CCNA Physical Security Controls Questions

Cable locks are a simple and effective physical security control to prevent laptop theft by securing the device to a desk or fixed object. This scenario tests the understanding of basic physical deterrents against opportunistic theft in an office environment.

Proper disposal procedures, such as degaussing or physical destruction, ensure that data on decommissioned drives cannot be recovered. This scenario tests understanding of the full lifecycle of physical media security.

Propping open a secured door completely bypasses the access control system, allowing unauthorized individuals to enter the server room undetected. This highlights the importance of maintaining door closure mechanisms to ensure physical security.

A lockable cabinet prevents physical access to the switch, and port security prevents unauthorized devices from connecting to the network. This question tests layered physical and logical security for network infrastructure.

Full-disk encryption protects data at rest, and a BIOS/UEFI password prevents unauthorized booting or tampering with boot settings. This question tests the combination of controls needed for remote device security.

Preventing physical theft requires both a physical lock (cable lock) to secure the device and full-disk encryption (like BitLocker) to protect data if the drive is removed. This is a layered approach.

Tailgating occurs when someone slips in behind an authorized user. A mantrap is a small room with two interlocking doors that only allows one person to pass at a time, effectively preventing tailgating.

Immediately removing an unknown USB device is crucial to prevent potential malware infections or data theft. This scenario tests incident response procedures for physical media threats.

A door closer ensures the door automatically shuts and latches after each use, preventing it from being left ajar. This addresses the root cause of the security gap by maintaining the integrity of the access control system.

Propping open a secured door bypasses all physical access controls, creating an immediate security risk. The first step is to close the door to restore security, then address the policy violation.

Cloning an RFID badge exploits the lack of mutual authentication. Smart cards with cryptographic chips are much harder to clone because they require a private key stored on the card that cannot be easily extracted.

Verifying the caller's identity before making any access changes is a critical security practice to prevent social engineering attacks. This scenario tests the balance between customer service and security protocol.

This question tests knowledge of physical security controls that deter theft. A cable lock physically attaches the laptop to a desk, making it difficult to remove quickly. Key locks on doors alone are insufficient if someone gains access; cable locks provide a secondary layer of defense.

The principle of defense in depth requires multiple layers of security. Storing the key in an unlocked drawer negates the door lock, creating a single point of failure. Proper key management is essential.

Tamper-evident seals provide a visible indicator if a device has been opened, deterring unauthorized physical access to internal components. This question tests understanding of physical security for unattended devices.

A mantrap with two interlocking doors and authentication requirements ensures one-person-at-a-time entry, preventing tailgating and piggybacking. This is the gold standard for high-security areas requiring strict access control.

Propping a door open bypasses access control systems, allowing unauthorized individuals to enter without credentials. This is a common physical security violation that undermines the entire access control mechanism.

Printers with hard drives can retain copies of printed documents. Physically securing the printer in a locked room or cabinet prevents unauthorized persons from removing the drive or accessing the device directly.

Rack-mount locks secure the server chassis within the rack, preventing unauthorized removal or tampering with individual servers. This is a standard physical control for multi-tenant or shared spaces where racks are accessible.

A privacy filter prevents shoulder surfing by limiting the viewing angle of a monitor, protecting sensitive data from being seen by unauthorized individuals. This scenario tests knowledge of visual data protection controls.

For mobile devices, a Kensington lock (cable lock) is a standard, lightweight physical security measure that can be used in various locations to tether the laptop to a fixed object, deterring opportunistic theft.

Loose or damaged cabling is a common cause of intermittent failures in physical access control systems. Checking the physical connection is a logical first step before moving to software or configuration issues.

Biometric locks use unique physical characteristics like fingerprints, eliminating the need for keys or cards that can be lost or stolen. This question tests knowledge of access control methods that combine security with convenience.

Cable locks are simple, effective physical security controls that deter theft by anchoring portable devices to a fixed object. This scenario tests the understanding of basic physical security measures for endpoint devices.

A mantrap uses two interlocking doors to ensure only one person can enter at a time, effectively preventing tailgating. This tests understanding of specialized access controls designed to enforce one-person-per-authentication.

Electronic key card systems provide both access control and audit trails, making them ideal for environments where access needs to be centrally managed and logged. This question tests the ability to match a security requirement to the appropriate control.

Tamper-evident seals show visible signs of removal or tampering, indicating unauthorized access to the server chassis. This is a passive but effective control for detecting physical breaches after they occur.

Biometric systems use unique physical traits (fingerprint, retina) that cannot be lost or easily duplicated. This eliminates the need to reissue credentials if a card or key is lost, though biometrics have their own management challenges.

Asset tracking tags allow the school to identify and recover stolen devices, acting as a deterrent and aiding in recovery. This balances security with usability, as the laptops remain fully functional for students.

Physical security for server rooms should include access control (e.g., electronic lock) and environmental monitoring (e.g., temperature/humidity sensors) to protect equipment. This addresses both security and operational continuity.