Examkin

Question

Difficulty: Very hardPhysical Security Controls

A network security administrator is tasked with designing physical access controls for an enterprise server vault containing sensitive financial data. The audit requirements demand a solution that physically restricts access to one authenticated individual at a time using an interlocking dual-door entry system, while strictly preventing employees from scanning their access credential and immediately passing it back to an unauthenticated colleague to enter behind them. Which of the following physical security implementations best addresses all of these requirements?

  1. An access control vestibule configured with anti-passback enforcementAnswer
  2. B
    A biometric reader paired with an external Faraday enclosure
  3. C
    A Protected Distribution System integrated with chassis locks
  4. D
    A security guard post combined with IP camera motion tracking

Answer

An access control vestibule configured with anti-passback enforcement is the optimal physical control.
An access control vestibule (also known as a mantrap) consists of a specialized space between two interlocking doors where the first door must close and lock before the second door unlocks, physically restricting access to one person at a time and preventing tailgating. Anti-passback is a logical access control feature implemented on card readers that prevents a badge from being scanned for entrance twice in succession without an intervening exit scan, directly stopping authorized users from passing their credentials back to unauthorized individuals.

Step-by-Step Solution

1
Analyze the entry restriction requirement
Identified the need for a physical barrier restricting entry to one individual at a time using interlocking doors (access control vestibule / mantrap).
An access control vestibule prevents unauthorized individuals from physically tailgating authorized personnel through dual interlocking doors.
2
Analyze the credential reuse requirement
Identified the requirement to block badge sharing or passing back credentials at the entryway.
Anti-passback rules require an exit badge scan before a credential can be scanned for entry again, preventing badge sharing.
3
Synthesize and select the combined physical control
Selected the option combining an access control vestibule with anti-passback enforcement.
This combination satisfies both the structural interlocking door requirement and the badge reuse control policy.

Key Concept

Physical Access Control Mechanisms (Access Control Vestibules & Anti-Passback)
Rate this question

Topics

Physical Security Controls

More questions from this topic