nerdexam
CompTIA

CAS-002 · Question #585

A company has been purchased by another agency and the new security architect has identified new security goals for the organization. The current location has video surveillance throughout the…

The correct answer is A. Proximity readers C. Biometric readers. The requirements call for electronic access logging, access control, and two-factor authentication. Proximity readers combined with biometric readers satisfy all three requirements using two distinct authentication factors.

Enterprise Security

Question

A company has been purchased by another agency and the new security architect has identified new security goals for the organization. The current location has video surveillance throughout the building and entryways. The following requirements must be met: 1. Ability to log entry of all employees in and out of specific areas 2. Access control into and out of all sensitive areas 3. Two-factor authentication Which of the following would MOST likely be implemented to meet the above requirements and provide a secure solution? (Select TWO).

Options

  • AProximity readers
  • BVisitor logs
  • CBiometric readers
  • DMotion detection sensors
  • EMantrap

How the community answered

(36 responses)
  • A
    72% (26)
  • B
    6% (2)
  • D
    17% (6)
  • E
    6% (2)

Why each option

The requirements call for electronic access logging, access control, and two-factor authentication. Proximity readers combined with biometric readers satisfy all three requirements using two distinct authentication factors.

AProximity readersCorrect

Proximity readers authenticate using a physical card or token (something you have) and automatically log entry and exit timestamps and locations, directly satisfying requirements 1 and 2.

BVisitor logs

Visitor logs are a manual, paper-based control that do not provide automated electronic logging or enforce access control for employees.

CBiometric readersCorrect

Biometric readers authenticate using a physical characteristic such as a fingerprint or retina scan (something you are), providing the second distinct factor required by requirement 3 when combined with proximity cards.

DMotion detection sensors

Motion detection sensors are used for surveillance alerting and do not control, log, or authenticate personnel entry and exit.

EMantrap

A mantrap provides physical access delay and prevents tailgating but does not inherently implement two-factor authentication or automated electronic entry logging.

Concept tested: Physical two-factor authentication with access logging

Source: https://csrc.nist.gov/publications/detail/sp/800-116/r1/final

Topics

#physical access control#two-factor authentication#biometrics#proximity readers

Community Discussion

No community discussion yet for this question.

Full CAS-002 Practice