CFL Physical Security Assessment & Vulnerability Analysis 1 — Questions and Answers
Question 1: What is the primary purpose of a physical security vulnerability assessment performed by a CFL?
- To identify weaknesses in locking systems that could be exploited (Correct answer)
- To install new lock systems for clients
- To repair damaged locks at crime scenes
- To certify locksmiths for professional practice
Correct answer: To identify weaknesses in locking systems that could be exploited
A physical security vulnerability assessment identifies weaknesses in locking systems and access controls that could be exploited by an attacker.
Question 2: Which rating system is commonly used in the US to classify lock resistance to attack?
- ANSI/BHMA grading system (Grades 1, 2, and 3) (Correct answer)
- ISO 9001 quality standards
- NFPA fire resistance codes
- EPA environmental compliance ratings
Correct answer: ANSI/BHMA grading system (Grades 1, 2, and 3)
The ANSI/BHMA grading system classifies door hardware into Grades 1, 2, and 3 based on durability and security resistance.
Question 3: What does 'forced entry resistance' refer to in physical security assessments?
- A lock's ability to withstand drilling, prying, and kick-in attacks (Correct answer)
- The difficulty of picking a lock's pin stack
- The strength of a safe's hinge mechanism
- A door frame's fire resistance rating
Correct answer: A lock's ability to withstand drilling, prying, and kick-in attacks
Forced entry resistance measures how well a locking system withstands physical attacks such as drilling, prying, or impact that bypass the key mechanism.
Question 4: A CFL finds a Grade 3 deadbolt on an exterior door during a security survey. What is the forensic significance?
- Grade 3 is the lowest ANSI grade, offering minimal resistance to forced entry (Correct answer)
- Grade 3 is the highest security rating available for deadbolts
- Grade 3 locks are tamper-evident by design
- Grade 3 deadbolts cannot be picked with standard tools
Correct answer: Grade 3 is the lowest ANSI grade, offering minimal resistance to forced entry
ANSI Grade 3 is the lowest security classification, meaning the lock provides minimal resistance to forced entry compared to Grade 1 hardware.
Question 5: Which factor is most critical when assessing a strike plate during a vulnerability assessment?
- Length of mounting screws reaching into the door frame stud (Correct answer)
- The color finish matching the rest of the door hardware
- The brand name stamped on the plate
- Whether the plate is stainless steel or brass material
Correct answer: Length of mounting screws reaching into the door frame stud
Strike plate security depends on screw length penetrating the structural stud, as short screws allow kick-in attacks even when a high-grade deadbolt is installed.
Question 6: When documenting vulnerabilities, what should a CFL note about a lock cylinder's projection beyond the door face?
- Excessive projection increases the risk of a cylinder pull attack by providing leverage (Correct answer)
- Projection affects only the aesthetic appearance of the installation
- More projection indicates a higher-quality European-style cylinder
- Projection beyond the door face is required by ANSI standards
Correct answer: Excessive projection increases the risk of a cylinder pull attack by providing leverage
Excessive cylinder projection beyond the door face provides leverage for cylinder pull attacks and must be documented as a critical vulnerability.
CFL Physical Security Assessment & Vulnerability Analysis 1
What is the primary purpose of a physical security vulnerability assessment performed by a CFL?