Examkin

Security Program Elements and Physical Access Controls

19 questions

All types19Multiple choice9Multiple select5Matching5
Question 1Question →

Which physical security control uses a set of two interlocking doors to directly prevent unauthorized individuals from tailgating into a secure data center facility?

Show answer & explanation

Answer: A mantrap vestibule

Answer

A mantrap vestibule is the correct physical security control designed specifically to prevent tailgating by utilizing interlocking doors.
A mantrap vestibule features two interlocking doors where only one door can be open at a time. Once a user scans their credentials to enter the first door, that door must close fully before the second door unlocks, isolating individuals and preventing unauthorized tailgating into restricted areas.

Step-by-Step Solution

1
Identify the primary threat described in the scenario.
The target threat is tailgating (piggybacking), where an unauthorized individual physically follows an authorized person through a secure doorway.
Preventing tailgating requires physical barriers capable of enforcing single-person entry verification.
2
Differentiate physical security controls from logical network security controls.
A mantrap vestibule physically holds an individual between two interlocking doors until identity/access is verified. Logical controls (ACLs, AAA, Port Security) operate entirely inside network software/hardware interfaces.
Only physical access controls like mantraps physically constrain human movement at facility entrances.

Key Concept

Physical Access Controls - Mantraps
Question 2Question →

During a physical security compliance evaluation of a remote edge facility, an auditor notes three vulnerability findings: unauthorized personnel entering the main telecommunications enclosure by following authorized employees (tailgating), unmonitored physical patch panel connections in public hallways, and employee badges left unattended at desktop terminals. To address these vulnerabilities, the security team must implement controls classified specifically under physical access control mechanisms and administrative security program elements. Which combination of measures correctly pairs a physical access control with an administrative security program element to directly address these findings?

Show answer & explanation

Answer: Installing mantrap vestibules with biometric authentication at enclosure entry points, and mandating recurring security awareness training alongside clear desk and badge policies.

Answer

Installing mantrap vestibules with biometric authentication at enclosure entry points, and mandating recurring security awareness training alongside clear desk and badge policies.
The correct response accurately identifies physical access controls (mantrap vestibules and biometric access systems, which physically block unauthorized piggybacking/tailgating) and administrative security program elements (security awareness training and physical badge management policies, which establish governance and educate users on physical security standards).

Step-by-Step Solution

1
Analyze the audit findings and categorize required remediation domains.
Findings involve physical perimeter breaches (tailgating), exposed wiring closet access, and poor employee security habits.
Security measures fall into three primary categories: physical controls, technical/logical controls, and administrative/program controls.
2
Evaluate candidate controls for physical access control classification.
Mantrap vestibules, biometric readers, locks, and physical barriers directly restrict physical access to hardware enclosures.
Physical access controls prevent unauthorized physical contact with network assets and prevent physical intrusion techniques like tailgating.
3
Evaluate candidate controls for administrative security program element classification.
Security awareness training programs, badge handling procedures, and clear desk policies represent organizational policies and human governance.
Administrative controls focus on human policy enforcement, compliance, awareness campaigns, and operational guidelines.

Key Concept

Physical Access Controls vs. Administrative Security Program Elements
Estimated Time:1m 30s
Question 3Question →

An enterprise network security team is evaluating its defense-in-depth posture across a multi-tenant facility hosting critical infrastructure. How should each specific security measure be matched to its primary security program element or physical control category?

Click a left item, then click its matching right item

Items

Mandatory quarterly simulated phishing exercises accompanied by automated user reporting drills
Biometric fingerprint authentication paired with anti-passback electronic turnstiles at facility entry points
Formal security incident escalation procedures and documented employee offboarding credential revocation policies
Locking equipment rack enclosures equipped with micro-switch chassis intrusion sensors connected to an alarm panel

Matches

Show answer & explanation

Answer

The correct matches align each operational security initiative with its designated classification: (1) Simulated phishing and user reporting drills match the User Security Awareness Program; (2) Biometric turnstiles match Physical Access Control Mechanisms; (3) Escalation workflows and offboarding policies match Administrative Security Governance; (4) Locked equipment cabinets with tamper sensors match Physical Asset Protection & Tamper Monitoring.
Each security measure correctly maps to its standard functional category within Cisco CCNA security program fundamentals: phishing simulations develop human security awareness; biometric turnstiles control physical perimeter entry; incident response and offboarding rules provide administrative governance; and locked cabinets with intrusion alarms provide physical protection for hardware assets.

Step-by-Step Solution

1
Analyze the operational focus of each security measure on the left to determine whether it addresses human behavior, physical entry, administrative policy, or asset containment.
Identified four distinct security domains: human risk reduction, perimeter access restriction, policy governance, and equipment-level physical protection.
Classifying security elements requires differentiating administrative policies, physical barriers, physical asset protection, and educational programs.
2
Associate simulated phishing drills with human defense mechanisms.
Pairs with User Security Awareness Program.
Phishing simulations educate staff and evaluate their ability to spot malicious communications, strengthening the human security perimeter.
3
Associate biometric turnstiles with physical facility entry control.
Pairs with Physical Access Control Mechanism.
Biometric scanners and physical turnstiles physically impede unauthorized entry into building zones.
4
Associate incident escalation guidelines and offboarding revocation procedures with operational governance.
Pairs with Administrative Security Governance.
Administrative controls consist of written policies, standard operating procedures, and management guidelines that govern organizational actions.
5
Associate locking cabinets and chassis tamper switches with hardware protection.
Pairs with Physical Asset Protection & Tamper Monitoring.
Locking racks and tamper sensors physically secure installed networking hardware against unauthorized physical tampering or theft.

Key Concept

Classification of Security Program Elements and Physical Access Controls
Question 4Question →

A network security engineer is reviewing the defense-in-depth posture for a sensitive financial processing facility. The engineer needs to implement controls that belong specifically to the physical security domain or administrative security program elements, distinguishing them from technical and logical network mechanisms. Which two options represent physical access controls or security program elements? (Select two.)

Select all that apply

Show answer & explanation

Answer: Installing a biometric mantrap vestibule at the data center entrance to prevent unauthorized entry and tailgating; Establishing mandatory user security awareness training focused on identifying social engineering and phishing tactics

Answer

Installing biometric mantrap vestibules and establishing user security awareness training programs are the two measures that fall under physical access controls and security program elements.
Physical security controls encompass physical barriers, biometric readers, badge access systems, mantrap vestibules, and surveillance designed to prevent unauthorized physical access to computing hardware. Security program elements include human-centric initiatives such as user security awareness training, security policies, and incident handling protocols. The mantrap vestibule directly secures physical entry, while security awareness training addresses user behavior and social engineering resistance.

Step-by-Step Solution

1
Classify the security requirements
Identify physical security mechanisms (physical barriers/locks/biometrics) and security program elements (policies/awareness/training).
Security controls are categorized into administrative/programmatic, physical, and technical/logical domains.
2
Evaluate the physical control options
Biometric mantrap vestibules physically restrict access to facilities and prevent tailgating, qualifying directly as physical access controls.
Physical controls govern physical entry into facility perimeters, server rooms, and network closets.
3
Evaluate the security program element options
Mandatory security awareness training educates personnel on human threat vectors, qualifying directly as a security program element.
Security program elements include administrative policies, security training, incident response plans, and compliance frameworks.
4
Differentiate technical controls from physical/programmatic controls
TACACS+ AAA authentication, switch port security, and router ACLs are technical (logical) security mechanisms operating on network hardware and protocols.
Technical controls use software and hardware logic to enforce security policies on data traffic and device administration.

Key Concept

Classification of Security Control Types (Physical vs. Programmatic/Administrative vs. Technical/Logical)
Estimated Time:1m 30s
Question 5Question →

An organization is designing the physical security and security program elements for a newly constructed enterprise facility housing core network hardware and server racks. Which two measures represent physical access controls or physical security program elements? (Select two.)

Select all that apply

Show answer & explanation

Answer: Installing biometric door scanners and proximity card readers at all entrances to the server room; Deploying security guards and automated physical keycard locks on rack enclosures containing network hardware

Answer

The two physical access controls are installing biometric scanners with proximity card readers at server room entrances, and deploying security guards alongside lockable equipment rack enclosures.
Physical access controls prevent unauthorized physical entry to infrastructure assets. Biometric scanners combined with proximity readers protect room perimeters, while security guards and lockable rack cabinets protect the physical hardware directly from unauthorized physical contact or theft.

Step-by-Step Solution

1
Differentiate between physical security controls and technical/logical security controls.
Physical controls manage tangible entry, environmental protection, and direct physical access to hardware (e.g., doors, locks, guards, biometrics, video surveillance). Logical/technical controls enforce access via software, protocols, or network configuration (e.g., ACLs, AAA/TACACS+, Port Security).
Security program elements explicitly separate physical safeguards from technical software safeguards.
2
Evaluate option choices to select physical security elements.
Biometric door access with card readers restricts physical human movement into the facility. Guards and lockable rack cabinets restrict physical human tampering with server and network gear.
Both represent physical access controls essential for defense-in-depth in enterprise physical environments.

Key Concept

Physical Access Controls and Security Program Safeguards
Question 6Question →

A network manager is implementing physical security controls at a branch office data room following an incident where an unauthorized visitor entered by closely following an authorized employee through a single access door. Which physical control specifically mitigates tailgating by utilizing a dual-door vestibule where the second door opens only after the first door closes and authentication is validated?

Show answer & explanation

Answer: A mantrap system with interlocked access doors

Answer

A mantrap system with interlocked access doors is the physical control specifically designed to prevent tailgating.
A mantrap provides a physical enclosure with two interlocked doors. Entering requires passing through the first door, waiting for it to fully close, and authenticating before the second door unlocks, making tailgating physically impossible.

Step-by-Step Solution

1
Analyze the physical security vulnerability described in the scenario.
The issue is tailgating (piggybacking), where an unauthorized individual physically follows an authorized individual through a single doorway.
Single door electronic access control systems cannot physically prevent a second person from walking through an open door behind an authorized user.
2
Evaluate the mechanism of a mantrap (physical vestibule).
A mantrap consists of two sets of interlocking doors. The first door opens with credentials, allows one person inside the small enclosed area, closes, and locks before the second door permits entry.
This physical structure ensures only one validated person is admitted at a time, effectively stopping tailgating attempts.

Key Concept

Physical Access Control Measures and Mantrap Mechanisms
Question 7Question →

An organization is upgrading the physical security posture of its main data center facility. The security team must implement controls that explicitly address tailgating mitigation at perimeter entryways and provide environmental surveillance inside server rooms. Which two physical security controls directly fulfill these specific requirements? (Select two.)

Select all that apply

Show answer & explanation

Answer: Mantrap portal with interlocking doors; Closed-circuit television (CCTV) cameras

Answer

The correct controls are implementing a mantrap portal with interlocking doors to prevent tailgating and installing closed-circuit television (CCTV) cameras for interior server room surveillance.
A mantrap portal uses two interlocking doors to ensure only one authenticated person enters at a time, directly preventing tailgating. Closed-circuit television (CCTV) cameras provide visual monitoring and surveillance inside secure areas such as server rooms.

Step-by-Step Solution

1
Analyze the scenario requirements
Identified two specific physical security needs: mitigating tailgating at perimeter entryways and establishing environmental/visual surveillance inside server rooms.
Physical access control measures fall into categories like physical barriers, biometrics, surveillance, and access logging.
2
Evaluate perimeter control options for tailgating mitigation
The mantrap portal enforces single-person entry via interlocked doors, directly preventing tailgating.
Mantraps force a verification cycle before allowing entry through the secondary interior door.
3
Evaluate surveillance options for server room interiors
CCTV camera deployment provides active visual monitoring and recorded audit trails of physical movement.
Surveillance systems ensure accountability and visibility inside critical data center rooms.

Key Concept

Physical Access Controls vs. Technical/Administrative Controls
Question 8Question →

During a security assessment of a financial institution, a network administrator reviews the measures implemented to protect network infrastructure. The measures include installing biometric door locks on the main data center, deploying TACACS+ for switch administration authentication, implementing Port Security on access switches, and conducting quarterly user security awareness campaigns. Which of these measures is classified specifically as a physical access control?

Show answer & explanation

Answer: Installing biometric door locks on the main data center entry

Answer

Installing biometric door locks on the main data center entry
Installing biometric door locks directly controls physical access to the building and server room facilities housing network devices. Physical security controls include physical barriers, door locks, mantraps, security guards, and surveillance cameras that prevent unauthorized physical entry.

Step-by-Step Solution

1
Categorize each listed security measure into physical, technical/logical, or administrative program elements.
Biometric door locks limit physical proximity to hardware. TACACS+ and Port Security manage network interface access electronically. Security awareness training educates personnel.
Security controls are broadly classified into physical controls, technical controls, and administrative/policy elements.
2
Identify which measure specifically restricts physical access to network equipment.
Biometric door locks prevent unauthorized individuals from physically entering the room containing servers and network devices.
Physical access controls prevent physical touch, intrusion, or theft of physical IT assets.

Key Concept

Classification of Security Controls (Physical Access Controls vs. Technical Access Controls and Security Program Elements)
Question 9Question →

An enterprise network operations center is aligning its infrastructure security framework with Cisco security baseline recommendations. Match each security program element or access control type on the left to its corresponding operational implementation on the right.

Click a left item, then click its matching right item

Items

Physical Access Control
Security Awareness Training
Incident Response Plan
Administrative Policy Control

Matches

Show answer & explanation

Answer

Physical Access Control pairs with biometric scanners and mantrap portals; Security Awareness Training pairs with user education on phishing and tailgating; Incident Response Plan pairs with structured escalation workflows and containment procedures; Administrative Policy Control pairs with corporate documentation establishing acceptable use policies.
Physical access control directly limits physical proximity to network infrastructure using devices like mantrap portals and biometrics. Security awareness training educates users on recognizing threats like tailgating and phishing. Incident response plans outline emergency response steps following a breach. Administrative controls establish corporate rules, governance, and written security guidelines.

Step-by-Step Solution

1
Identify physical security measures.
Biometric readers, mantraps, locks, and badges directly restrict physical access to facilities.
Physical access control measures deal directly with spatial access to facilities and network hardware.
2
Differentiate human-focused educational controls from administrative rules.
Training sessions target user behavior (phishing, tailgating awareness), whereas administrative policies set the formal written rules (acceptable use).
User training is an operational program element, while governance rules represent administrative controls.
3
Categorize reactive security procedures.
Escalation workflows and containment procedures belong to incident management.
Incident response plans guide organizational actions during and after a security event.

Key Concept

Classification of Enterprise Security Program Elements and Controls
Question 10Question →

An enterprise organization is establishing physical security measures to protect its central data center network hardware against unauthorized physical intrusion. Which TWO physical access controls should the network security team implement? (Select TWO.)

Select all that apply

Show answer & explanation

Answer: Biometric scanners installed at server room entrance doors; Mantrap vestibules with interlocking doors at facility entry points

Answer

Biometric scanners installed at entrance doors and mantrap vestibules with interlocking doors are valid physical access controls.
Physical access controls specifically restrict human physical entry into secure areas containing critical networking hardware. Biometric scanners verify individual physiological traits (such as fingerprint or iris patterns) at door access points, while mantrap vestibules utilize dual interlocking doors to prevent piggybacking or tailgating into data center facilities.

Step-by-Step Solution

1
Distinguish physical security controls from logical or administrative controls.
Physical controls protect tangible assets, facilities, and physical equipment from physical access.
Security controls are categorized by the domain they secure (physical vs technical/logical).
2
Evaluate each choice against physical security functionality.
Biometric locks authenticate physical presence, and mantraps physically regulate physical passage into data centers.
Both measures physically prevent unauthorized humans from entering secure equipment areas.

Key Concept

Physical Access Controls
Question 11Question →

A network administrator needs to prevent unauthorized individuals from physically entering a wiring closet containing core network switches and patch panels. Which mechanism directly serves as a physical access control for this facility?

Show answer & explanation

Answer: Smart card proximity reader paired with an electronic door latch

Answer

The smart card proximity reader paired with an electronic door latch is a physical access control mechanism.
Physical access controls are measures taken to prevent unauthorized personnel from gaining physical proximity or entry to network infrastructure. A smart card proximity reader paired with an electronic door latch physically blocks unauthorized individuals from entering the wiring closet.

Step-by-Step Solution

1
Identify the security domain required by the scenario
The requirement focuses on preventing physical entrance to a telecommunications room containing physical hardware.
Physical access control measures guard physical assets, facilities, and hardware against unauthorized human entry.
2
Differentiate physical controls from technical/logical controls
Smart card door readers, biometric scanners, physical locks, mantraps, and security guards are physical access controls. ACLs, TACACS+, and port security are technical network controls.
Technical controls govern logical data pathways and device authentication, while physical controls restrict tangible movement and physical interaction.

Key Concept

Physical Access Control vs. Technical Access Control
Question 12Question →

Security controls in an enterprise network fall into physical access controls, user security awareness elements, or administrative policies. Which of the following correctly matches each security control to its corresponding security program element or physical control function?

Click a left item, then click its matching right item

Items

Mantrap vestibule with interlocking doors
Simulated phishing exercises and user training
Formal incident response plan

Matches

Show answer & explanation

Answer

Mantrap vestibules correspond to physical access control preventing tailgating; simulated phishing and user training correspond to human-focused security awareness against social engineering; formal incident response plans correspond to administrative policy elements for breach mitigation.
Each item maps directly to its core function: mantraps physically control facility access to stop tailgating; phishing campaigns build human security awareness against social engineering; and incident response plans provide administrative governance for managing security breaches.

Step-by-Step Solution

1
Analyze the function of the mantrap vestibule control.
Identified as a physical barrier preventing piggybacking or tailgating into restricted areas.
Physical access controls regulate physical entry to server rooms and data centers.
2
Analyze the function of user training and phishing simulation.
Identified as a security program element aimed at personnel awareness.
User awareness programs mitigate social engineering risks by training humans.
3
Analyze the function of an incident response plan.
Identified as an administrative policy defining organizational response procedures.
Administrative controls consist of policies, governance frameworks, and operational guidelines.

Key Concept

Classification of physical access controls, security awareness elements, and administrative security policies.
Question 13Question →

A network administrator performs a security audit on a remote branch's main Intermediate Distribution Frame (IDF) closet. The auditor discovers two primary compliance issues: unbadged visitors routinely tailgate behind employees through the entrance door, and staff members frequently leave the access door propped open during work hours due to a lack of security protocol knowledge. Which pair of measures—consisting of one physical access control and one security program element—most effectively remediates these specific vulnerabilities?

Show answer & explanation

Answer: Installing a mantrap vestibule with interlocking doors and delivering targeted user security awareness training regarding physical access policies.

Answer

Installing a mantrap vestibule with interlocking doors and delivering targeted user security awareness training regarding physical access policies.
The correct response properly pairs a physical access control with a security program element. A mantrap utilizes interlocking doors to physically restrict access so that only one authenticated person can enter at a time, directly preventing tailgating. Security awareness training is a critical security program element that educates employees on the risks of propping open sensitive facility doors and enforces organizational security policies.

Step-by-Step Solution

1
Analyze the physical tailgating vulnerability.
Identified that tailgating requires a physical barrier control that physically restricts door throughput to one validated individual at a time.
Single-door badge scanners allow unauthorized individuals to follow authorized personnel.
2
Evaluate physical control solutions.
A mantrap (interlocking door system) physically enforces single-entry validation and prevents unauthorized physical tailgating.
Mantraps lock the outer door until the inner door is secured and authentication is re-verified.
3
Analyze human behavioral compliance (propping doors open).
Identified that propping doors open stems from user behavior and lack of policy adherence.
Technical controls cannot prevent a physical door from being mechanically propped open by staff.
4
Select the corresponding security program element.
User security awareness training directly educates employees on security risks, physical access responsibilities, and policy compliance.
Security awareness programs foster proper security posture and administrative policy compliance.

Key Concept

Physical Access Controls vs. Security Program Elements
Question 14Question →

Match each enterprise security initiative to the corresponding element classification within an overall enterprise security framework.

Click a left item, then click its matching right item

Items

Mandatory annual workforce training covering social engineering tactics, mobile device security, and clean desk practices.
Installation of interlocked double-door mantrap vestibules and biometric readers at server room entry points.
Establishment of an Incident Response Plan (IRP) detailing notification hierarchies, reporting procedures, and post-event audits.
Enforcement of 802.1X port-based authentication with dynamic VLAN assignment on access switches.

Matches

Show answer & explanation

Answer

Workforce education aligns with User Security Awareness; Mantraps and biometric access align with Physical Access Control; Incident response planning aligns with Administrative Policy; 802.1X network access control aligns with Technical/Logical Access Control.
Each security initiative maps precisely to its functional classification: regular employee training addresses user security awareness, physical barriers like mantraps provide physical access control, incident management policies establish administrative governance, and 802.1X network access protocol provides technical access control.

Step-by-Step Solution

1
Analyze human-focused education initiatives.
Identify that employee training on social engineering and security practices builds the human defense layer (User Security Awareness).
Security awareness focuses on human behaviors and risk reduction through training.
2
Evaluate tangible facility barriers and hardware entry controls.
Classify physical vestibules (mantraps) and biometric locks as Physical Access Control mechanisms.
Physical security controls restrict direct physical exposure to hardware and network facilities.
3
Review governance and operational framework documentation.
Map incident response policies, guidelines, and management escalation rules to Administrative Policy and Governance.
Administrative controls define organizational rules, emergency procedures, and operational expectations.
4
Distinguish technical/logical security configurations from physical/administrative elements.
Map port-based network authentication (802.1X) to Technical/Logical Access Control.
Software and protocol-level mechanisms enforcing network boundary security are technical controls.

Key Concept

Distinction among Security Program Elements (Physical Access Controls, User Security Awareness, Administrative Policies, and Technical Controls)
Estimated Time:2m 0s
Question 15Question →

An organization is updating its enterprise security program policy for network edge enclosures located in multi-tenant facilities. The Chief Information Security Officer (CISO) requires a security architecture that combines an administrative security program element with a physical access control mechanism to prevent unauthorized physical hardware tampering by facility personnel. Which set of measures correctly pairs an administrative security program element with a physical access control to fulfill this mandate?

Show answer & explanation

Answer: Establishing a formal access authorization policy requiring pre-approved visitor lists and badge verification, paired with installing chassis intrusion sensors and lockable rack enclosures.

Answer

Establishing a formal access authorization policy requiring pre-approved visitor lists and badge verification, paired with installing chassis intrusion sensors and lockable rack enclosures.
Developing a formal access authorization policy with visitor verification represents an administrative control (governance, policy, and procedure). Installing lockable enclosures with chassis intrusion detection represents a physical access control that directly prevents and monitors physical contact with hardware components.

Step-by-Step Solution

1
Identify the requested security control categories from the problem statement.
The scenario specifically asks for one administrative security program element paired with one physical access control mechanism.
Security programs classify controls into administrative (policies, procedures, personnel controls), physical (barriers, locks, environmental sensors), and technical/logical (passwords, ACLs, encryption).
2
Analyze each proposed pairing to classify its control types.
Creating an access authorization policy is administrative (governance/policy), and using lockable rack enclosures with chassis intrusion sensors is physical (hardware boundary/detection).
Administrative controls dictate rules and operational procedures, whereas physical controls protect physical assets from direct human intervention.
3
Differentiate administrative/physical controls from technical/logical controls present in wrong choices.
Measures involving TACACS+, IPsec VPNs, Port Security, ACLs, and DHCP Snooping are strictly technical/logical controls implemented in software or network device configurations.
Confusing technical network security mechanisms with administrative policies or physical barriers is a common conceptual mistake.

Key Concept

Classification of Enterprise Security Controls (Administrative vs. Physical vs. Technical)
Question 16Question →

A company is establishing operational guidelines to meet compliance mandates for its core data facility. The chief security officer highlights the necessity of administrative safeguards working in tandem with physical access mechanisms. Which initiative is properly classified as an administrative element of a security program?

Show answer & explanation

Answer: Mandating quarterly security awareness training sessions and formal clean-desk policies for all staff

Answer

Mandating quarterly security awareness training sessions and formal clean-desk policies for all staff is an administrative security program element.
The option specifying mandatory security awareness training and clean-desk policies represents an administrative security control. Administrative controls consist of policies, regulations, compliance guidelines, and security awareness programs designed to direct human behavior and govern organizational security operations.

Step-by-Step Solution

1
Categorize the options into control categories: Administrative, Physical, and Technical (Logical).
Administrative controls include policies, procedures, and training programs. Physical controls include locks, biometrics, and physical barriers. Technical controls include ACLs, port security, and protocol authentication.
Security program elements are classified based on whether they regulate human behavior/policy (administrative), physical entry (physical), or software/hardware enforcement (technical).
2
Identify which choice represents administrative policy and human behavior governance.
Mandating security awareness training and enforcing clean-desk policies fall squarely under administrative management.
Administrative controls establish the rules of behavior, compliance monitoring, and organizational security awareness.

Key Concept

Classification of Security Program Elements (Administrative vs. Physical vs. Technical Controls)
Estimated Time:1m 0s
Question 17Question →

Match each physical access control or security program element to its primary purpose within an enterprise network security framework.

Click a left item, then click its matching right item

Items

Mantrap
Security Awareness Training
Biometric Access Control
Incident Response Plan

Matches

Show answer & explanation

Answer

Mantrap matches with preventing piggybacking/tailgating via interlocking doors. Security Awareness Training matches with educating personnel on social engineering and phishing. Biometric Access Control matches with verifying human biological features for physical entry. Incident Response Plan matches with formal administrative breach response procedures.
Each physical access control (mantrap, biometric scanner) directly mitigates physical entry threats through hardware mechanisms or biological authentication. Each security program element (awareness training, incident response plan) provides administrative structure, human education, and process governance.

Step-by-Step Solution

1
Analyze each physical access control mechanism on the left.
Identify that a mantrap uses interlocking doors to combat tailgating, while biometrics validate biological features like fingerprints.
Physical controls manage direct bodily entry into hardware facilities.
2
Analyze each security program element on the left.
Identify that security awareness training targets human education against phishing, while an incident response plan is an administrative document outlining breach remediation steps.
Administrative elements establish policies, procedures, and human awareness program goals.
3
Pair each item on the left with its corresponding description on the right.
Establish the 4 correct pairings accurately.
Aligning controls with their functional definitions demonstrates mastery of physical and administrative program elements.

Key Concept

Classification and functional roles of physical access controls and administrative security program elements.
Question 18Question →

An enterprise organization is updating security measures for its core telecommunications enclosure to protect critical network hardware. Which mechanism serves as a physical access control specifically designed to prevent unauthorized individuals from tailgating authorized personnel into the facility?

Show answer & explanation

Answer: A mantrap portal equipped with interlocking doors and biometric identity verification

Answer

A mantrap portal equipped with interlocking doors and biometric identity verification
A mantrap portal consists of a small vestibule with two interlocking doors. Once an authorized user enters the outer door, it must close and lock before authentication unlocks the inner door. This structure physically limits entry to one validated person at a time, preventing tailgating.

Step-by-Step Solution

1
Identify the primary threat vector and control category specified in the scenario.
The requirement specifies physical security controls to prevent tailgating into a telecommunications enclosure.
Tailgating occurs when an unauthorized person closely follows an authorized user through a physical entrance without independent authentication.
2
Evaluate the candidate security controls.
Mantrap portals enforce single-person physical access through interlocking doors. Logical controls like ACLs, TACACS+, and port security manage digital network access, not physical perimeter security.
Physical access controls directly restrict physical entry to physical hardware and secure spaces.

Key Concept

Physical Access Controls and Anti-Tailgating Mechanisms
Question 19Question →

A network administrator is auditing the infrastructure security measures for a newly constructed enterprise data center facility. Which two measures represent physical access controls specifically designed to protect physical hardware and prevent unauthorized physical entry? (Select two.)

Select all that apply

Show answer & explanation

Answer: Implementation of a dual-door mantrap portal that requires sequential credential authentication for entry; Installation of biometric door scanners paired with electronic smart card badge readers at facility entryways

Answer

The two correct physical access controls are the implementation of a dual-door mantrap portal with sequential credential authentication, and the installation of biometric door scanners paired with electronic smart card badge readers.
Physical access controls are mechanisms designed to guard physical spaces, facilities, and network infrastructure hardware. A dual-door mantrap portal prevents unauthorized tailgating by locking one door until the person inside is verified before opening the inner door. Biometric scanners and electronic badge readers serve as physical access controls that validate identity before permitting entry to server rooms.

Step-by-Step Solution

1
Categorize each security measure in the options as physical, administrative, or technical.
Mantrap portals and biometric badge readers are physical controls; security training is an administrative program control; ACLs and TACACS+ are technical controls.
The question specifically asks for physical access controls that restrict physical access to facilities.
2
Select the controls that physically prevent unauthorized individuals from gaining physical access to network equipment.
Dual-door mantraps and biometric badge readers directly enforce physical perimeter security.
Physical controls rely on physical barriers, hardware devices, and mechanical or electronic entry locks to guard facilities.

Key Concept

Physical access controls involve physical barriers, biometric locks, badge readers, and mantraps to protect facilities and network hardware from unauthorized physical access.