Physical Security ACCISO Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A government contractor must protect a classified server room. The security policy requires that no single individual can enter the room alone. The contractor is evaluating access control options. Which mechanism best enforces the two-person rule while maintaining an audit trail?

   • AA single biometric reader that requires two different fingerprints to unlock the door.
   • BA card reader paired with a PIN pad, where the card and PIN belong to the same individual.
   • CA mantrap with two interlocking doors, each requiring a valid credential, and a CCTV camera inside.
   • DA dual-control access system requiring two separate valid credentials from two different enrolled users within a 10-second window, with all attempts logged.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A small business owner is concerned about the security of their office, which contains customer data on a local server. The owner has a limited budget and wants to implement a few basic physical security controls. Which control is the most fundamental and cost-effective first step?

   • AEnsure all exterior doors have quality deadbolts and are locked when the office is unoccupied.
   • BHire a 24/7 security guard to monitor the premises.
   • CInstall a comprehensive CCTV system with cameras covering every angle.
   • DInstall a high-end biometric access control system at the main entrance.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   During a physical security audit of a corporate campus, the auditor discovers that the access control system logs show a valid badge being used at the main entrance and then at a server room door 30 seconds later, but the two locations are a 10-minute walk apart. The badge belongs to an employee who is on approved leave. Which finding is the most appropriate conclusion?

   • AThe access control system has a time synchronization issue between the two door controllers.
   • BThe employee returned to work early and the badge was used legitimately.
   • CThe badge was cloned or is being used by an unauthorized person, and the audit should trigger a credential revocation and investigation.
   • DThe audit should be closed because the access control system logged the events, proving it is functioning correctly.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A manufacturing company is implementing a new physical security policy. The policy must address the use of personal mobile devices in secure areas. The company wants to prevent unauthorized photography of proprietary equipment while not being overly restrictive on employee morale. Which policy is most balanced?

   • AAllow mobile devices freely but post signs reminding employees not to take photos.
   • BAllow mobile devices but require a camera-disable sticker to be applied at the entrance.
   • CProhibit all personal mobile devices in secure areas and provide lockers at the entrance.
   • DRequire employees to leave devices at their desks and only bring them into secure areas with manager approval.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A security auditor is reviewing the physical security controls at a 24-hour data center. The auditor finds that CCTV cameras cover all entrances and aisles, but the footage is only retained for 72 hours. The organization's compliance requirement mandates that security footage be retained for at least 90 days. The auditor also notes that the camera system uses analog recording. What is the most critical finding?

   • AThe cameras cover all entrances and aisles, which is excessive.
   • BThe CCTV system uses analog recording, which is outdated.
   • CThe 72-hour retention period does not meet the 90-day compliance requirement.
   • DThe data center operates 24 hours, which increases monitoring costs.
   Reveal Solution Discussion Select an answer first