Core Concepts and Principles Flashcards

A facility places a perimeter fence, then locked building doors, then a badge-controlled server room. Which principle does this layering best illustrate?

Answer: Defense in depth

Defense in depth uses multiple concentric layers so that the failure of one layer does not expose the protected asset.

For a physical protection system to be effective, how must delay time compare with response force time?

Answer: Delay time must be greater than or equal to response time

The adversary must be delayed long enough after detection for the response force to arrive and interrupt the attack.

In the sequence of physical security functions, which function should normally occur first along an adversary's path?

Answer: Detection

Detection should happen early so that the delay elements that follow give responders time to act.

Which term describes the point on an adversary path after which remaining delay is less than response time?

Answer: Critical detection point

The critical detection point is the last place detection can occur and still allow a timely response.

A security manager calculates risk using threat, vulnerability, and consequence. If vulnerability is reduced to near zero, what happens to risk?

Answer: Risk is greatly reduced

Because risk is a function of threat, vulnerability, and consequence, lowering any factor lowers overall risk.

Which statement best describes 'balanced protection' in a physical protection system?

Answer: Every adversary path presents roughly equal difficulty

Balanced protection ensures no single path is a weak link that an adversary could exploit.

Which security approach relies on hiding system details as its primary protective measure and is generally discouraged?

Answer: Security through obscurity

Relying on secrecy alone fails once details are discovered, so it should never be the primary control.