Question

Difficulty: HardPhysical Security Controls

A corporate enterprise houses its database servers in a shared colocation facility where vendors and third-party technicians routinely access adjacent hardware. The company must implement a physical security control specifically for its rack cabinets that physically restricts cabinet opening to designated IT staff while automatically recording electronic audit logs of every individual cabinet access attempt. Which of the following physical security controls best fulfills these requirements?

  1. Smart rack locks integrated with smart card or biometric authenticationAnswer
  2. B
    Closed-circuit television (CCTV) cameras mounted directly above the cabinet doors
  3. C
    Combination padlocks on cabinet doors paired with a manual paper sign-in sheet
  4. D
    Motion-activated interior rack enclosure alarm sensors

Answer

Smart rack locks integrated with smart card or biometric authentication
Deploying smart rack locks with smart card or biometric readers ensures that only authorized personnel can open specific cabinet doors. Because the lock communicates with an access management system, every lock/unlock event is tied to a specific credential and recorded electronically in an immutable audit log, perfectly satisfying both physical isolation in colocation spaces and compliance logging requirements.

Step-by-Step Solution

1
Analyze the physical security requirement
Identified two primary needs: physical access restriction at the individual rack cabinet level in a shared room, and automated electronic audit logging of access events.
General room-level security is insufficient because third parties share the room space.
2
Evaluate candidate controls against access restriction and logging requirements
Smart rack cabinet locks utilize electronic access control (cards/biometrics) to physically unlock cabinet doors while creating an audit log of who opened the cabinet and when.
Passive surveillance or manual sign-in logs fail to meet automated logging or individual authentication criteria.

Key Concept

Rack Level Physical Access Control and Audit Logging
Estimated Time:1m 30s
Rate this question