CISSP-ISSAP · Question #192
Which of the following can be configured so that when an alarm is activated, all doors lock and the suspect or intruder is caught between the doors in the dead-space?
The correct answer is A. Man trap. A man trap is a physical security control consisting of a small, enclosed space with two sets of interlocking doors - when an alarm triggers, both doors lock simultaneously, trapping the intruder in the dead-space between them until authorities arrive. This makes it ideal for…
Question
Which of the following can be configured so that when an alarm is activated, all doors lock and the suspect or intruder is caught between the doors in the dead-space?
Options
- AMan trap
- BBiometric device
- CHost Intrusion Detection System (HIDS)
- DNetwork Intrusion Detection System (NIDS)
How the community answered
(40 responses)- A93% (37)
- C3% (1)
- D5% (2)
Explanation
A man trap is a physical security control consisting of a small, enclosed space with two sets of interlocking doors - when an alarm triggers, both doors lock simultaneously, trapping the intruder in the dead-space between them until authorities arrive. This makes it ideal for high-security entry points like data centers or secure facilities.
Why the distractors are wrong:
- B. Biometric device - authenticates identity (fingerprint, retina scan) but does not physically contain intruders; it controls access, not capture.
- C. HIDS - monitors a single host for suspicious activity (file changes, log anomalies) and generates alerts; it has no physical mechanism.
- D. NIDS - monitors network traffic for intrusion signatures; it's entirely software/network-based and cannot lock doors.
Memory tip: Think of a man trap like a "physical firewall" - just as a firewall sits between two network zones and controls what passes through, a man trap sits between two physical zones and stops unauthorized passage. The word "trap" itself is the giveaway: it's designed to catch someone, not just detect or authenticate.
Topics
Community Discussion
No community discussion yet for this question.