Physical Security
What type of barrier is used to restrict entry through a doorway?
A lock or locked door. Accept a badge-controlled door
What is authentication?
Verifying that a person or system is who they claim to be.
What is a vulnerability?
A weakness that could be exploited to compromise an asset or security
Is a locked door primarily preventive, detective, or corrective?
Preventive: it helps stop unauthorized access.
True or False: A security vulnerability must be exploited before it becomes a risk.
False: Risk can exist even if the vulnerability has not been exploited
Besides people, what else can serve as a physical security threat?
What is the difference between authentication and authorization?
Authentication verifies identity; authorization determines what an authenticated user is allowed to access.
What is tailgating in cybersecurity?
An unauthorized person follows an authorized individual through a controlled entrance without independently gaining permission.
What category of control is a security camera primarily used for?
Detective: it allows monitoring and supports detecting or investigating events.
What two factors are used to assess risk?
Likelihood & Impact
What is a mantrap / sally port / vestibule?
A secured entry area with two interlocking doors that controls entry, usually allowing only one door to open at a time.
What is the Principle of Least Privilege?
Giving users only the access necessary to perform their responsibilities.
What type of attack manipulates people into revealing information or bypassing security?
Social Engineering
What is the difference between a preventive and a detective control?
Preventive controls aim to stop an incident; detective controls identify or record incidents or violations.
Why are access logs useful when investigating a physical security breach?
They help establish who accessed a location and when, supporting timelines and investigation
A company discovers that malware has corrupted important files. IT restores the files from a clean backup. What type of control is this?
Corrective
A teacher's ID badge opens every room in the school, including the server room. What security principle is being violated?
Least privilege. The teacher has more access than their role requires
A company stores important equipment in a basement that frequently floods. Identify the threat, vulnerability, and two appropriate safeguards.
Threat: flooding.
Vulnerability: equipment stored in a flood-prone area.
Safeguards: relocate equipment, install water sensors, and improve drainage.
Name all types of security controls.
Give an example for each.
Detective
Corrective
Administrative
What options does one have when responding to risk after determining its severity?
Mitigation
Transference
Avoidance
A server room has a badge reader, a camera, and a locked equipment cabinet. What principle does this illustrate?
Defense in Depth: multiple layers of security protect the same asset.
A badge is stolen and used to enter a restricted building. Recommend TWO controls that would reduce this risk.
Examples: badge plus PIN or biometric verification, rapid badge revocation, entrance guards, or access logging with alerts.
Explain how each helps.
A school receives frequent deliveries. An intruder poses as a delivery worker and persuades a staff member to unlock a restricted door. Identify the attack method and TWO mitigations.
Pretexting (Social Engineering). Mitigations include identity verification, escort policies, staff training, and controlled delivery procedures.
You have $3,000. Cameras cost $2,000, badge access costs $2,500, staff training costs $500, and better locks cost $1,000. Choose the best combination for repeated unauthorized entry and justify it.
Badge access plus training ($3,000) is one defensible choice. Better locks plus cameras ($3,000) may also be justified.
Justify with risk reduction, complementary controls, and budget compliance.
A restricted server room was entered at 2 AM, a laptop is missing, and the access log shows use of a former employee's badge. Identify the likely failure, immediate response, and one long-term improvement.
Failure: former employee's badge was not revoked or deactivated.
Response: report and contain the incident, disable the badge, preserve logs and footage.
Improvement: enforce access revocation during offboarding and regularly audit credentials.