SIA Security Guarding Top-Up / Refresher Award (SIA Licence-Linked, UK)

What is the primary meaning of the acronym 'ACT' in the context of UK counter-terrorism?

• AAction Counters Terrorism
• BActive Counter Terrorists
• CAlertness and Custody Training
• DAnti-Terrorist Crisis Team

Under the 'Run Hide Tell' guidance, what should you do with your mobile phone when hiding from an active attacker?

• AKeep it on ring so you can hear incoming police calls
• BSwitch it to silent mode and turn off vibrate
• CKeep it on vibrate so you are alerted quietly
• DTurn it off completely so it cannot be tracked by GPS

What is the purpose of the official ProtectUK platform?

• ATo book SIA license renewal exams directly
• BTo provide real-time counter-terrorism advice, guidance, and training to businesses and i…
• CTo check the criminal records of security applicants
• DTo track the GPS location of security guards in the UK

In the counter-terrorism assessment of suspicious items, what does the letter 'H' in the 'HOT' protocol stand for?

• AHidden
• BHazardous
• CHeavy
• DHandheld

In the counter-terrorism assessment of suspicious items, what does the letter 'O' in the 'HOT' protocol stand for?

• AObvious
• BObscure
• COwnerless
• DOily

In the counter-terrorism assessment of suspicious items, what does the letter 'T' in the 'HOT' protocol stand for?

• ATypical
• BTimed
• CTriggered
• DThreatening

What are the steps of the '4 Cs' protocol used when a suspicious item is confirmed?

• AContain, Cover, Call, Check
• BConfirm, Clear, Communicate, Control
• CCheck, Cordon, Contact, Cooperate
• DConfront, Capture, Clear, Calm

When calling 999 to report a suspected bomb, what is the minimum safe distance for using a mobile phone or radio?

• A5 metres
• B15 metres
• C50 metres
• D100 metres

What does the 'Tell' step in 'Run Hide Tell' primarily require you to do?

• ATell your colleagues about the attacker on social media
• BCall the police on 999 immediately when it is safe to do so
• CTell the attacker to stop their actions immediately
• DTell your supervisor at the next shift handover

Which of the following is the best definition of 'hostile reconnaissance'?

• AA police patrol checking security guards' licensing credentials
• BInformation gathering by individuals planning an attack on a target
• CAn unannounced fire drill conducted by building management
• DA security audit carried out by an external Approved Contractor

What is the name of the official mobile app that provides security officers in the UK with instant counter-terrorism guidance?

• ASIA Mobile App
• BACT App (ProtectUK)
• CAnti-Terror Alert App
• DUK Guardian App

If you observe a member of the public taking close-up photographs of security access codes on a door, what should you do?

• AIgnore them, as public areas are not restricted
• BDelete their photos directly from their phone
• CObserve their description and details, and report it immediately as suspected hostile rec…
• DConfront and physically arrest the person immediately

What is the recommended minimum cordon distance for a suspected small explosive device, such as a rucksack or briefcase?

• A15 metres
• B50 metres
• C100 metres
• D200 metres

What is the recommended minimum cordon distance for a suspected medium-sized explosive device, such as an abandoned car?

• A100 metres
• B200 metres
• C400 metres
• D500 metres

What is the recommended minimum cordon distance for a suspected large explosive device, such as an abandoned lorry or van?

• A200 metres
• B400 metres
• C600 metres
• D1000 metres

Which of the following is a potential visual indicator of a Vehicle-Borne Improvised Explosive Device (VBIED)?

• AA recently washed exterior
• BA heavily sagging suspension despite containing no visible passengers or heavy cargo
• CStandard commercial licensing decals
• DA clean dashboard without loose papers

Under the 'Control' step of the '4 Cs' protocol, what is the primary role of a security guard?

• ASearching the suspect package to locate the timer
• BSecuring the cordon boundaries and preventing unauthorized people from entering the dange…
• CInvestigating bystanders who may have left the item
• DTelling the media about the potential bomb location

When assessing a suspicious package using the 'HOT' protocol, what does a 'Typical' item refer to?

• AAn item that is brand-name and expensive
• BAn item that fits naturally into its surroundings, such as a lunchbox in a staff breakroom
• CAn item that has been wrapped in brown paper packaging
• DAn item that has a rectangular shape and standard weight

In the event of a marauding terrorist weapons attack, why is 'Running' preferred over 'Hiding' if a safe escape route exists?

• AIt allows security guards to chase and tackle the attacker
• BIt immediately increases the physical distance between you and the threat, removing you f…
• CHiding is illegal under UK health and safety laws
• DIt gives you a better view of the attacker for reporting

What is the phone number of the UK Anti-Terrorist Hotline for reporting non-emergency suspicious behaviour?

• A0800 789 321
• B0800 111 999
• C0800 555 111
• D0800 123 456

Which of the following is a key step when 'Hiding' from an active weapons attacker under 'Run Hide Tell' guidance?

• ALying flat in the middle of a corridor
• BLocking doors and barricading them with heavy furniture, staying away from windows
• CGathering in a large group near glass entranceways
• DShouting warnings to the attacker to stay away

If multiple people in a crowded lobby suddenly collapse with breathing difficulties and watering eyes, what type of attack should you suspect?

• AA bladed weapon assault
• BA Chemical, Biological, Radiological, or Nuclear (CBRN) incident
• CA standard Marauding Terrorist Attack (MTA)
• DA standard electrical power surge

What are the core steps of the 'Remove, Remove, Remove' protocol for public decontamination in a suspected chemical attack?

• ARemove suspects, Remove weapons, Remove witnesses
• BRemove yourself from the area, Remove outer clothing, Remove the substance from your skin
• CRemove panic, Remove cordons, Remove evidence
• DRemove ventilation, Remove doors, Remove windows

Which of the following is a physical sign that a delivered package might be a postal bomb?

• AThe package has a return address from a known supplier
• BThe package is marked 'Confidential' and has excessive postage stamps
• CThe package is lightweight and wrapped in white bubble wrap
• DThe package arrived via standard Royal Mail delivery

How does the 'See Check and Notify' (SCN) framework assist security guards in preventing terrorist attacks?

• AIt gives them legal authority to carry out body searches on public pavements
• BIt provides a structured way to identify hostile reconnaissance, check the activity safel…
• CIt replaces the need to call 999 in emergencies
• DIt provides instruction on disarming armed active shooters

When evacuating a building during a bomb threat, which of the following is the most important safety precaution?

• ADirecting people to congregate near the building's large glass windows
• BEnsuring everyone uses the lifts to evacuate faster
• CDirecting people along routes and assembly points that are well away from windows and gla…
• DTelling people to search their own rooms before exiting

If you observe someone repeatedly measuring distances with a laser rangefinder near a secure cash loading bay, how should this be classified?

• AHostile reconnaissance
• BUnauthorized surveying
• CHarmless behavior
• DA standard health and safety audit

What does 'Confirm' mean in the '4 Cs' protocol when assessing an unattended bag?

• AConfirm that the bag is expensive and report its brand
• BConfirm that the bag is genuinely suspicious, rather than simply lost or forgotten, by ap…
• CConfirm who owns the bag by opening it and checking the ID inside
• DConfirm with the police that they have a record of the bag's serial number

Why should security guards be aware of public transport schedules during an emergency evacuation of their site?

• ATo allow them to take the first train home and leave the site
• BTo coordinate safe dispersal routes and prevent evacuated crowds from causing dangerous c…
• CTo report delayed trains to the police
• DBecause transport schedules dictate when cordons must be removed

During an emergency, what is the best way to communicate instructions to a panicked crowd?

• AUse complex technical security terms to sound official
• BShout at individuals and force them to run
• CGive short, clear, direct instructions in a calm and authoritative tone
• DWhisper to individuals so as not to scare others

If a member of the public asks a security guard detailed questions about the site's police response times and CCTV blind spots, how should this be treated?

• AAs friendly customer interest
• BAs hostile reconnaissance
• CAs a standard vendor inquiry
• DAs a health and safety check

Under the '4 Cs' protocol, which of the following actions is strictly prohibited when verifying a suspicious package?

• ALooking for wires without touching the item
• BPicking up, shaking, or opening the package to see what is inside
• CCreating a cordon around the item
• DCalling your supervisor from a distance of 20 metres

When securing a cordon for a suspicious package, why must vehicle-mounted radios be kept at least 50 metres away, while hand-held radios only require 15 metres?

• AVehicle radios operate at much higher transmission power levels, increasing the risk of t…
• BVehicle radios run on different frequency bands that are more likely to match bomb receiv…
• CVehicle batteries can spark and cause secondary explosions
• DVehicle radios are older technology and lack shielding

What is the primary danger associated with a 'secondary device' in a terrorist attack?

• AIt is a backup bomb that triggers automatically if the first bomb fails
• BIt is deliberately placed to target first responders and evacuating crowds at the designa…
• CIt is a chemical bomb that releases toxic gas after the first blast
• DIt is designed to destroy security CCTV cameras to cover the attacker's getaway

During a suspected chemical (CBRN) attack inside a building, why is it critical to shut down the heating, ventilation, and air conditioning (HVAC) systems immediately?

• ATo prevent the chemical agent from causing a fire in the ventilation units
• BTo stop the forced air systems from circulating the toxic airborne agent throughout the e…
• CTo trigger the building's automated smoke extraction vents
• DTo save electricity in case emergency services cut power

When inspecting under a vehicle for suspected explosive devices (UVI), which of the following is the most critical area to check?

• AThe windscreen wiper mounts
• BThe exhaust tailpipe opening
• CThe wheel arches, drive shafts, and the area directly beneath the fuel tank using inspect…
• DThe air pressure in the spare tyre

If police are delayed and a crowd is attempting to breach your bomb cordon to retrieve personal property, what legal authority does a security guard have on public land?

• AThe same powers as a police officer to physically detain anyone crossing the line
• BNo special statutory powers on public land; they must rely on clear communication, warnin…
• CThe power to issue statutory fines to anyone ignoring the cordon
• DThe legal right to arrest them under common law trespass

In counter-terrorism planning, what is the key distinction between 'active' and 'passive' hostile reconnaissance?

• AActive involves physical actions at the site (e.g. testing doors or asking questions), wh…
• BActive is carried out by armed attackers, while passive is carried out by unarmed spotters
• CActive reconnaissance is illegal under the Terrorism Act 2000, while passive is fully leg…
• DActive requires a camera, while passive relies on memory only

What is a primary danger when selecting a brick wall as 'substantial cover' during a firearms attack?

• ABrick walls absorb heat and can cause burns
• BHigh-velocity rifle rounds can easily penetrate standard brick, and impacts can produce d…
• CBrick walls block emergency radio signals, preventing you from calling 999
• DBrick walls are classified as soft cover under ACT guidelines

If you discover a suspected bomb in a crowded shopping mall, which of the following describes the most secure evacuation method?

• ASounding the main fire alarm immediately to cause a fast run
• BUsing a phased evacuation via public address (PA) systems to direct people through swept,…
• CTelling the mall staff to scream 'bomb' to get people moving
• DKeeping the discovery completely secret and leaving the building first

Under the Health and Safety at Work Act 1974, who has a duty of care for safety at a workplace?

• AOnly the employer
• BOnly the employee
• CBoth the employer and the employee
• DOnly the local police

At what stage of a security shift should a Dynamic Risk Assessment (DRA) begin?

• AOnly after a physical fight starts
• BContinuously throughout the shift, beginning as soon as you arrive on site
• CAt the end of the shift when writing the report
• DOnly when requested by the control room

Which of the following represents a major hazard for a security guard working alone on a night shift?

• AA delay in receiving shift handover notes
• BLone working, which reduces immediate access to backup and emergency assistance
• CUsing a digital pocket notebook instead of paper
• DWearing high-visibility clothing in well-lit areas

Can a hand-held metal detector wand detect non-metallic hazards like plastic knives or ceramic blades?

• AYes, if they are hidden close to the skin
• BNo, wands only detect metallic objects
• CYes, wands use thermal imaging to detect all objects
• DOnly if the wand's sensitivity is set to maximum

When activating a Body-Worn Video (BWV) camera, what is the best practice regarding the subject of recording?

• ARecord secretly without saying anything
• BVerbally announce to the individual that they are being recorded on audio and video
• COnly turn it on after the incident is completely over
• DDelete the recording immediately if the subject asks you to

What is the primary objective of the 'Ask for Angela' safety initiative in licensed venues?

• ATo request a free drink from the bar staff
• BTo allow customers who feel unsafe or vulnerable to discreetly signal staff for help
• CTo report a lost item to the security team
• DTo book a taxi using the venue's account

In conflict management, what is the term used to describe the safe distance you should maintain from an aggressive person?

• ASafe zone
• BReaction gap
• CCordon area
• DTactical buffer

Which of the following body language signals is most effective at de-escalating a tense situation?

• ACrossing your arms tightly across your chest
• BMaintaining an open posture with palms visible and relaxed shoulders
• CPointing your finger directly at the person's face
• DStaring intensely into their eyes without blinking