CISA Protection of Information Assets Practice Question
An IS auditor is reviewing physical security controls at a data center. The data center hosts critical servers and uses a badge access system with PINs, CCTV cameras, and a mantrap entry. The auditor observes that employees sometimes hold the door open for others without badging. Which TWO of the following are the MOST effective controls to address this tailgating risk?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Conducting security awareness training on tailgating risks
Mantraps are specifically designed to prevent tailgating by allowing only one person at a time. Security awareness training educates employees on the risks of tailgating. Increasing camera coverage and PIN complexity do not directly prevent tailgating.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Conducting security awareness training on tailgating risks
Why this is correct
Training reduces the likelihood of employees allowing tailgating.
- ✗
Requiring longer and more complex PINs
Why it's wrong here
PIN complexity does not prevent tailgating.
- ✗
Installing additional access points
Why it's wrong here
More access points could increase risk.
- ✗
Increasing the number of CCTV cameras
Why it's wrong here
Cameras are detective, not preventive.
- ✓
Implementing a mantrap with biometric authentication
Why this is correct
Mantraps physically prevent more than one person from entering at a time.
Go deeper
Related to this question
About these practice questions
This CISA question is part of Courseiva's 995-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.