CC Physical Security 2 — Questions and Answers
Question 1: How does piggybacking differ from tailgating in physical security?
- Piggybacking uses technology to bypass access controls; tailgating uses social engineering
- Piggybacking is done with the knowledge and consent of the authorized user; tailgating is done without consent (Correct answer)
- Piggybacking targets wireless networks; tailgating targets physical entry points
- There is no difference — the terms are interchangeable
Correct answer: Piggybacking is done with the knowledge and consent of the authorized user; tailgating is done without consent
Piggybacking occurs when an authorized user knowingly allows an unauthorized person to follow them through an access point, while tailgating happens without the knowledge or consent of the authorized user.
Question 2: In which security control category are CCTV cameras primarily classified?
- Preventive
- Detective (Correct answer)
- Corrective
- Directive
Correct answer: Detective
CCTV cameras are primarily detective controls because they record and monitor activity to detect security incidents, though they can also serve as a deterrent.
Question 3: What is a Faraday cage used for in physical security?
- Preventing unauthorized physical entry to server rooms
- Blocking electromagnetic signals from entering or leaving a shielded area (Correct answer)
- Containing fires within a specific zone of a building
- Detecting motion in restricted areas
Correct answer: Blocking electromagnetic signals from entering or leaving a shielded area
A Faraday cage is a metal enclosure that blocks electromagnetic fields, preventing signals from being emitted or received, which protects against wireless eavesdropping and signal interception.
Question 4: Which fire suppression system is most appropriate for a data center to protect electronic equipment?
- Wet pipe sprinkler system
- Clean agent suppression system (e.g., FM-200) (Correct answer)
- Deluge sprinkler system
- Foam-based suppression system
Correct answer: Clean agent suppression system (e.g., FM-200)
Clean agent suppression systems like FM-200 or CO2 extinguish fires without leaving residue or using water, protecting expensive electronic equipment from damage.
Question 5: What is the primary security purpose of maintaining a visitor log at a facility entrance?
- To comply with OSHA workplace safety regulations
- To create an accountability record of who entered the facility and when (Correct answer)
- To schedule security guard patrol routes
- To manage parking assignments for visitors
Correct answer: To create an accountability record of who entered the facility and when
Visitor logs create an audit trail documenting who accessed a facility, which supports accountability, incident investigation, and verification of authorized access.
Question 6: Physical access badges and key cards are classified as which type of authentication factor?
- Something you know
- Something you have (Correct answer)
- Something you are
- Somewhere you are
Correct answer: Something you have
Physical access badges and key cards are possession-based factors, classified as 'something you have' in the three-factor authentication model.
Question 7: What is the 'two-person rule' (or dual control) in physical security?
- Requiring two security guards on every patrol
- Requiring two authorized individuals to be present to perform certain sensitive operations (Correct answer)
- Mandating that all doors have two locks
- Requiring dual authentication factors for all access points
Correct answer: Requiring two authorized individuals to be present to perform certain sensitive operations
The two-person rule requires that two authorized individuals must both be present to access or perform highly sensitive operations, preventing single-person abuse or error.
CC Physical Security 2
How does piggybacking differ from tailgating in physical security?