CDCP - Certified Data Centre Professional Physical Security and Access Questions and Answers

Question 1

A high-security data center needs to implement an access control system at the entrance to the main data hall that prevents tailgating and ensures only one individual enters per authorization. Which of the following solutions best meets this requirement?

Accepted Answer

A mantrap with interlocking doors and multi-factor authentication.

Answer

A mantrap is a physical security control system with two sets of interlocking doors where the first set must close before the second set can open. [19, 11] This design physically prevents tailgating by trapping an individual in a small space to be authenticated, ensuring only one person can enter at a time. [24]

Question 2

Which of the following represents the correct order for a multi-layered physical security approach in a data center, starting from the outermost layer and moving to the innermost?

Accepted Answer

Site Perimeter Fence -> Building Entrance -> Room Access Control -> Rack-level Locks

Answer

A proper defense-in-depth or layered security strategy starts with securing the widest area and adds progressively stricter controls as one moves closer to the critical assets. [4, 3] The logical sequence is to first secure the site perimeter (fence), then the building itself (entrance), followed by the specific sensitive room (data hall access), and finally the individual equipment cabinets (rack locks).

Question 3

A data center manager is implementing a two-factor authentication (2FA) policy for accessing secure areas. Which of the following combinations correctly uses two different authentication factors?

Accepted Answer

A proximity card and a PIN code.

Answer

True two-factor authentication requires evidence from two of the three distinct categories: something you know (knowledge), something you have (possession), and something you are (inherence). [13] A proximity card is 'something you have,' and a PIN code is 'something you know,' satisfying the 2FA requirement. [17, 18] Options A, B, and C each use two factors from the same category (both knowledge, both inherence, and both possession, respectively).

Question 4

In the context of data center perimeter security, what is the primary function of installing bollards around the building and at key access points?

Accepted Answer

To act as a physical barrier to prevent vehicle ramming and control unauthorized vehicle access.

Answer

Bollards are robust vertical posts designed primarily to serve as a protective barrier against vehicular impact, whether accidental or intentional. [1, 2] They are a key component of perimeter security used to prevent unauthorized vehicles from approaching or ramming a building, thereby protecting the structure and its occupants. [7, 14]

Question 5

A third-party contractor requires access to the data hall to perform scheduled maintenance on a cooling unit. According to best practices for operational security, what is the most critical procedure to enforce?

Accepted Answer

Requiring the contractor to be continuously escorted by an authorized staff member.

Answer

Best practices for data center security mandate that all non-employee visitors, including contractors and vendors, must be escorted at all times by authorized personnel when inside secure areas. [20, 22] This mitigates the risk of unauthorized access to equipment or data and ensures the contractor only performs the authorized work.

CDCP - Certified Data Centre Professional Practice Test

CDCP - Certified Data Centre Professional Practice Test

CDCP - Certified Data Centre Professional Physical Security and Access Questions and Answers