CISSP-ISSAP · Question #1
You are the Security Consultant advising a company on security methods. This is a highly secure location that deals with sensitive national defense related data. They are very concerned about…
The correct answer is C. Using a man-trap. A man-trap (option C) is a physical security vestibule with two interlocking doors: the first door must fully close and authenticate before the second opens. This creates a holding chamber that physically prevents anyone from running out of a building with stolen equipment…
Question
You are the Security Consultant advising a company on security methods. This is a highly secure location that deals with sensitive national defense related data. They are very concerned about physical security as they had a breach last month. In that breach an individual had simply grabbed a laptop and ran out of the building. Which one of the following would have been most effective in preventing this?
Options
- ANot using laptops.
- BKeeping all doors locked with a guard.
- CUsing a man-trap.
- DA sign in log.
How the community answered
(50 responses)- A16% (8)
- B6% (3)
- C70% (35)
- D8% (4)
Explanation
A man-trap (option C) is a physical security vestibule with two interlocking doors: the first door must fully close and authenticate before the second opens. This creates a holding chamber that physically prevents anyone from running out of a building with stolen equipment - the thief would have been trapped before reaching the exit.
Why the other options fall short:
- A (No laptops) is an operational workaround, not a security control, and would cripple business function in a defense environment that likely needs mobile workstations.
- B (Locked doors + guard) relies on human reaction time - a determined individual can push past a guard or rush through a door before it closes, as demonstrated by the breach itself.
- D (Sign-in log) is a detective control, not a preventive one - it records who came and went, but does nothing to stop the theft in the moment.
Memory tip: Think of a man-trap as an "airlock for people." Just as a spacecraft airlock prevents a vacuum breach by requiring one door to seal before the other opens, a man-trap seals exits against unauthorized departures. If the question mentions someone physically running out with something, the answer is almost always the man-trap - it's the only control that physically stops egress.
Topics
Community Discussion
No community discussion yet for this question.