SY0-701 Security Operations Practice Question
A records room has repeated tailgating after hours and occasional door propping during deliveries. Management wants one control that prevents follow-on entry and another that immediately alerts security if the door is forced open or left ajar. Which two controls best meet the need? Select two.
⚠ Common exam trap
Watch out — candidates often choose a camera (option D) thinking it provides real-time alerting, but a standard visible camera without integrated analytics does not automatically alert on door status—it only records footage for later review.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Install a mantrap at the room entrance.
A mantrap (option A) prevents tailgating by requiring one door to close before the next can open, effectively stopping follow-on entry. A door position sensor (option B) detects when the door is forced open or left ajar and triggers an immediate alert to security via an alarm or SIEM integration, meeting the requirement for real-time notification.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Install a mantrap at the room entrance.
Why this is correct
A mantrap is an enclosed vestibule with two interlocking doors; only one door can open at a time, and the system verifies a single valid credential before unlocking the second door. This physically isolates each entrant, so a second person cannot slip through behind an authorized user, directly eliminating tailgating. It can also be configured with anti-passback logic to prevent badge sharing and repeated entry.
- ✓
Add a door position sensor tied to an alarm or SIEM alert.
Why this is correct
A door position sensor (typically a magnetic reed switch or door contact) monitors the open/closed state and sends an alarm to a SIEM or security console when the door is opened without an access event, forced, or held open beyond a preset time. This provides immediate, real-time notification of tailgating or propping, and the SIEM correlates door events with badge logs to identify anomalies and support investigation. Unlike a camera, it actively triggers an alert and requires no human watching.
- ✗
Place a larger warning sign on the wall beside the door.
Why it's wrong here
A larger warning sign relies on deterrence and does not physically prevent tailgating or provide any alert when it occurs. Signs may increase awareness but are ineffective against intentional or even accidental piggybacking, and after-hours access controlled by a lock is not reinforced by signage. It does not alter the door's operation or add any detection capability.
- ✗
Mount a visible camera over the door only.
Why it's wrong here
A visible camera only records video; it cannot stop tailgating in real time unless a guard is actively monitoring the feed 24/7. The camera provides evidence after the fact but no automatic alert for a door opened by an unauthorized follower after hours. Without analytics or integration with access control, it does not address the root cause of door entry.
- ✗
Replace the mechanical lock with the same type of lock and no monitoring.
Why it's wrong here
Replacing the mechanical lock with the same type of lock and no monitoring simply restores the existing state and leaves the tailgating vulnerability unchanged. A basic lock authenticates a key but cannot detect whether another person slips in behind an authorized individual, nor can it report door abuse or forced entry. This option is the same physical control with no added detection, alerting, or entry restriction.
Go deeper
Related to this question
Learn chapter
Identity and Access Management
Key term
Tailgating
Tailgating is a physical security breach where an unauthorized person follows an authorized person into a restricted area without proper authentication.
Key term
SIEM
SIEM (Security Information and Event Management) is a system that collects and analyzes log data from across an IT environment to detect and respond to security threats in real time.
About these practice questions
This SY0-701 question is part of Courseiva's 1,013-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SY0-701 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SY0-701 exam.