SSP Physical Security Design & Implementation 5 ā Questions and Answers
Question 1: Which type of door lock is classified as 'fail-safe' in fire egress scenarios?
- Electromagnetic lock that releases when power is cut (Correct answer)
- Electric strike that locks when power is cut
- Deadbolt with battery backup
- Delayed egress lock with 30-second timer
Correct answer: Electromagnetic lock that releases when power is cut
Fail-safe locks (like mag-locks) default to the unlocked/open position when power is lost, ensuring egress during fire or power failure.
Question 2: The concept of 'defense in depth' applied to physical security means:
- Deploying the deepest possible underground vault for high-value assets
- Using multiple independent security layers so that failure of one does not compromise the whole (Correct answer)
- Concentrating all security resources at the outermost perimeter
- Employing security personnel with deep domain expertise
Correct answer: Using multiple independent security layers so that failure of one does not compromise the whole
Defense in depth uses concentric, independent security layers so an attacker who defeats one layer still faces additional barriers.
Question 3: Under the NIST SP 800-116 guidelines for use of PIV credentials, Assurance Level 4 (highest) requires which authentication mechanism at a physical access point?
- Card only (something you have)
- Card plus PIN (two-factor)
- Card plus PIN plus biometric (three-factor) (Correct answer)
- Biometric only (something you are)
Correct answer: Card plus PIN plus biometric (three-factor)
NIST SP 800-116 Assurance Level 4 mandates three-factor authentication: PIV card, PIN, and biometric to achieve the highest identity assurance.
Question 4: A security consultant recommends 'ballistic-resistant glazing' rated UL 752 Level 3. This rating is designed to stop projectiles from which weapon type?
- .44 Magnum handgun (Correct answer)
- 9mm submachine gun
- 7.62mm rifle
- .50 BMG rifle
Correct answer: .44 Magnum handgun
UL 752 Level 3 is rated for .44 Magnum handgun projectiles; higher levels address higher-powered rifles and submachine guns.
Question 5: Which document produced during a security design project defines the owner's security objectives, performance criteria, and basis of design decisions?
- Security Master Plan
- Operational Requirements Document (ORD)
- Basis of Design (BOD) / Security Narrative (Correct answer)
- Commissioning Test Plan
Correct answer: Basis of Design (BOD) / Security Narrative
The Basis of Design document records design intent, performance goals, and assumptionsāserving as the foundational reference for all subsequent security design decisions.
Question 6: A risk assessment identifies a high-value server room as a critical asset. The MOST appropriate initial step before selecting security countermeasures is:
- Install biometric readers immediately
- Determine the threat likelihood and impact to calculate risk (Correct answer)
- Survey employees on their preferred access methods
- Contact vendors for product demonstrations
Correct answer: Determine the threat likelihood and impact to calculate risk
Countermeasure selection should be driven by a formal risk calculation (likelihood Ć impact) to ensure controls are proportionate to actual risk.
Question 7: In physical security, 'target hardening' refers to:
- Training security personnel on use-of-force techniques
- Making a specific asset more difficult to attack through reinforcement and barriers (Correct answer)
- Relocating valuable assets to a less visible area
- Increasing the number of patrols around a perimeter
Correct answer: Making a specific asset more difficult to attack through reinforcement and barriers
Target hardening involves physical modificationsāreinforced doors, locks, bollards, glazingāthat increase the effort and time required for an attacker to succeed.
SSP Physical Security Design & Implementation 5
Which type of door lock is classified as 'fail-safe' in fire egress scenarios?