Examkin

Question

Difficulty: Very hardSecurity Program Elements and Physical Access Controls

During a physical security compliance evaluation of a remote edge facility, an auditor notes three vulnerability findings: unauthorized personnel entering the main telecommunications enclosure by following authorized employees (tailgating), unmonitored physical patch panel connections in public hallways, and employee badges left unattended at desktop terminals. To address these vulnerabilities, the security team must implement controls classified specifically under physical access control mechanisms and administrative security program elements. Which combination of measures correctly pairs a physical access control with an administrative security program element to directly address these findings?

  1. Installing mantrap vestibules with biometric authentication at enclosure entry points, and mandating recurring security awareness training alongside clear desk and badge policies.Answer
  2. B
    Applying 802.1X port-based authentication on switch access interfaces, and configuring centralized AAA authorization policies on a RADIUS server.
  3. C
    Deploying dynamic ARP inspection on access switches to protect patch links, and enforcing strict IEEE 802.1Q native VLAN tagging across all interconnecting trunks.
  4. D
    Applying extended IPv4 access control lists on default gateways, and creating sticky port security entries to bind learned MAC addresses to interface configurations.

Answer

Installing mantrap vestibules with biometric authentication at enclosure entry points, and mandating recurring security awareness training alongside clear desk and badge policies.
The correct response accurately identifies physical access controls (mantrap vestibules and biometric access systems, which physically block unauthorized piggybacking/tailgating) and administrative security program elements (security awareness training and physical badge management policies, which establish governance and educate users on physical security standards).

Step-by-Step Solution

1
Analyze the audit findings and categorize required remediation domains.
Findings involve physical perimeter breaches (tailgating), exposed wiring closet access, and poor employee security habits.
Security measures fall into three primary categories: physical controls, technical/logical controls, and administrative/program controls.
2
Evaluate candidate controls for physical access control classification.
Mantrap vestibules, biometric readers, locks, and physical barriers directly restrict physical access to hardware enclosures.
Physical access controls prevent unauthorized physical contact with network assets and prevent physical intrusion techniques like tailgating.
3
Evaluate candidate controls for administrative security program element classification.
Security awareness training programs, badge handling procedures, and clear desk policies represent organizational policies and human governance.
Administrative controls focus on human policy enforcement, compliance, awareness campaigns, and operational guidelines.

Key Concept

Physical Access Controls vs. Administrative Security Program Elements
Estimated Time:1m 30s
Rate this question

Topics

Security Program Elements and Physical Access Controls

More questions from this topic