CAS-001 · Question #472
An internal committee comprised of the facilities manager, the physical security manager, the network administrator, and a member of the executive team has been formed to address a recent breach at…
The correct answer is B. Place a mantrap at the points with biometric security. A mantrap with biometric security is the correct solution. A mantrap is a physical security control that uses two interlocking doors to create an airlock-style entry point - only one door can open at a time, preventing tailgating and unauthorized entry. Adding biometric…
Question
An internal committee comprised of the facilities manager, the physical security manager, the network administrator, and a member of the executive team has been formed to address a recent breach at a company's data center. It was discovered that during the breach, an HVAC specialist had gained entry to an area that contained server farms holding sensitive financial data. Although the HVAC specialist was there to fix a legitimate issue, the investigation concluded security be provided for the two entry and exit points for the server farm. Which of the following should be implemented to accomplish the recommendations of the investigation?
Options
- AImplement a policy that all non-employees should be escorted in the data center.
- BPlace a mantrap at the points with biometric security.
- CHire an HVAC person for the company, eliminating the need for external HVAC people.
- DImplement CCTV cameras at both points.
How the community answered
(41 responses)- A2% (1)
- B90% (37)
- C2% (1)
- D5% (2)
Explanation
A mantrap with biometric security is the correct solution. A mantrap is a physical security control that uses two interlocking doors to create an airlock-style entry point - only one door can open at a time, preventing tailgating and unauthorized entry. Adding biometric authentication ensures that only verified, authorized individuals can pass through each checkpoint. This directly addresses the recommendation to secure the two specific entry and exit points of the server farm. Option A (escort policy) is a procedural control that depends on human compliance and does not physically prevent unauthorized access. Option C (hiring an in-house HVAC technician) reduces but does not eliminate the problem, as other contractors may still require access. Option D (CCTV) is a detective control only - it records events but does not prevent unauthorized entry.
Topics
Community Discussion
No community discussion yet for this question.