SSCP Security Operations and Administration Practice Question
A security administrator is implementing physical security for a data center. Which THREE of the following controls should be included to provide layered security?
⚠ Common exam trap
Candidates often confuse administrative or logical controls (like screen locks or clean desk policies) with physical security controls, which must be tangible barriers or detection systems that protect the facility's perimeter and access points.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Mantrap at the main entrance
A mantrap at the main entrance (A) is correct because it creates a physical buffer zone that allows only one person through at a time, preventing tailgating and piggybacking into the facility. CCTV monitoring of all entry points (C) is correct because it provides continuous surveillance and recording of access points, enabling detection, deterrence, and forensic review of security incidents. Biometric readers on server room doors (E) are correct because they enforce strong authentication based on unique physiological traits for the most sensitive area, adding a distinct layer beyond perimeter controls. Screen locks on workstations (B) and a clean desk policy (D) are administrative and logical controls for protecting information, not physical controls for securing a data center's entry points and rooms.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Mantrap at the main entrance
Why this is correct
A mantrap permits only one person through at a time, using interlocking doors to prevent tailgating and credential passback. It enforces strict identity verification at the perimeter, forming the outermost layer of defence-in-depth for the data centre.
- ✗
Screen locks on all workstations
Why it's wrong here
Screen locks are logical access controls protecting unattended sessions; layered physical security requires perimeter, interior and rack-level measures such as bollards, mantraps, biometric readers and locked cabinets. It is tempting because workstation hardening is a recognised control, but it does not restrict physical entry to the data centre.
- ✓
CCTV monitoring of all entry points
Why this is correct
CCTV monitoring records and deters activity at every entry point, providing detective and deterrent coverage across the facility. Continuous surveillance supports incident investigation and alerts staff to unauthorised access attempts, complementing preventive controls in the layered physical scheme.
- ✗
Clean desk policy for employees
Why it's wrong here
A clean desk policy governs document and media handling in workspaces, not data centre entry, so it adds no barrier against physical intrusion. It is tempting because it is a genuine administrative control, and it would be correct for protecting information in office areas against shoulder surfing or document theft.
- ✓
Biometric readers on server room doors
Why this is correct
Biometric readers authenticate identity using a unique physical trait, which cannot be shared, borrowed or guessed like a password or badge. Restricting server room access to verified individuals adds a strong preventive layer protecting the most sensitive assets.
Go deeper
Related to this question
About these practice questions
One of 971 original SSCP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.