Question

Difficulty: MediumPhysical Security Controls

An IT technician is designing physical access controls for an internal server room housing critical enterprise databases. The design must strictly prevent unauthorized personnel from entering the room and maintain an automated audit log of all entry and exit attempts. Which TWO of the following physical security controls should the technician implement to satisfy these requirements?

  1. An access control vestibule integrated with biometric scannersAnswer
  2. Electronic keycard readers configured with automated access loggingAnswer
  3. C
    Privacy screen filters mounted on all server management consoles
  4. D
    Security cable locks fastened to each rack-mounted server chassis
  5. E
    Concrete bollards installed along the exterior perimeter of the facility

Answer

The technician should implement an access control vestibule integrated with biometric scanners and electronic keycard readers configured with automated access logging.
Implementing an access control vestibule (mantrap) with biometric scanners and electronic keycard readers with access logging satisfies both required outcomes. The access control vestibule ensures that only one authenticated person enters at a time, eliminating tailgating, while electronic keycard readers control the door locks and maintain a detailed electronic record of all entry and exit attempts.

Step-by-Step Solution

1
Analyze the mandatory security requirements
The requirements are restricting room entry exclusively to authorized personnel (preventing tailgating/unauthorized access) and maintaining an automated access audit trail.
Understanding the specific operational goals helps eliminate physical security controls designed for other threats.
2
Evaluate access control and auditing solutions
An access control vestibule (mantrap) with biometric authentication enforces single-person entry and identity verification to prevent tailgating. Electronic keycard readers manage door locks while automatically recording badge scan timestamps to form an entry log.
Both selected measures directly secure the room perimeter access point and capture access history.
3
Evaluate incorrect options against the requirements
Privacy filters guard against visual eavesdropping, cable locks prevent equipment theft, and perimeter bollards mitigate vehicle ramming. None of these choices restrict room entrance access or generate entry logs.
Controls targeting visual privacy, hardware theft, or physical vehicle impact do not meet room access control and logging objectives.

Key Concept

Physical Access Controls and Automated Audit Logging
Rate this question