CAS-002 · Question #359
An internal committee comprised of the facilities manager, the physical security manager, the network administrator, and a member of the executive team has been formed to address a recent breach at…
The correct answer is B. Place a mantrap at the points with biometric security. A mantrap with biometric authentication is the correct physical security control to enforce authenticated, one-at-a-time access at both entry and exit points of a sensitive server farm.
Question
An internal committee comprised of the facilities manager, the physical security manager, the network administrator, and a member of the executive team has been formed to address a recent breach at a company's data center. It was discovered that during the breach, an HVAC specialist had gained entry to an area that contained server farms holding sensitive financial data. Although the HVAC specialist was there to fix a legitimate issue, the investigation concluded security be provided for the two entry and exit points for the server farm. Which of the following should be implemented to accomplish the recommendations of the investigation?
Options
- AImplement a policy that all non-employees should be escorted in the data center.
- BPlace a mantrap at the points with biometric security.
- CHire an HVAC person for the company, eliminating the need for external HVAC people.
- DImplement CCTV cameras at both points.
How the community answered
(15 responses)- B93% (14)
- D7% (1)
Why each option
A mantrap with biometric authentication is the correct physical security control to enforce authenticated, one-at-a-time access at both entry and exit points of a sensitive server farm.
An escort policy is an administrative control that depends on human compliance and does not create a technical or physical barrier at the entry and exit points identified in the investigation.
A mantrap is a physical security vestibule with two interlocking doors - only one can open at a time - that forces individuals to authenticate before proceeding, effectively securing both entry and exit points simultaneously. Adding biometric authentication ensures that only verified, authorized personnel can pass through, directly addressing the gap that allowed an HVAC specialist unrestricted access to an area containing sensitive financial data.
Hiring an internal HVAC technician eliminates one category of external visitor but does not address the physical access control vulnerability at the server farm entry points, as internal employees can also pose security risks.
CCTV cameras are a detective control that records events after they occur but do not prevent unauthorized individuals from entering or exiting the secured area.
Concept tested: mantrap physical access control for data center security
Source: https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final
Topics
Community Discussion
No community discussion yet for this question.