CSM CSM Physical Security & Access Control 2 — Questions and Answers
Question 1: Which perimeter security element is designed to prevent vehicle ramming attacks against a building?
- Chain-link fence
- Crash-rated bollards (Correct answer)
- Razor wire topping
- Motion-activated lighting
Correct answer: Crash-rated bollards
Crash-rated bollards are engineered to stop vehicles at specified speeds and weights, protecting buildings from vehicle-borne attacks.
Question 2: The Crime Prevention Through Environmental Design (CPTED) strategy of 'natural surveillance' is best achieved by:
- Installing hidden cameras throughout a property
- Designing spaces to maximize visibility and eliminate concealment opportunities (Correct answer)
- Hiring more uniformed guards
- Posting warning signs at entry points
Correct answer: Designing spaces to maximize visibility and eliminate concealment opportunities
Natural surveillance uses landscaping, lighting, and architectural design to maximize sightlines so potential offenders feel observed without relying on technology.
Question 3: When classifying security zones in a facility, which zone typically requires the highest level of access restriction?
- Public zone
- Reception zone
- Controlled zone
- Restricted/secure zone (Correct answer)
Correct answer: Restricted/secure zone
Restricted or secure zones house the most sensitive assets and require the most stringent access controls, typically limited to vetted personnel with a specific need.
Question 4: A key card reader that logs every entry and exit attempt, including failed attempts, supports which security principle?
- Least privilege
- Separation of duties
- Accountability and auditability (Correct answer)
- Need-to-know
Correct answer: Accountability and auditability
Logging all access attempts creates an audit trail that supports accountability, enabling security managers to investigate incidents and detect anomalies.
Question 5: What is the primary purpose of conducting periodic access control list (ACL) reviews?
- To test card reader hardware functionality
- To ensure access rights remain appropriate as roles change and remove unnecessary permissions (Correct answer)
- To back up the access control database
- To recalibrate biometric scanners
Correct answer: To ensure access rights remain appropriate as roles change and remove unnecessary permissions
Regular ACL reviews identify and revoke stale or excess permissions caused by role changes, terminations, or privilege creep, maintaining the principle of least privilege.
Question 6: According to ASIS standards, what is the recommended action when an employee's access card is reported lost or stolen?
- Wait for the employee to request a new card
- Immediately deactivate the card and issue a replacement after identity verification (Correct answer)
- Deactivate the card after 24 hours as a grace period
- Transfer the card's access level to a temporary badge
Correct answer: Immediately deactivate the card and issue a replacement after identity verification
Immediate deactivation eliminates the window of opportunity for unauthorized use, while re-issuance after verification ensures the legitimate user regains access quickly.
CSM CSM Physical Security & Access Control 2
Which perimeter security element is designed to prevent vehicle ramming attacks against a building?