SK0-005 Practice Question: A security team is reviewing physical security controls for a data center that houses…
A security team is reviewing physical security controls for a data center that houses several CompTIA Server+ managed servers. The team wants to implement measures that specifically prevent unauthorized personnel from accessing server racks and deter tailgating. (Choose two.)
⚠ Common exam trap
Many candidates confuse logical security controls like encryption or network segmentation with physical access controls that actually stop people at the door.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Deploy a mantrap or access vestibule at the entrance
Electronic badge readers and a mantrap directly address physical access control. Badge readers authenticate individuals at the entrance, while a mantrap enforces one-person-at-a-time entry to prevent tailgating. Together they provide layered physical security for the data center and server racks, meeting the requirement to deter unauthorized access.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure a VLAN for out-of-band management
Why it's wrong here
An out-of-band management VLAN separates management interfaces, such as iDRAC or iLO, from production traffic, reducing their exposure on the network. It is a logical network control: it does nothing to stop a person walking into the data centre or following someone through a door. The question asks specifically for physical controls against unauthorised access and tailgating, such as badge readers and mantraps.
- ✗
Implement RAID 6 on all server storage arrays
Why it's wrong here
RAID 6 provides disk fault tolerance and protects against data loss from multiple drive failures. It is a data availability measure, not a physical access control. It does nothing to prevent unauthorized personnel from entering the data center or accessing server racks, so it does not meet the stated requirement.
- ✓
Deploy a mantrap or access vestibule at the entrance
Why this is correct
A mantrap, now usually called an access control vestibule, has two interlocking doors: the second opens only after the first has closed, often admitting one person at a time and sometimes checked by weight sensors or cameras. That directly stops tailgating, where an unauthorised person follows an authorised one inside. It works best combined with badge readers, so each person authenticates individually.
- ✗
Enable full-disk encryption with BitLocker on all servers
Why it's wrong here
BitLocker encrypts data at rest and protects against data theft if drives are removed. It does not control physical access to the data center or server racks. While it is a valuable security control, it does not prevent tailgating or unauthorized entry, so it is not relevant to this physical security scenario.
- ✓
Install electronic badge readers on the data center entrance door
Why this is correct
Electronic badge readers only open the door for people with valid credentials, record each entry with time and identity, and allow access to be revoked immediately when someone leaves. That prevents unauthorised entry and gives an audit trail. Badges alone do not stop someone following an authorised person through the door, which is why they are paired with a mantrap to handle tailgating.
Go deeper
Related to this question
Learn chapter
Troubleshooting Security Issues and Using Diagnostic Tools
Key term
Physical Security Measures
Physical security measures are tangible controls and barriers that protect computer hardware, data centers, and network equipment from unauthorized physical access, theft, damage, or environmental threats.
Key term
Access control
Access control is the security practice of determining who or what is allowed to view, use, or enter a resource, and under what conditions.
About these practice questions
One of 414 original SK0-005 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
You might also like
Similar SK0-005 questions
- A mid-sized e-commerce company experienced a ransomware attack that encrypted all on-premises servers and their locally…
- A company's disaster recovery plan requires that a critical database server be restored at an alternate site within a re…
- A large financial services company must comply with federal regulations mandating quarterly disaster recovery tests. The…
- A company operates a rack of servers in a shared datacenter. Management wants to ensure that if a malicious actor gains…
- A company stores nightly full backups on an external USB drive that is rotated weekly and kept in a locked cabinet in th…
Written and reviewed by Johnson Ajibi, MSc IT Security
Security Systems Architect · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This SK0-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SK0-005 exam.