Physical Security and Access Control Flashcards
6 cards from real CPO practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Physical Security and Access Control flashcards as text
A security officer is assigned to a facility that uses a Role-Based Access Control (RBAC) system. Which of the following best describes how an individual's access rights are determined in this system?
Answer: Determined by the individual's job function or position within the organization.
Role-Based Access Control (RBAC) assigns access permissions based on a person's role or job function within an organization. Everyone with the same role receives the same access rights, which simplifies administration and ensures consistency.
A Certified Protection Officer is conducting a security survey of a building's exterior. They notice that overgrown shrubs next to the main entrance are blocking the view from the reception desk and creating a potential hiding spot. Which CPTED principle is most clearly being violated?
Answer: Natural Surveillance
Crime Prevention Through Environmental Design (CPTED) uses design to deter crime. The principle of Natural Surveillance focuses on keeping potential offenders easily observable. Overgrown vegetation that blocks sightlines and creates hiding spots is a direct violation of this principle, as it prevents people from seeing and being seen.
A contractor arrives at a secure facility for a one-day job. Which of the following is the most appropriate immediate action for the protection officer to take regarding access control?
Answer: Issue a temporary visitor badge, verify their identity, and ensure they are escorted in restricted areas.
Proper visitor management procedure requires verifying a visitor's identity, logging their entry, and issuing a temporary, clearly identifiable badge. For security, non-employees like contractors should be escorted, especially in sensitive or restricted areas, to prevent unauthorized access.
Which of the following is an example of a physical access control measure combined with a technical control?
Answer: Motion-sensor lighting in a parking garage.
A proximity card reader is a technical control that verifies credentials electronically. It is integrated with a physical control, the electric door strike, which is a physical barrier. This combination of a technical verification method controlling a physical barrier is a common example of layered security.
A comprehensive key control policy is a critical component of physical security. What is the primary purpose of conducting regular key audits?
Answer: To identify security weaknesses and ensure all keys are accounted for.
Regular audits are a vital part of a key control policy. Their main purpose is to verify that all keys are accounted for, identify any missing keys or other vulnerabilities in the system, and ensure that access privileges are still appropriate for each key holder. This helps maintain the integrity of the physical security system.
During a late-night patrol of a corporate office, a protection officer finds a secure door propped open with a fire extinguisher. What is the officer's MOST immediate and critical responsibility?
Answer: Remove the object, secure the door, and then investigate the reason for the breach.
The most immediate and critical responsibility of the protection officer is to mitigate the security vulnerability. This involves removing the prop, ensuring the door is closed and locked, and then proceeding to investigate why the breach occurred and reporting the findings. Leaving the door open would create an unacceptable risk.