Physical Security of BES Cyber Systems GCIP Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A BES Cyber System room has a badge reader and a camera. The security team wants to detect tailgating. The camera is positioned to capture the door. What is the most effective way to use the existing controls to detect tailgating?

   • AReview the camera footage whenever the badge reader logs an entry and compare the number of people entering to the number of badge swipes.
   • BInstall a second badge reader inside the room to require a badge to exit.
   • CUse the camera to record continuously and only review footage if an incident is reported.
   • DSet the badge reader to sound an alarm if two people enter within one second.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   What is the function of an intrusion detection system (IDS) in physical security?

   • ATo block network-based attacks
   • BTo provide backup power for security equipment
   • CTo detect unauthorized entry into a protected area
   • DTo manage user authentication for computer systems
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A utility's control center has a visitor control program that requires all visitors to be escorted in areas containing BES Cyber Systems. A vendor is scheduled to perform a two-week upgrade of the HVAC system, which requires access to the control room for several hours each day. The security manager has limited staff and cannot assign a dedicated escort for the entire two weeks. The vendor has passed a background check and has worked with the utility before. What is the best approach to balance the escorting requirement with the staffing constraint?

   • AAllow the vendor unescorted access during business hours with a temporary badge
   • BUse video monitoring and require the vendor to check in with security at the start and end of each visit
   • CAssign a single escort for the entire two weeks, even if it means the escort cannot perform other duties
   • DSchedule the vendor's work during times when an escort is available, even if it extends the project timeline
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A security analyst is reviewing physical security logs for a facility with BES Cyber Systems. The logs show that a door in a sensitive area was opened at 2:00 AM, and the badge used belongs to an employee who is on vacation. The intrusion detection system did not generate an alarm because the door was opened with a valid badge. What should the analyst do?

   • ADisable the employee's badge immediately and report the incident to the security manager
   • BContact the employee to ask if they authorized someone else to use their badge
   • CReview the video footage from the time of the access to identify who entered
   • DIgnore the event because the badge is valid and the door was opened normally
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A utility is updating its Physical Security Plan for BES Cyber Systems. The plan currently describes the access control system, visitor procedures, and monitoring. The compliance team requires that the plan also include procedures for verifying that the physical security controls are working as intended. What should be added to the plan?

   • AA description of the alarm monitoring procedures
   • BA schedule for testing and maintenance of all physical security mechanisms
   • CA list of all employees with access to the control room
   • DA diagram of the facility's floor plan
   Reveal Solution Discussion Select an answer first