A technician was dispatched to complete repairs on a server in a data center. While locating the server, the technician entered a restricted area without authorization. Which of the following security controls would BEST prevent this in the future?
A technician was dispatched to complete repairs on a server in a data center. While locating the server, the technician entered a restricted area without authorization. Which of the following security controls would BEST prevent this in the future?
Implementing access control vestibules would best prevent unauthorized access to restricted areas. These vestibules, also known as mantraps, are designed to control entry by requiring individuals to pass through a series of interlocking doors that grant access only to those with appropriate clearance. This approach effectively restricts unauthorized individuals from entering sensitive areas, thereby providing a higher level of security. While signage and monitoring by guards and cameras are helpful, they do not physically prevent entry, and escorts might not always be feasible or practical. Therefore, access control vestibules represent the most robust solution to prevent unauthorized access.
How would the guard know every individual and their access rights? The access control vestibule (AKA Mantrap) seems to be more appropriate to me.
it wouldnt stop them just inform them
I chose escort as it mentions the tech is already in the DC. In my experience a mantrap is usually located near the entrance, the question seems to suggest he is already in the DC and walking around. It's a poorly worded question IMO though. When they talk about an area are they referring to say a few rows where racks are in a DC or are the talking about a room? If its a room then mantrap, if its the fortmer then escort.
confusing because after the mantraps engineer can access anywhere
I disagree. Many companies have restricted areas within their perimeter, and they are usually accessed with the badge by employees with a specific clearance.
I think this would also depend on the company. Where I work, we have a vestibule to go through when you walk in, but in our higher security places, they have a separate one to go through. I don't fully disagree with D, but I think that C is the better answer here.
Former telco guy here..in the past I used to frequently visit our colo and was always escorted by a DC staff member and made sure I went into "OUR" cage where our equipment resided. However, since Comptia is in love with "mantraps" and "vestibules", I am going with that..horrible question
Mantraps are ONLY at the entrance to the Data Center. I've NEVER in my 25 years in IT seen a mantrap WITHIN a Data Center but only at the entrance. Look at this definition of a Security Vestibuile: Access control vestibules, also known as security or mantrap vestibules, are a highly effective means of hardening commercial security. These enclosed entryways are designed to restrict and monitor access to a building by allowing only one person to enter at a time, typically through a series of interlocking doors. The function is not to restrict users WITHIN the data center. Its used to stop more than one person from going into a datacenter at one time or to prevent someone from stealing something. Its NOT to prevent someone from going into OTHER sections of the data center. The correct answer has to be D not C because thats not the function of MANTRAPS!!!
Honestly our perspective,D is the right answer believe me I know I work in IT and based on certain projects to go in the Data Center/Classified Comm room visitors need to sign a sheet and be escorted sometimes set appointment to even get escorted. CompTIA is tricky so we need to go base on what they think and honestly just an escort I highly doubt Comptia would have that as there answer I’ll go with C
I actuallt went right ahead with letter D for the same reason
It all depends on the Data Center because I personally worked as an Engineer, and we had to notify the site ahead of time that we were coming onsite. At that time, they would issue us a badge that would give access to the room we needed to enter to work on a server. At other sites they have someone who would escort you to the room you suppose to enter, and they have cameras everywhere to monitor if you are wondering the halls. So the Mantrap in my opinion would be the best choice. The Mantrap makes sure you can only enter the room they give you access to.
You could make an argument for either Implement access control vestibules OR Enforce escorts to monitor all visitors But no way would cameras "prevent" such a thing from recurring. Bad question.
honestly, i am confused, whats the correct answer according to comptia guys ?
go ask them
In my opinion - i think the correct answer is B If the CCTV is monitored to know who enters the restricted area - A mantrap will still not prevent an unauthorized person , a mantrap prevents social engineering attacks
C. Implement access control vestibules. Access control vestibules, also known as mantraps or airlocks, are physical security measures designed to control access to a secured area. They typically consist of a small enclosed space with two sets of interlocking doors. To gain access to the secured area, an individual must first enter the vestibule, wait for the outer door to close and be authorized, and then the inner door will open. This helps prevent unauthorized individuals from entering restricted areas by providing an additional layer of security.
The access control vestibule
Not sure why it says answer is B. That may not prevent it in the future. A mantrap would
Only C and D actually could prevent access, and of the two, C seems a lot more plausible than having an escort for each visitor.
Question, states techie entered (just strolling along) into a restricted area without "authorization" there's only one answer that has access control in it. I'm going with Vestibules... you can have one without access control but this one is top'o the line probably has a cute little beep when you tap your RFID on it and it validates access... or not (for this person anyways)
No clue what the correct answer is but I'll go with "Implement access control vestibules." It's probably the closest to what CompTIA is thinking: "access control"
He is not a visitor he is a technician who did not have access...."Access" >'keyword'<
Definitely not B We have visitor badges that state escort required for just such a scenario. The AC Vestibule would not control un/authorized access to the DC unless we're supposed to assume that directly following the AC Vestibule is the DC.