220-1102 Question 322
Single answerPhysical access securityA small medical office stores patient records on an on-premises server located in a back room near a public hallway. Staff members have noticed that delivery personnel sometimes follow employees through the door when it is opened, and the server room door is occasionally propped open during busy periods. The office manager asks the IT technician for the BEST physical security improvement to reduce unauthorized entry into the server room while still allowing authorized staff to enter efficiently. Which of the following should the technician recommend?
- A
Install a mantrap with badge access between the hallway and the server room
- B
Place a privacy screen filter on the receptionist's monitor
- C
Require employees to use stronger passwords on their workstations
- D
Enable full-disk encryption on the server
Show answer and explanation
Correct answer: A
Explanation
The best answer is to install a mantrap with badge access because the scenario is specifically about preventing unauthorized physical entry caused by tailgating/piggybacking and poor door control. In A+ Core 2, physical access security controls such as badge readers, locks, mantraps, and surveillance are used to protect systems and sensitive areas from unauthorized access. A mantrap is especially effective when people are following others into restricted spaces. By contrast, privacy screens address visual security, strong passwords address logical authentication, and full-disk encryption protects stored data rather than controlling room entry. This aligns with standard security best practices of applying the control that most directly mitigates the identified risk and using layered security for sensitive environments such as offices handling protected health information.
- A. Correct.
Correct. A mantrap is a physical access control solution designed to prevent tailgating and piggybacking by allowing one person through a controlled space at a time, often using badge readers or other authentication methods. In this scenario, unauthorized individuals are entering by following staff through the door, so a mantrap directly addresses the specific physical access problem while still permitting authorized entry.
- B. Incorrect.
Incorrect. A privacy screen filter helps prevent shoulder surfing by limiting viewing angles on a display, which protects visual data confidentiality. However, it does not prevent unauthorized people from physically entering the server room, which is the core issue in this scenario.
- C. Incorrect.
Incorrect. Stronger passwords improve logical access security for workstations and systems, but they do not control who can physically enter the server room. This option reflects a common misconception of applying a cybersecurity control to a physical security problem.
- D. Incorrect.
Incorrect. Full-disk encryption helps protect data if a device or drive is stolen or accessed offline, but it does not stop unauthorized individuals from entering the room in the first place. While encryption is a useful defense-in-depth measure, it is not the best immediate solution to tailgating and a door being propped open.