Soru

Zorluk: ZorSecurity Program Elements and Physical Access Controls

A network administrator performs a security audit on a remote branch's main Intermediate Distribution Frame (IDF) closet. The auditor discovers two primary compliance issues: unbadged visitors routinely tailgate behind employees through the entrance door, and staff members frequently leave the access door propped open during work hours due to a lack of security protocol knowledge. Which pair of measures—consisting of one physical access control and one security program element—most effectively remediates these specific vulnerabilities?

  1. Installing a mantrap vestibule with interlocking doors and delivering targeted user security awareness training regarding physical access policies.Cevap
  2. B
    Configuring TACACS+ server authentication for network devices and implementing RADIUS for door controller authorization logging.
  3. C
    Enabling sticky MAC port security across switch access ports and saving the running configuration to NVRAM.
  4. D
    Applying an extended IPv4 Access Control List (ACL) to block unauthorized subnets from reaching the physical door access controller.

Cevap

Installing a mantrap vestibule with interlocking doors and delivering targeted user security awareness training regarding physical access policies.
The correct response properly pairs a physical access control with a security program element. A mantrap utilizes interlocking doors to physically restrict access so that only one authenticated person can enter at a time, directly preventing tailgating. Security awareness training is a critical security program element that educates employees on the risks of propping open sensitive facility doors and enforces organizational security policies.

Adım Adım Çözüm

1
Analyze the physical tailgating vulnerability.
Identified that tailgating requires a physical barrier control that physically restricts door throughput to one validated individual at a time.
Single-door badge scanners allow unauthorized individuals to follow authorized personnel.
2
Evaluate physical control solutions.
A mantrap (interlocking door system) physically enforces single-entry validation and prevents unauthorized physical tailgating.
Mantraps lock the outer door until the inner door is secured and authentication is re-verified.
3
Analyze human behavioral compliance (propping doors open).
Identified that propping doors open stems from user behavior and lack of policy adherence.
Technical controls cannot prevent a physical door from being mechanically propped open by staff.
4
Select the corresponding security program element.
User security awareness training directly educates employees on security risks, physical access responsibilities, and policy compliance.
Security awareness programs foster proper security posture and administrative policy compliance.

Anahtar Kavram

Physical Access Controls vs. Security Program Elements
Bu soruyu puanla