Physical Security ACCISO Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   During a physical security audit, an auditor discovers that the data center's biometric access control system has a false rejection rate (FRR) of 5%. The system is used at the main entrance. The auditor also notes that the CCTV system has a retention period of only 7 days, while the company's policy requires 30 days. The facility manager argues that the FRR is acceptable because it prevents unauthorized access. What is the most significant risk this audit finding highlights?

   • AThe CCTV retention period is too short to provide evidence for a thorough investigation of a security incident.
   • BThe biometric system's high FRR is a sign that the system is too sensitive and may be vulnerable to spoofing attacks.
   • CThe high FRR may cause legitimate users to be locked out, leading to operational disruption and potential safety issues.
   • DThe combination of a high FRR and short CCTV retention indicates a lack of investment in physical security controls.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is the primary purpose of a biometric access control system?

   • ATo provide a backup power source during outages
   • BTo record video footage of all activity in a facility
   • CTo verify an individual's identity based on unique physical characteristics
   • DTo detect and alert on unauthorized network intrusions
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A retail chain wants to reduce shrinkage in its warehouse. The warehouse manager proposes installing CCTV cameras, but the compliance officer notes that the company must follow local privacy regulations that restrict recording in employee break areas. Which implementation approach satisfies both the security objective and the privacy constraint?

   • AInstall cameras only in the break areas and use them to monitor employee behavior.
   • BInstall cameras everywhere but blur break-area footage in real time.
   • CUse dummy cameras in the warehouse and real cameras only in the break areas.
   • DPosition cameras at all warehouse exits and inventory storage zones, and exclude break areas from coverage.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is a key advantage of using biometric access control over traditional key cards?

   • ABiometrics require no power source to operate
   • BBiometrics are less expensive to implement
   • CBiometrics do not require any enrollment process
   • DBiometrics cannot be lost, stolen, or easily shared
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   What is the primary purpose of a physical security policy?

   • ATo list all employees' home addresses for emergency contact
   • BTo replace the need for technical security controls such as firewalls
   • CTo define the rules and expectations for protecting physical assets and facilities
   • DTo provide a detailed floor plan of all secure areas
   Reveal Solution Discussion Select an answer first