Access Control & Perimeter Security Flashcards

A security manager must choose between single-factor and multi-factor authentication for a high-security server room. What defines multi-factor authentication (MFA)?

Answer: Combining two or more of: something you know, something you have, something you are

MFA requires verification through at least two distinct factor categories — knowledge, possession, and inherence (biometrics) — providing stronger assurance than any single factor alone.

Which biometric modality is considered most accurate for large-scale one-to-many identification (1:N) in high-security environments?

Answer: Iris recognition

Iris recognition has one of the highest uniqueness and accuracy rates among biometrics, making it well-suited for 1:N identification in high-security applications.

A perimeter intrusion detection system (PIDS) generates an alert every time a cat walks near the fence. This is an example of:

Answer: A nuisance alarm (false positive)

A nuisance alarm (false positive) occurs when the system triggers an alert for a non-threatening stimulus, such as small animals, degrading operator confidence.

Under NFPA 101 Life Safety Code, which requirement takes precedence when a door serves both access control and fire egress functions?

Answer: The door must unlock automatically upon fire alarm activation to allow free egress

NFPA 101 requires that electrically locked egress doors release automatically upon fire alarm activation, since life safety always supersedes access control security.

What is 'tailgating' in the context of physical access control, and what technology directly addresses it?

Answer: Following an authorized person through a secured door without independent authentication; addressed by mantraps or optical turnstiles

Tailgating occurs when an unauthorized individual follows an authorized user through a controlled door; mantraps and optical turnstiles physically enforce one-person-at-a-time passage.

Which fence height is generally considered the minimum deterrent standard for a medium-security perimeter in US government guidelines?

Answer: 8 feet

US government and industry guidelines typically specify a minimum of 8 feet of chain-link fencing, often topped with barbed wire, as the baseline for medium-security perimeters.

A CSP is designing an access control system using 'role-based access control' (RBAC). What is the core principle of RBAC?

Answer: Permissions are assigned to roles, and users are granted access by being assigned to roles

RBAC assigns permissions to defined roles (e.g., 'guard,' 'manager,' 'IT admin'), and access is granted by assigning users to appropriate roles, simplifying large-scale administration.