiencies are being tracked

PSC inspectors review maintenance and testing records to verify that security equipment is operationally ready and that the ship is managing deficiencies in compliance with the ISPS Code.

Question 13: Which body is responsible for approving a ship's Security Plan under the ISPS Code?

The Company Security Officer
The International Maritime Organization (IMO)
The port state control authority
The flag state Administration or a Recognized Security Organization acting on its behalf (Correct answer)

Correct answer: The flag state Administration or a Recognized Security Organization acting on its behalf

The flag state Administration, or a Recognized Security Organization (RSO) it authorizes, is responsible for reviewing and approving the Ship Security Plan.

Question 14: Which parties may request a Declaration of Security?

Only the ship's Master
Only the port facility
Only the Contracting Government
Either the ship or the port facility (Correct answer)

Correct answer: Either the ship or the port facility

Either the ship or the port facility may request a Declaration of Security when they believe their interface presents a security risk requiring formal documented agreement.

Question 15: What action should an SSO take if a crewmember refuses to participate in a mandatory security drill?

Immediately revoke the crewmember's access rights as a disciplinary measure
Accept the refusal since security drills are voluntary under IMO guidelines
Document the refusal, report it to the master, and ensure the crewmember is trained through an alternative arrangement (Correct answer)
Excuse the crewmember if they provide a written reason for refusal

Correct answer: Document the refusal, report it to the master, and ensure the crewmember is trained through an alternative arrangement

The SSO must document the refusal, escalate to the master, and arrange alternative training to ensure the crewmember achieves the required security competence.

Question 16: Which information gathered during a Ship Security Assessment is treated as confidential?

Identified vulnerabilities and specific countermeasures in the Ship Security Plan (Correct answer)
The number of crew members aboard
The ship's scheduled port calls
The ship's name and IMO number

Correct answer: Identified vulnerabilities and specific countermeasures in the Ship Security Plan

Vulnerabilities identified in the SSA and the countermeasures outlined in the Ship Security Plan are confidential to prevent adversaries from exploiting this knowledge.

Question 17: Which document records the maintenance history, testing dates, and deficiencies of shipboard security equipment?

Certificate of Fitness
Ship Security Plan
Continuous Synopsis Record
Security Equipment Maintenance Log (Correct answer)

Correct answer: Security Equipment Maintenance Log

A Security Equipment Maintenance Log tracks inspection results, test dates, repairs, and deficiencies for all shipboard security devices to ensure accountability and compliance.

Question 18: How should crew members respond to suspicious behavior under security protocols?

Report to the Ship Security Officer immediately (Correct answer)
Ignore it to avoid confrontation
Record it for personal notes
Handle the situation alone

Correct answer: Report to the Ship Security Officer immediately

Crew members are the first line of defense in identifying potential security threats. It is crucial for them to be trained to recognize and immediately report any suspicious behavior, objects, or persons to the Ship Security Officer (SSO). Prompt reporting allows the SSO to assess the situation and initiate appropriate security protocols as outlined in the Ship Security Plan, ensuring rapid response.

Question 19: What should a Ship Security Officer do immediately upon receiving credible information about a specific threat to the vessel?

Dismiss the information if the ship is already at Security Level 1
Notify the Master and Company Security Officer and implement appropriate security measures (Correct answer)
Independently investigate the threat before reporting it
Wait until arriving at the next port before reporting

Correct answer: Notify the Master and Company Security Officer and implement appropriate security measures

The SSO must immediately notify the Master and CSO upon receiving credible threat information so that appropriate security level measures can be implemented without delay.

Question 20: When testing CCTV cameras for security coverage effectiveness, what is the most important factor an SSO should verify?

Camera resolution is set to maximum
All designated access points and restricted areas are covered without blind spots (Correct answer)
Cameras are visible and act as a deterrent
Footage is stored in color rather than black-and-white

Correct answer: All designated access points and restricted areas are covered without blind spots

Effective CCTV coverage requires that all critical areas such as gangways, engine room entries, and the bridge are fully monitored without blind spots.

Question 21: Under US law, the Maritime Transportation Security Act (MTSA) of 2002 is the domestic equivalent of which international instrument?

ISM Code
MARPOL Annex VI
STCW Convention
ISPS Code (Correct answer)

Correct answer: ISPS Code

The MTSA 2002 is the US domestic legislation that mirrors and implements the requirements of the ISPS Code for US-flagged vessels and US ports.

Question 22: Which of the following is part of the duties of a Ship Security Officer?

Maintenance of machinery
Handling cargo documentation
Navigation of the vessel
Security training and implementation (Correct answer)

Correct answer: Security training and implementation

A core duty of the Ship Security Officer (SSO) is to ensure that all crew members receive appropriate security training and that the Ship Security Plan (SSP) is effectively implemented onboard. This includes conducting drills, maintaining security equipment, and ensuring compliance with security procedures. The SSO is central to fostering a security-conscious culture and maintaining the ship's security posture.

Question 23: What is the primary purpose of a ship's Automatic Identification System (AIS) in the context of maritime security?

To control the ship's steering from a remote location
To automate cargo loading operations
To provide vessel tracking and identity information to other ships and authorities (Correct answer)
To monitor crew fatigue levels

Correct answer: To provide vessel tracking and identity information to other ships and authorities

AIS broadcasts vessel identity, position, course, and speed, enabling maritime authorities and other vessels to track and identify ships for safety and security purposes.

Question 24: How frequently must a Ship Security Assessment be reviewed according to the ISPS Code?

Only when requested by the flag state
Every five years when the International Ship Security Certificate is renewed
Before significant operational changes or security incidents, and at regular intervals (Correct answer)
Every six months regardless of circumstances

Correct answer: Before significant operational changes or security incidents, and at regular intervals

The ISPS Code requires the SSA to be reviewed when there are significant changes to the ship's operations or following a security incident, as well as at regular intervals to remain current.

Question 25: The ISPS Code requires ships to maintain records of security activities for a minimum of how long?

5 years
6 months
1 year
3 years (Correct answer)

Correct answer: 3 years

The ISPS Code requires that records of security activities, drills, and incidents be kept for a minimum of three years.

Question 26: What is the minimum frequency at which security drills must be conducted on a ship under the ISPS Code?

At least once every three months (Correct answer)
Once per calendar year per crew member
Once per voyage
Annually

Correct answer: At least once every three months

ISPS Code requires security drills to be conducted at least once every three months to maintain crew readiness.

Question 27: Under the ISPS Code, which party is responsible for approving a Ship Security Plan (SSP)?

The Administration (flag state) (Correct answer)
The Classification Society on behalf of the company
The Port State Control authority
The Company Security Officer

Correct answer: The Administration (flag state)

The Administration (flag state) or a recognized security organization acting on its behalf is responsible for approving the Ship Security Plan.

Question 28: What is a 'vulnerability' in the context of a Ship Security Assessment?

A crew member who lacks security training
An area of the ship that is difficult to navigate
A known security incident that occurred on the vessel
A weakness that could be exploited by a threat actor (Correct answer)

Correct answer: A weakness that could be exploited by a threat actor

A vulnerability is any weakness or gap in security measures that could be exploited by a hostile actor to compromise ship security.

Question 29: Under FAR Part 22, a contract for vessel patrol and security guard services must comply with which labor law requiring minimum wages for service employees?

Service Contract Labor Standards (formerly Service Contract Act) (Correct answer)
Walsh-Healey Public Contracts Act
Davis-Bacon Act
Fair Labor Standards Act exclusively

Correct answer: Service Contract Labor Standards (formerly Service Contract Act)

The Service Contract Labor Standards (SCLS), formerly the Service Contract Act, applies to federal service contracts and requires prevailing wages and fringe benefits for service employees.

Question 30: Which factor distinguishes an 'approved' security service provider from a merely 'licensed' one in the context of maritime security?

Approved providers operate only in domestic waters
Approved providers have lower insurance premiums
Approved providers have been vetted against specific security standards by the flag state or company (Correct answer)
Approved providers are exclusively government-owned

Correct answer: Approved providers have been vetted against specific security standards by the flag state or company

Approval implies vetting against defined security standards by an authoritative body, whereas licensing may only confirm basic legal registration.

Question 31: A Ship Security Officer identifies a need for emergency security equipment mid-voyage. Which FAR provision authorizes urgent, unplanned purchases below the micro-purchase threshold?

FAR 6.302-2 (unusual and compelling urgency)
FAR 52.204-9 (contractor code of business ethics)
FAR 13.201 (micro-purchase procedures) (Correct answer)
FAR 15.402 (pricing policy)

Correct answer: FAR 13.201 (micro-purchase procedures)

FAR 13.201 governs micro-purchase procedures, allowing quick, low-value purchases without competitive bidding for urgent needs.

Question 32: Which document contains the specific security procedures and measures a ship must follow at each security level?

International Safety Management (ISM) Code Certificate
Ship Security Plan (SSP) (Correct answer)
Maritime Declaration of Health
Continuous Synopsis Record

Correct answer: Ship Security Plan (SSP)

The Ship Security Plan (SSP) contains all security procedures, measures, and actions the ship must implement at Security Levels 1, 2, and 3.

Question 33: What action should the SSO take when a crew member reports being threatened by another crew member over a security-related matter?

Mediate the dispute privately without documentation
Investigate, document the incident, and report to the Master (Correct answer)
Dismiss the complaint if no physical injury occurred
Transfer the threatening crew member immediately at next port

Correct answer: Investigate, document the incident, and report to the Master

Any internal security threat between crew members must be investigated, documented, and reported to the Master as required by the Ship Security Plan.

Question 34: Which best describes the difference between Security Level 1 and Security Level 2?

Level 1 applies in port; Level 2 applies at sea
Level 1 applies to passenger ships; Level 2 applies to cargo ships
Level 1 is the normal operating state; Level 2 is set when there is a heightened risk of a security incident (Correct answer)
Level 1 requires a Declaration of Security; Level 2 does not

Correct answer: Level 1 is the normal operating state; Level 2 is set when there is a heightened risk of a security incident

Security Level 1 represents normal operations with minimum appropriate protective security measures, while Level 2 is set when there is a heightened risk of a security incident.

Question 35: Which international regulation mandates that certain ships carry a functioning Ship Security Alert System?

STCW Convention Chapter VI
SOLAS Chapter XI-2 (Correct answer)
ISM Code Regulation 12
MARPOL Annex I

Correct answer: SOLAS Chapter XI-2

SOLAS Chapter XI-2, which incorporates the ISPS Code, mandates that ships carry and maintain a functioning SSAS to transmit covert security alerts.

Question 36: Which regulation requires U.S.-flagged vessels and foreign vessels in U.S. waters to maintain a working Ship Security Alert System (SSAS)?

COLREGS Rule 35 and 33 CFR Part 83
MARPOL Annex VI and 33 CFR Part 160
ISM Code and 46 CFR Part 97
SOLAS Regulation XI-2/6 and 33 CFR Part 104 (Correct answer)

Correct answer: SOLAS Regulation XI-2/6 and 33 CFR Part 104

SOLAS XI-2/6 mandates SSAS for applicable vessels, and 33 CFR Part 104 implements this requirement for vessels subject to U.S. jurisdiction.

Question 37: Which document proves a ship's compliance with the ISPS Code?

International Ship Security Certificate (Correct answer)
Classification Certificate
Ship Registry Certificate
Cargo Manifest

Correct answer: International Ship Security Certificate

The International Ship Security Certificate (ISSC) is issued to a ship after it has been verified to comply with the requirements of the International Ship and Port Facility Security (ISPS) Code. This certificate serves as official proof that the ship's security arrangements, including its Ship Security Plan, meet international standards.

Question 38: Which document verifies compliance with the ISPS Code onboard?

International Ship Security Certificate (Correct answer)
Certificate of Registry
Cargo Manifest
Ship Safety Certificate

Correct answer: International Ship Security Certificate

The International Ship Security Certificate (ISSC) is the official document that verifies a ship's compliance with the ISPS Code. It is issued after a thorough verification that the ship has an approved Ship Security Plan (SSP) and that its security arrangements and procedures meet international standards. This certificate is mandatory for ships engaged in international voyages.

Question 39: Which body within IMO is primarily responsible for developing and maintaining the ISPS Code?

Facilitation Committee (FAL)
Technical Co-operation Committee (TCC)
Marine Environment Protection Committee (MEPC)
Maritime Safety Committee (MSC) (Correct answer)

Correct answer: Maritime Safety Committee (MSC)

The Maritime Safety Committee (MSC) of IMO is responsible for developing and maintaining maritime security measures including the ISPS Code.

Question 40: What is the correct procedure when security equipment is found to be defective during a routine inspection?

Wait until the next scheduled maintenance interval to address the deficiency
Remove the defective equipment from the Ship Security Plan to avoid non-compliance findings
Continue operations normally and note the deficiency in the next port state control report
Immediately report the deficiency to the master, record it, and implement compensatory measures until repaired (Correct answer)

Correct answer: Immediately report the deficiency to the master, record it, and implement compensatory measures until repaired

Defective security equipment must be immediately reported to the master, documented in the maintenance log, and compensatory measures put in place to maintain the required security level.

Question 41: When a heightened risk of a security incident exists but no specific threat has been identified, which security level is typically set?

Security Level 0
Security Level 2 (Correct answer)
Security Level 1
Security Level 3

Correct answer: Security Level 2

Security Level 2 is set when there is a heightened risk of a security incident, requiring additional protective measures beyond the normal baseline.

Question 42: In maritime security terminology, what does 'perimeter security' refer to aboard a vessel?

Security measures applied only to the ship's engine room boundaries
Controls and measures protecting the outer boundary of the ship, including hull, deck edges, and gangways (Correct answer)
The jurisdictional limit of the SSO's authority over shore personnel
The national boundary waters within which the ship is currently operating

Correct answer: Controls and measures protecting the outer boundary of the ship, including hull, deck edges, and gangways

Perimeter security encompasses all measures — physical barriers, surveillance, lighting, and patrols — that protect the outer boundary of the vessel from unauthorized access.

Question 43: What is a 'countermeasure' in the context of maritime security risk management?

A measure implemented to reduce the risk posed by identified threats and vulnerabilities (Correct answer)
A report filed after a security incident has occurred
A request for additional security personnel from the port authority
A legal action taken against a security offender

Correct answer: A measure implemented to reduce the risk posed by identified threats and vulnerabilities

A countermeasure is any security action or procedure implemented to reduce or mitigate the risk presented by identified threats and vulnerabilities.

Question 44: FAR 52.222-50 addresses combating trafficking in persons. For a Ship Security Officer's employer performing an overseas security contract, this clause requires:

Quarterly audits by the contracting officer's representative
Monthly reporting of all foreign national employees to the contracting officer
Background checks on all third-country national hires within 30 days
A compliance plan and prohibition on practices that facilitate human trafficking (Correct answer)

Correct answer: A compliance plan and prohibition on practices that facilitate human trafficking

FAR 52.222-50 requires contractors on overseas contracts over $500,000 to maintain a compliance plan prohibiting trafficking-related activities such as fraudulent recruitment or charging recruitment fees.

Question 45: When a conflict arises between standard procedures and a unique situation in Contract Types & Administration, what should a SSO professional prioritize?

The preference of the client or stakeholder
The most cost-effective solution available
Safety and ethical obligations while seeking expert consultation (Correct answer)
Strict adherence to written procedures without exception

Correct answer: Safety and ethical obligations while seeking expert consultation

Safety and ethics always take priority in Contract Types & Administration. When standard procedures don't adequately address a unique situation, consulting with experienced colleagues or supervisors ensures both safety and professional standards are maintained.

Question 46: Under FAR 25.101, a Buy American clause in a vessel security equipment contract generally requires that end products be manufactured in the U.S. with what minimum percentage of domestic component costs?

75%
55% (Correct answer)
25%
50%

Correct answer: 55%

Following 2022 regulatory updates, the Buy American Act threshold for domestic content in end products increased to 55%, with planned future increases, under FAR Part 25.

Question 47: A portable two-way radio used for security communications aboard a ship should primarily operate on which frequency band to ensure reliability in a maritime environment?

Shortwave HF band only
AM (amplitude modulation) band
UHF or VHF band (Correct answer)
Satellite frequency band

Correct answer: UHF or VHF band

UHF and VHF radios provide reliable short-range communications in the maritime environment and are the standard for shipboard security coordination.

Question 48: During source selection, an SSO receives an unsolicited offer from a new security equipment supplier with very attractive pricing. The FIRST step should be to:

Place an immediate trial order
Consult the company's purchasing department only
Verify the supplier's certifications and track record (Correct answer)
Decline without any consideration

Correct answer: Verify the supplier's certifications and track record

Verifying certifications and track record is the foundational step before engaging any new supplier, regardless of pricing attractiveness.

Question 49: How is 'risk' most accurately defined in maritime security?

The severity of damage caused by a security breach
The number of security vulnerabilities identified in an assessment
The probability that a security incident will occur
The combination of the likelihood of a threat and its potential consequences (Correct answer)

Correct answer: The combination of the likelihood of a threat and its potential consequences

Risk in maritime security is defined as the combination of the probability of a threat occurring and the severity of the consequences if it does.

Question 50: What information must be included in the pre-arrival notification a ship sends to a port?

Crew medical history and vaccination status
Current security level, last ten port calls, and any onboard security incidents (Correct answer)
Engine room watch schedule
Cargo weight and freight rates

Correct answer: Current security level, last ten port calls, and any onboard security incidents

Pre-arrival information under SOLAS XI-2/9 must include the ship's current security level, last ten port facilities visited, and any security incidents encountered.

Question 51: Which standard of practice is MOST important for ensuring quality in Performance Monitoring & QA?

Following evidence-based protocols while adapting to specific circumstances (Correct answer)
Strictly adhering to the same procedure in every situation
Minimizing documentation to focus on practical work
Using the most advanced technology available regardless of need

Correct answer: Following evidence-based protocols while adapting to specific circumstances

Evidence-based protocols provide a foundation of proven practices, but effective Ship Security Officer professionals must also adapt their approach based on specific circumstances and individual case needs within Performance Monitoring & QA.

Question 52: What is the purpose of a Declaration of Security (DoS)?

To certify that a ship's security plan has been approved
To authorize the embarkation of additional security personnel
To formally report a security incident to authorities
To document the security measures agreed between a ship and a port facility (Correct answer)

Correct answer: To document the security measures agreed between a ship and a port facility

A DoS documents the security responsibilities and specific measures that both the ship and port facility agree to implement during their interface.

Ship Security Officer (SSO) Certification Exam

This certification is for individuals designated to ensure the security of a ship, including implementing and maintaining the ship security plan, conducting security inspections, and coordinating with port facility security officers.

Questions

60 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds