CAS-002 · Question #585
A company has been purchased by another agency and the new security architect has identified new security goals for the organization. The current location has video surveillance throughout the…
The correct answer is A. Proximity readers C. Biometric readers. The requirements call for electronic access logging, access control, and two-factor authentication. Proximity readers combined with biometric readers satisfy all three requirements using two distinct authentication factors.
Question
Options
- AProximity readers
- BVisitor logs
- CBiometric readers
- DMotion detection sensors
- EMantrap
How the community answered
(36 responses)- A72% (26)
- B6% (2)
- D17% (6)
- E6% (2)
Why each option
The requirements call for electronic access logging, access control, and two-factor authentication. Proximity readers combined with biometric readers satisfy all three requirements using two distinct authentication factors.
Proximity readers authenticate using a physical card or token (something you have) and automatically log entry and exit timestamps and locations, directly satisfying requirements 1 and 2.
Visitor logs are a manual, paper-based control that do not provide automated electronic logging or enforce access control for employees.
Biometric readers authenticate using a physical characteristic such as a fingerprint or retina scan (something you are), providing the second distinct factor required by requirement 3 when combined with proximity cards.
Motion detection sensors are used for surveillance alerting and do not control, log, or authenticate personnel entry and exit.
A mantrap provides physical access delay and prevents tailgating but does not inherently implement two-factor authentication or automated electronic entry logging.
Concept tested: Physical two-factor authentication with access logging
Source: https://csrc.nist.gov/publications/detail/sp/800-116/r1/final
Topics
Community Discussion
No community discussion yet for this question.