DOD DOD Physical Security & Access Control 2 — Questions and Answers
Question 1: What is 'two-person integrity (TPI)' as applied to DoD physical security?
- A rule requiring two authorized individuals to be present whenever accessing certain sensitive materials or areas (Correct answer)
- A buddy system used during physical fitness training
- A dual-key requirement for arming nuclear systems only
- A policy requiring two signatures on access request forms
Correct answer: A rule requiring two authorized individuals to be present whenever accessing certain sensitive materials or areas
Two-person integrity requires that two authorized individuals are always present together when accessing certain sensitive materials or areas, preventing any single person from acting alone.
Question 2: Which intrusion detection system (IDS) component detects motion inside a secured room using microwave or infrared energy?
- Volumetric sensor (Correct answer)
- Point sensor
- Perimeter sensor
- Duress alarm
Correct answer: Volumetric sensor
Volumetric sensors detect motion throughout the interior volume of a room using passive infrared, microwave, or ultrasonic technology.
Question 3: Under DoD guidance, a Sensitive Compartmented Information Facility (SCIF) must meet construction standards outlined in which document?
- ICD 705 (Correct answer)
- DoD 5220.22-M
- NIST SP 800-171
- DoD 5200.01
Correct answer: ICD 705
Intelligence Community Directive (ICD) 705 establishes the technical and physical standards for constructing and accrediting SCIFs.
Question 4: What action is required when a DoD Common Access Card (CAC) is lost or stolen?
- Report immediately to the security office and revoke the certificate through RAPIDS (Correct answer)
- Wait 30 days before reporting to determine if it is truly lost
- Report only if the card is believed to be stolen, not simply lost
- Notify the cardholder's supervisor within 72 hours
Correct answer: Report immediately to the security office and revoke the certificate through RAPIDS
A lost or stolen CAC must be reported immediately so that PKI certificates can be revoked through the Real-time Automated Personnel Identification System (RAPIDS) to prevent unauthorized use.
Question 5: What is 'tailgating' in the context of DoD access control?
- An unauthorized person following an authorized person through a secured door without presenting credentials (Correct answer)
- Parking a vehicle too close to a restricted building
- Accessing a network resource after a legitimate user's session expires
- Conducting surveillance of an installation's perimeter
Correct answer: An unauthorized person following an authorized person through a secured door without presenting credentials
Tailgating (or piggybacking) is a physical security breach where an unauthorized person gains access by closely following an authorized individual through a controlled entry point.
Question 6: Which DoD physical security measure ensures that only personnel with a verified need-to-know can enter a classified vault area?
- Access control list (ACL) maintained by the security manager (Correct answer)
- Posted guard force only
- Combination lock without any visitor log
- General building key issued to all cleared personnel
Correct answer: Access control list (ACL) maintained by the security manager
A security manager-maintained access control list verifies both security clearance and need-to-know before granting vault entry, as required by DoD security policy.
DOD DOD Physical Security & Access Control 2
What is 'two-person integrity (TPI)' as applied to DoD physical security?