10 exam-style questions with answers and explanations, straight from our 1,030-question bank. Tap an answer to check yourself. When you're ready, take the scored version in the free practice test.
These 10 free CCBSO questions are organized by exam domain, so you can see how each part of the Certified Community Bank Security Officer blueprint is tested. Reveal the answer and explanation under each question.
Domain 1: Understand what is required of the security officer with regulation H, the supervision of staff, and the training requirements for staff.
Question 1
Forty-five days after a state bank joins the Federal Reserve System, its board has not designated a security officer. Directors propose making the appointment when the written security program is approved on day 150. They cite Regulation H's 180-day provision. Where does their interpretation go wrong?
Show answer & explanation
Correct answer: D - Designation was required upon membership; the written program must be developed within a reasonable time, no later than 180 days.
Domain 2: Sharpen your observation skills and detect potential threats in events happening around you.
Question 2
"Your alarm needs an urgent update," says a visitor wearing the contracted vendor's photo badge. He asks to enter the restricted equipment room and offers to call his dispatcher from his own phone. No visit is scheduled. How should the receptionist authenticate this visit?
Show answer & explanation
Correct answer: C - Ask the visitor to wait in the public area while verifying identity and assignment through the bank's established vendor contact.
Domain 4: Identify the warning signs a person might show when embezzling.
Question 3
A vault shortage reported at opening has disappeared from the afternoon reconciliation. The custodian says the matter is resolved. A reviewer must distinguish an explanation for the discrepancy from concealment of missing cash. Which finding most strongly supports concealment?
Show answer & explanation
Correct answer: A - A transfer entry clears the shortage, but the supposed receiving branch confirms that no transfer occurred.
Domain 6: Outline the key steps to take in preparing your bank and staff in the event of a robbery.
Question 4
With a handgun visible, a robber tells a teller, "Empty the drawer. Keep your hands where I can see them." The duress button is below the counter and cannot be reached without a conspicuous movement. There is no safe escape route. The teller's immediate priority is to:
Show answer & explanation
Correct answer: C - Surrender the cash with predictable movements rather than risk an unsafe alarm activation.
Domain 7: Identify physical security enhancements you can make to improve security at your bank.
Question 5
Ornamental screening and mature shrubs conceal the approach to a branch's employee entrance from occupied offices. The entrance already has effective access control. The security officer recommends natural surveillance as an additional protection. Which proposal implements that recommendation?
Show answer & explanation
Correct answer: A - Reconfigure the screening and shrubs to expose the approach to staff view while keeping the entrance restricted.
Domain 10: Understand the components of conducting an interview after an incident.
Question 6
Before speaking with coworkers, a robbery witness described "a dark car." In a later interview, she calls it "a blue hatchback." The interviewer has not suggested a color or body style. Which follow-up would best separate her own recollection from information acquired afterward?
Show answer & explanation
Correct answer: D - "What did you see yourself, and what did you learn later from other people?"
Domain 11: Institute effective security reporting to your board.
Question 7
After branch consolidation, a bank recorded 18 security incidents over 6,000 branch-operating days; the prior year had 24 incidents over 12,000 branch-operating days. One branch operating for one day contributes one branch-operating day. Incident definitions and reporting practices did not change. The draft board report says, "Incidents fell 25%, demonstrating improved security." Which revision is justified?
Show answer & explanation
Correct answer: B - Report an increase from 2 to 3 incidents per 1,000 branch-operating days; the lower count alone does not establish improvement.
Domain 12: Identify specific records to retain for effective security management.
Question 8
A surveillance system routinely overwrites footage after 30 days. A state member bank has identified a clip and associated transaction records as supporting documentation for a filed suspicious activity report. No legal hold or longer retention requirement applies. Which retention instruction is correct?
Show answer & explanation
Correct answer: D - Preserve the supporting clip and transaction records for at least five years from the SAR filing date.
Domain 13: Recognize the security gaps when working with cash intensive businesses and onboarding casinos, private ATM operators, or marijuana related businesses.
Question 9
A private ATM operator provides only balance inquiries and withdrawals from customers' existing bank accounts. The bank has verified the operator's ownership and ATM locations. Replenishment cash comes exclusively from the operator's account at this bank, and loading records reconcile with withdrawals and network settlements. No unexplained activity has emerged. Which recommendation follows from these findings?
Show answer & explanation
Correct answer: B - Continue the relationship with risk-based monitoring of replenishment cash, loading records, and network settlements.
Question 10
A casino that is not exempt from the bank's currency transaction reporting deposits $7,200 in cash at one branch and $4,900 in cash at another branch of the same bank on the same business day. It also withdraws $6,000 in cash. The bank knows all three transactions are for this casino. How should the bank apply the CTR aggregation requirement?
Show answer & explanation
Correct answer: C - Aggregate $12,100 in cash received for reporting; assess the $6,000 cash withdrawal separately rather than netting the two directions.