nerdexam
(ISC)2

CISSP-ISSAP · Question #231

You are responsible for security at a building that has a lot of traffic. There are even a significant number of non-employees coming in and out of the building. You are concerned about being able…

The correct answer is A. Implement a sign in sheet at the main entrance and route all traffic through there. A sign-in sheet is the simplest solution because it requires no technology, no infrastructure investment, and works for both employees and non-employees alike - anyone entering signs their name and time, giving you an immediate record of who is in the building. Smart cards (B)…

Identity and Access Management (IAM) Architecture

Question

You are responsible for security at a building that has a lot of traffic. There are even a significant number of non-employees coming in and out of the building. You are concerned about being able to find out who is in the building at a particular time. What is the simplest way to accomplish this?

Options

  • AImplement a sign in sheet at the main entrance and route all traffic through there.
  • BHave all people entering the building use smart cards for access.
  • CImplement biometric access.
  • DImplement cameras at all entrances.

How the community answered

(20 responses)
  • A
    45% (9)
  • B
    15% (3)
  • C
    30% (6)
  • D
    10% (2)

Explanation

A sign-in sheet is the simplest solution because it requires no technology, no infrastructure investment, and works for both employees and non-employees alike - anyone entering signs their name and time, giving you an immediate record of who is in the building. Smart cards (B) only work for pre-registered employees with issued cards, making them useless for visitors and non-employees. Biometrics (C) have the same limitation and add significant cost and setup complexity, violating the "simplest" constraint. Cameras (D) record footage but don't tell you in real time who is present - you'd need to review and identify footage after the fact, which is neither simple nor immediate.

Memory tip: When an exam question says "simplest," eliminate any answer involving technology or infrastructure. A paper log beats a smart card system the moment a visitor walks in without a badge.

Topics

#Visitor Management#Physical Access Control#Entry Point Security#Personnel Accountability

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSAP Practice