SIA Guard Access Control 2 — Questions and Answers
Question 1: What are the three categories of access control measures?
- Cheap, moderate, and expensive
- Physical, electronic, and procedural (Correct answer)
- Simple, medium, and complex
- Permanent, temporary, and emergency
Correct answer: Physical, electronic, and procedural
Access control uses three categories: Physical (locks, barriers, fences), Electronic (card readers, biometrics, keypads), and Procedural (visitor policies, sign-in procedures, escort requirements).
Question 2: What is a 'biometric' access control system?
- A system that uses keypads
- A system that verifies identity using unique physical characteristics such as fingerprints, iris scans, or facial recognition (Correct answer)
- A system using traditional keys
- A system that reads barcodes
Correct answer: A system that verifies identity using unique physical characteristics such as fingerprints, iris scans, or facial recognition
Biometric systems use unique physical characteristics to verify identity — such as fingerprints, iris patterns, facial geometry, or hand geometry. They are highly secure because biological features cannot be easily shared or duplicated.
Question 3: What should a security guard do when a delivery driver arrives at a controlled access point?
- Wave them through immediately
- Verify their identity, check the delivery is expected, log their details, issue a temporary pass, and direct them to the correct delivery point (Correct answer)
- Refuse all deliveries
- Let them find their own way around
Correct answer: Verify their identity, check the delivery is expected, log their details, issue a temporary pass, and direct them to the correct delivery point
The guard should verify the driver's identity and the delivery details, check with the relevant person that the delivery is expected, log the driver's details, issue a temporary pass, and direct them to the correct delivery area.
Question 4: What does 'defence in depth' mean in the context of access control?
- Having very deep foundations
- Using multiple layers of security measures so that if one layer fails, others still provide protection (Correct answer)
- Only protecting underground areas
- Defending the building's deepest point
Correct answer: Using multiple layers of security measures so that if one layer fails, others still provide protection
Defence in depth means implementing multiple layers of security — perimeter fencing, CCTV, patrols, access control, intruder alarms, etc. If one layer is breached, subsequent layers continue to provide protection.
Question 5: What is the purpose of a 'sign-out' procedure for visitors?
- To say goodbye politely
- To ensure all visitors have left the premises, retrieve visitor passes, and maintain an accurate record of who is on site (Correct answer)
- To collect feedback about their visit
- To remind them to come again
Correct answer: To ensure all visitors have left the premises, retrieve visitor passes, and maintain an accurate record of who is on site
The sign-out procedure ensures all visitors are accounted for (critical during evacuations), retrieves and deactivates visitor passes, records departure times, and maintains an accurate record of who is currently on site.
Question 6: What is 'social engineering' in the context of access control?
- Building social housing
- Manipulating people through deception to gain unauthorised access — such as pretending to be a contractor or authority figure (Correct answer)
- Designing social spaces in buildings
- A type of civil engineering
Correct answer: Manipulating people through deception to gain unauthorised access — such as pretending to be a contractor or authority figure
Social engineering exploits human psychology rather than technical vulnerabilities. Examples include impersonating contractors, pretending to be from IT support, or creating a fake emergency to bypass security procedures.
SIA Guard Access Control 2
What are the three categories of access control measures?