What are two primary questions that any good physical security system should consider regarding any visitor to the data center?

Question

Options

• A"Who are you?" and "Why are you here?"
• B"Who are you?" and "Where are you going?"
• C"Why are you here?" and "Where did you come from?"
• D"Where did you come from?" and "Where are you going?"

• A
  72% (31)
• B
  16% (7)
• C
  5% (2)
• D
  7% (3)

Explanation

Option A is correct because any robust physical security system must first verify identity ("Who are you?") and then verify purpose ("Why are you here?") - these two questions together establish both authentication and authorization for entry. Identity alone isn't enough; someone could be a legitimate employee with no valid reason to access a restricted area at that time.

Why the distractors fail:

• B ("Where are you going?") is less fundamental than purpose - destination is a detail that follows from why you're there, not a primary gate.
• C ("Where did you come from?") is largely irrelevant to access control; origin doesn't determine whether someone should be admitted.
• D combines two secondary questions (origin and destination) while skipping the most critical one: identity verification.

Memory tip: Think of it as the two-step access control mantra - "Authenticate, then Authorize." "Who are you?" = authentication (prove your identity). "Why are you here?" = authorization (prove you have a legitimate reason). These map directly to the two most fundamental concepts in all of security, making A the only answer that covers both pillars.

No community discussion yet for this question.