Practice Test Geeks(CSP) Certified Surveillance Professional Practice Test
← All CSP Flashcard Decks

Access Control & Perimeter Security Flashcards

7 cards from real CSP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Access Control & Perimeter Security flashcards as text

  1. Which access control model grants permissions based on the sensitivity classification of data and the user's security clearance level, enforced by the system rather than the data owner?

    Answer: Mandatory Access Control (MAC)

    Mandatory Access Control (MAC) is a system-enforced model where access is determined by classification labels and clearance levels, not by the resource owner's discretion, commonly used in government/military environments.

  2. A CSP evaluates a crash-rated wedge barrier for a vehicle gate. The rating 'M50 P1' means the barrier:

    Answer: Stopped a 15,000-lb vehicle traveling at 50 mph with less than 1 meter of penetration

    ASTM F2656 M50 P1 denotes a barrier that stopped a 15,000-lb (6,800 kg) vehicle at 50 mph with the test vehicle penetrating less than 1 meter beyond the barrier face.

  3. What is the significance of 'CPTED' (Crime Prevention Through Environmental Design) in perimeter security planning?

    Answer: It uses physical environment design — lighting, landscaping, sightlines — to naturally deter criminal activity

    CPTED is a design philosophy that reduces crime opportunities by manipulating the built environment — using natural surveillance, access control, and territorial reinforcement — without relying solely on hardware or guards.

  4. During an access control system audit, a CSP finds that terminated employees still have active credentials in the system 30 days after separation. Which process failure does this represent?

    Answer: Failed de-provisioning (offboarding) process

    Failed de-provisioning means the HR-to-security notification and credential revocation process broke down, leaving active access for individuals who no longer have a business need.

  5. A security professional is assessing a perimeter using the 'detect, delay, respond' model. Which element's timing is most critical to the model's effectiveness?

    Answer: Delay must exceed the response force's time to arrive at the point of breach

    The model works when the delay barriers buy enough time for responders to arrive before the intruder reaches the asset; if response time exceeds delay time, the asset can be compromised even if detection is immediate.

  6. Which wireless access credential technology uses AES-128 encryption and mutual authentication between card and reader, making it significantly more resistant to cloning than older technologies?

    Answer: 13.56 MHz MIFARE DESFire EV2 smart card

    MIFARE DESFire EV2 operates at 13.56 MHz and uses AES-128 with mutual authentication and diversified keys per card, making it extremely resistant to skimming and cloning attacks.

  7. A security manager implementing 'defense in depth' for a data center adds a biometric reader inside the lobby after already securing the building exterior. This layer is best classified as:

    Answer: Interior access control

    A biometric reader controlling access from the lobby into the data center interior represents an interior access control layer, distinct from perimeter (exterior) controls.