CSM CSM Physical Security & Access Control

Question 1

Which access control model grants permissions based on an individual's job role within an organization?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

RBAC assigns permissions based on predefined job roles, simplifying administration by grouping users with similar access needs.

Question 2

A security manager is designing a facility entry system requiring two independent authentication factors. This is an example of:

Accepted Answer

Multi-factor authentication (MFA)

Answer

MFA requires two or more independent authentication factors (something you know, have, or are) to verify identity before granting access.

Question 3

What physical security control is specifically designed to prevent one individual from following another through a secured entry point without authenticating?

Accepted Answer

Mantrap (airlock)

Answer

A mantrap (airlock) is a controlled entry vestibule that allows only one person through at a time, preventing tailgating by requiring individual authentication.

Question 4

Under the ASIS International standards, the 'defense in depth' principle in physical security refers to:

Accepted Answer

Layering multiple security controls so that failure of one does not compromise the entire system

Answer

Defense in depth uses multiple overlapping security layers so that an attacker must defeat several controls, reducing the likelihood of a successful breach.

Question 5

Which document typically defines the authority levels, zones, and time-based access rules for a facility's access control system?

Accepted Answer

Access control matrix

Answer

An access control matrix maps users or roles to specific resources, defining what access is permitted, at what times, and in which security zones.

CSM - Certified Security Manager Practice Test

CSM - Certified Security Manager Practice Test

CSM CSM Physical Security & Access Control