Physical Security of BES Cyber Systems GCIP Practice Questions (Page 9)

Questions 41–44

1. 41application · medium

   A security team wants to log all access attempts to a BES Cyber System room. The door has a badge reader. What is the most appropriate way to log access attempts?

   • ARecord only successful access attempts in a paper log.
   • BHave a security guard manually record each entry in a notebook.
   • CConfigure the badge reader to record the badge ID, date, time, and whether access was granted or denied.
   • DUse the camera to record who enters and review the footage only if an incident occurs.
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   A utility has a visitor control program that requires all visitors to be escorted in BES Cyber System areas. A contractor needs to work in the room for several days. The contractor is familiar with the facility. What is the best way to handle this?

   • AHave the contractor sign a waiver releasing the utility from liability.
   • BGive the contractor a permanent badge and treat them as an employee.
   • CAllow the contractor to work unescorted because they are familiar with the facility.
   • DRequire the contractor to be escorted by an authorized employee at all times, even if the contractor is familiar with the facility.
   Reveal Solution Discussion Select an answer first
4. 43application · medium

   A facility has a badge reader on the door to the BES Cyber System room. The security team wants to ensure the badge reader is working correctly. What is the most appropriate testing procedure?

   • AVisually inspect the badge reader annually for physical damage.
   • BTest the badge reader monthly by attempting entry with a valid badge and a revoked badge.
   • CReplace the badge reader every year without testing.
   • DReview the access logs weekly to see who entered.
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A utility's control center contains BES Cyber Systems in a room with a badge reader. The Physical Security Plan must be updated to address a new requirement: all visitors, including contractors, must be individually registered and escorted. Which update best aligns with the plan's purpose?

   • AInstall a second badge reader at the control center door to require two-factor authentication for all personnel.
   • BAdd a procedure requiring visitors to sign a log at the front desk and be escorted by an authorized employee while in the control center.
   • CChange the badge policy so that contractors receive a temporary badge that works for 30 days without escort.
   • DPost a sign on the control center door stating that visitors must report to security.
   Reveal Solution Discussion Select an answer first