COBRA COBRA Physical Security Fundamentals 2 — Questions and Answers
Question 1: What is piggybacking (tailgating) in physical security, and why is it a concern?
- A method of encrypting access card data to prevent cloning
- When an unauthorized person follows an authorized person through a secured door without using their own credentials (Correct answer)
- A technique for bypassing fire alarm systems during drills
- The practice of sharing access credentials between authorized employees
Correct answer: When an unauthorized person follows an authorized person through a secured door without using their own credentials
Tailgating occurs when an unauthorized person follows an authorized individual through a secured access point, bypassing credential verification.
Question 2: How should a COBRA operator respond when the access control system logs an 'access denied' event at a critical entry point?
- Ignore it if no alarm is triggered simultaneously
- Log the event and notify a security officer to investigate the denied access attempt (Correct answer)
- Reset the access control panel to clear the error log
- Allow the next valid cardholder to provide manual clearance for the denied individual
Correct answer: Log the event and notify a security officer to investigate the denied access attempt
An 'access denied' event at a critical entry must be logged and investigated by a security officer to rule out unauthorized access attempts.
Question 3: What is the purpose of security lighting in a COBRA-monitored facility?
- To reduce electricity costs by replacing interior lighting with external sources
- To eliminate shadows and dark areas that could conceal unauthorized activity, supporting surveillance effectiveness (Correct answer)
- To signal to employees when the facility is operating after normal business hours
- To comply with OSHA workplace illumination standards for employee safety
Correct answer: To eliminate shadows and dark areas that could conceal unauthorized activity, supporting surveillance effectiveness
Security lighting eliminates shadows and dark areas that could conceal unauthorized persons, directly improving the effectiveness of surveillance systems.
Question 4: What information should be verified when checking a visitor's identity at a COBRA-monitored facility?
- Only the visitor's name as stated verbally
- Government-issued photo identification, the stated purpose of visit, and verification against an approved visitor list (Correct answer)
- A business card and a brief verbal explanation of the visit purpose
- Any identification document, including expired IDs, and a signed self-declaration form
Correct answer: Government-issued photo identification, the stated purpose of visit, and verification against an approved visitor list
Visitors must present valid government-issued photo ID, state a verifiable purpose, and be confirmed against an approved visitor list.
Question 5: Which of the following is a sign of possible physical security compromise that a COBRA operator should report?
- A door closing slightly slower than usual due to a worn hydraulic closer
- Unfamiliar vehicles parked in a designated employee lot without proper permits for an extended period (Correct answer)
- An employee using the same entry point they use every day
- A vendor delivery vehicle arriving within the scheduled delivery window
Correct answer: Unfamiliar vehicles parked in a designated employee lot without proper permits for an extended period
Unfamiliar vehicles parked without permits for extended periods are a potential sign of surveillance or unauthorized access planning and must be reported.
Question 6: What is the role of a COBRA console operator in enforcing a 'clean desk' or secure area policy?
- Operators have no role in enforcing clean desk policies as it is an HR matter
- Operators should monitor workstations via cameras and report visible sensitive documents or unsecured equipment in restricted areas (Correct answer)
- Operators are only responsible for physical entry points, not internal workspace security
- Clean desk policies apply exclusively to IT staff managing server rooms
Correct answer: Operators should monitor workstations via cameras and report visible sensitive documents or unsecured equipment in restricted areas
Console operators monitoring restricted areas via cameras must report any visible sensitive documents or unsecured equipment that violates secure area policies.
COBRA COBRA Physical Security Fundamentals 2
What is piggybacking (tailgating) in physical security, and why is it a concern?