ISP Physical Security & Facility Protection 3 — Questions and Answers
Question 1: An industrial facility uses proximity card readers. Which attack method specifically targets these systems by covertly reading and cloning a valid card from a distance?
- Shoulder surfing
- Relay/skimming attack using an RFID reader (Correct answer)
- Dumpster diving
- Social engineering the receptionist
Correct answer: Relay/skimming attack using an RFID reader
RFID skimming uses a concealed reader to capture card data wirelessly, enabling an attacker to clone a legitimate credential without the cardholder's knowledge.
Question 2: Which lighting standard is commonly referenced for industrial perimeter security to ensure adequate illumination for camera systems and guard patrol?
- Minimum 0.2 foot-candles at grade level along the perimeter (Correct answer)
- Minimum 5 foot-candles at all exterior doors only
- Flood lighting at 50 foot-candles everywhere on site
- No standard exists; lighting is purely discretionary
Correct answer: Minimum 0.2 foot-candles at grade level along the perimeter
Industry guidelines (including ASIS standards) typically recommend a minimum of 0.2 foot-candles at grade along perimeters to support detection by cameras and patrol.
Question 3: A security risk assessment at an industrial plant identifies 'criticality' of assets. What does criticality PRIMARILY measure?
- The replacement cost of an asset
- The impact on operations or mission if the asset is lost, damaged, or compromised (Correct answer)
- The difficulty of physically securing the asset
- The age and depreciation of the asset
Correct answer: The impact on operations or mission if the asset is lost, damaged, or compromised
Criticality measures how essential an asset is to the organization's mission; a highly critical asset causes severe operational disruption if compromised regardless of its monetary value.
Question 4: Under the ISP framework, what is 'piggybacking' in the context of access control?
- Installing a secondary badge reader on an existing door
- An authorized person allowing an unauthorized person to follow them through a controlled entry (Correct answer)
- Mounting cameras on fence posts
- Using two-factor authentication simultaneously
Correct answer: An authorized person allowing an unauthorized person to follow them through a controlled entry
Piggybacking (also called tailgating) occurs when an unauthorized person exploits an authorized person's access to pass through a secured door without presenting valid credentials.
Question 5: What is the MAIN advantage of a video analytics system over traditional CCTV monitoring in a large industrial facility?
- Lower camera hardware cost
- Automated detection of predefined behaviors without requiring continuous human monitoring (Correct answer)
- Longer video retention periods
- Higher image resolution
Correct answer: Automated detection of predefined behaviors without requiring continuous human monitoring
Video analytics software analyzes footage in real time to automatically alert on specific behaviors (e.g., perimeter crossing, loitering), reducing human fatigue and missed events.
Question 6: Which document formally records a facility's security requirements, vulnerabilities, countermeasures, and residual risk after a security assessment?
- Incident response plan
- Security master plan or physical security plan (Correct answer)
- Business continuity plan
- Occupational safety report
Correct answer: Security master plan or physical security plan
A security master plan or physical security plan documents findings from the vulnerability assessment and outlines countermeasures, priorities, costs, and residual risk.
Question 7: During an industrial facility lockdown, the FIRST priority of security personnel should be:
- Accounting for all personnel and securing entry points (Correct answer)
- Contacting the media to prevent panic
- Gathering evidence of the threat
- Evacuating all assets to an offsite location
Correct answer: Accounting for all personnel and securing entry points
Personnel accountability and securing entry/exit points to control movement are the immediate priorities during a facility lockdown to protect life and prevent further threat infiltration.
ISP Physical Security & Facility Protection 3
An industrial facility uses proximity card readers.
Which attack method specifically targets these systems by covertly reading and cloning a valid card from a distance?