A network administrator performs a security audit on a remote branch's main Intermediate Distribution Frame (IDF) closet. The auditor discovers two primary compliance issues: unbadged visitors routinely tailgate behind employees through the entrance door, and staff members frequently leave the access door propped open during work hours due to a lack of security protocol knowledge. Which pair of measures—consisting of one physical access control and one security program element—most effectively remediates these specific vulnerabilities?
- Installing a mantrap vestibule with interlocking doors and delivering targeted user security awareness training regarding physical access policies.Answer
- BConfiguring TACACS+ server authentication for network devices and implementing RADIUS for door controller authorization logging.
- CEnabling sticky MAC port security across switch access ports and saving the running configuration to NVRAM.
- DApplying an extended IPv4 Access Control List (ACL) to block unauthorized subnets from reaching the physical door access controller.
Answer
Installing a mantrap vestibule with interlocking doors and delivering targeted user security awareness training regarding physical access policies.
The correct response properly pairs a physical access control with a security program element. A mantrap utilizes interlocking doors to physically restrict access so that only one authenticated person can enter at a time, directly preventing tailgating. Security awareness training is a critical security program element that educates employees on the risks of propping open sensitive facility doors and enforces organizational security policies.
Step-by-Step Solution
Key Concept
Physical Access Controls vs. Security Program Elements