CSC Access Control & Perimeter Security 3

Question 1

Which principle states that an access control system should default to denying access unless explicit permission has been granted?

Accepted Answer

Default deny (fail-secure)

Answer

The default deny or fail-secure principle ensures that access is blocked unless it has been explicitly authorized, minimizing unintended access.

Question 2

A security consultant is evaluating electronic access control readers. Which technology is MOST vulnerable to cloning attacks without additional protections?

Accepted Answer

125 kHz proximity (Prox) cards

Answer

125 kHz proximity cards transmit their card number in cleartext and are easily cloned using inexpensive readers available online.

Question 3

What is the purpose of a 'crash-rated' vehicle barrier rating system such as ASTM F2656?

Accepted Answer

Certifying barriers based on their ability to stop a defined vehicle at a specific speed

Answer

ASTM F2656 (and its predecessor K-ratings) certifies vehicle barriers by the vehicle class and speed they can stop, and how far the vehicle penetrates.

Question 4

In access control terminology, what is 'dual control' (also called two-person integrity)?

Accepted Answer

Requiring two authorized individuals to be present for high-risk actions

Answer

Dual control requires two authorized individuals to jointly perform a sensitive action, preventing any single person from acting alone on critical tasks.

Question 5

A perimeter intrusion detection system (PIDS) uses fiber-optic sensing cables buried along a fence line. What type of intrusion detection technology is this?

Accepted Answer

Distributed acoustic sensing (DAS)

Answer

Distributed acoustic sensing (DAS) uses fiber-optic cables to detect vibrations caused by digging, cutting, or climbing along a perimeter.

(CSC) Certified Security Consultant Practice Test

(CSC) Certified Security Consultant Practice Test

CSC Access Control & Perimeter Security 3