CDCP Physical Security and Access 4 — Questions and Answers
Question 1: Which physical security control is MOST effective at preventing tailgating into a secure data center zone?
- Security guard at every door
- Mantrap (airlock) vestibule (Correct answer)
- CCTV monitoring at entry points
- Proximity card reader with PIN
Correct answer: Mantrap (airlock) vestibule
A mantrap forces one person at a time through a controlled entry, physically preventing tailgating by holding the second door locked until the first is secured.
Question 2: A data center's perimeter fence should be at minimum how high to deter casual intruders per common security standards?
- 4 feet (1.2 m)
- 6 feet (1.8 m)
- 8 feet (2.4 m) (Correct answer)
- 10 feet (3.0 m)
Correct answer: 8 feet (2.4 m)
Industry standards typically recommend at least 8 feet (2.4 m) for perimeter fencing to deter casual intrusion, often topped with barbed wire for additional deterrence.
Question 3: What is the PRIMARY purpose of maintaining a visitor log in a data center?
- Billing visitors for access time
- Providing an audit trail for accountability (Correct answer)
- Tracking Wi-Fi usage by guests
- Complying with fire safety head counts
Correct answer: Providing an audit trail for accountability
Visitor logs create an auditable record of who accessed the facility and when, supporting accountability and forensic investigations if a security incident occurs.
Question 4: A data center uses biometric fingerprint scanners for access. What is the key metric used to balance false acceptance vs. false rejection rates?
- Throughput rate
- Crossover Error Rate (CER) (Correct answer)
- Mean Time Between Failures (MTBF)
- Bit Error Rate (BER)
Correct answer: Crossover Error Rate (CER)
The Crossover Error Rate (CER), also called Equal Error Rate (EER), is the point where FAR and FRR are equal and is used to compare biometric system accuracy.
Question 5: Which of the following BEST describes the 'defense in depth' approach to data center physical security?
- Installing the most expensive single security system available
- Relying solely on perimeter barriers to stop intruders
- Layering multiple security controls so each compensates for weaknesses in others (Correct answer)
- Hiring the maximum number of security guards possible
Correct answer: Layering multiple security controls so each compensates for weaknesses in others
Defense in depth uses multiple overlapping security layers (perimeter, building, room, rack) so that a failure in one layer does not result in complete compromise.
Question 6: What type of lighting is recommended around a data center perimeter to deter intruders while minimizing light pollution to neighbors?
- Continuous high-intensity floodlighting aimed outward
- Motion-activated lighting covering approach paths (Correct answer)
- Infrared lighting only (invisible to the naked eye)
- No exterior lighting to avoid drawing attention
Correct answer: Motion-activated lighting covering approach paths
Motion-activated lighting is energy-efficient, alerts security to movement, and deters intruders by suddenly illuminating them without constant light pollution.
Question 7: When a data center employee's access badge is reported lost or stolen, what is the FIRST action security staff should take?
- Issue a temporary badge and wait for the permanent one to arrive
- Immediately deactivate the lost badge in the access control system (Correct answer)
- File a police report before taking any system action
- Notify the employee's manager and schedule a review meeting
Correct answer: Immediately deactivate the lost badge in the access control system
Immediately deactivating the lost badge prevents unauthorized use; any administrative processes should follow this critical first step.
CDCP Physical Security and Access 4
Which physical security control is MOST effective at preventing tailgating into a secure data center zone?