Question

Difficulty: MediumSecurity Program Elements and Physical Access Controls

An organization is designing the physical security and security program elements for a newly constructed enterprise facility housing core network hardware and server racks. Which two measures represent physical access controls or physical security program elements? (Select two.)

  1. Installing biometric door scanners and proximity card readers at all entrances to the server roomAnswer
  2. B
    Configuring TACACS+ server authentication for administrative access to switch command-line interfaces
  3. Deploying security guards and automated physical keycard locks on rack enclosures containing network hardwareAnswer
  4. D
    Applying extended IPv4 access control lists on ingress routers to filter unauthorized protocol port traffic
  5. E
    Enabling Layer 2 port security with sticky MAC learning on access switch ports connected to user workstations

Answer

The two physical access controls are installing biometric scanners with proximity card readers at server room entrances, and deploying security guards alongside lockable equipment rack enclosures.
Physical access controls prevent unauthorized physical entry to infrastructure assets. Biometric scanners combined with proximity readers protect room perimeters, while security guards and lockable rack cabinets protect the physical hardware directly from unauthorized physical contact or theft.

Step-by-Step Solution

1
Differentiate between physical security controls and technical/logical security controls.
Physical controls manage tangible entry, environmental protection, and direct physical access to hardware (e.g., doors, locks, guards, biometrics, video surveillance). Logical/technical controls enforce access via software, protocols, or network configuration (e.g., ACLs, AAA/TACACS+, Port Security).
Security program elements explicitly separate physical safeguards from technical software safeguards.
2
Evaluate option choices to select physical security elements.
Biometric door access with card readers restricts physical human movement into the facility. Guards and lockable rack cabinets restrict physical human tampering with server and network gear.
Both represent physical access controls essential for defense-in-depth in enterprise physical environments.

Key Concept

Physical Access Controls and Security Program Safeguards
Rate this question