N10-009 Question 252
Single answerPhysical security: Camera, LocksA network administrator discovers that several employees have been entering the network closet without authorization and occasionally leaving the door propped open for convenience. The closet contains core switches, patch panels, and a firewall appliance. Management wants a solution that both deters unauthorized entry and provides evidence for incident investigations without requiring a full-time guard. Which solution best meets these requirements?
- A
Install a badge-controlled electronic lock on the closet door and a security camera covering the entrance
- B
Replace the existing patch panels with shielded patch panels to reduce tampering
- C
Disable unused switch ports and rely on port security to prevent physical access issues
- D
Move the firewall rules to a cloud-managed platform so the closet is less sensitive
Show answer and explanation
Correct answer: A
Explanation
This scenario focuses on physical security controls for network infrastructure. Best practice is to use layered physical security for critical spaces such as network closets and server rooms. Locks help prevent unauthorized access, while cameras support deterrence, monitoring, and post-incident review. This aligns with common physical security guidance used in IT environments, where access control and surveillance are paired to protect network equipment from tampering, theft, and service disruption. The other options involve useful technical measures, but they do not directly address the need to control entry and capture evidence of unauthorized access.
- A. Correct.
Correct. A badge-controlled electronic lock restricts physical access to authorized personnel, and a security camera provides monitoring and recorded evidence for investigations. Together, these controls address both prevention and accountability, which is the most appropriate response for a network closet containing critical infrastructure.
- B. Incorrect.
Incorrect. Shielded patch panels are used to help reduce electromagnetic interference in appropriate cabling environments, not to control or monitor unauthorized physical entry. This option does not address the core issue of people entering the closet without permission.
- C. Incorrect.
Incorrect. Disabling unused switch ports and using port security are valid logical or device-level security controls, but they do not prevent someone from physically entering the closet or propping the door open. A candidate might choose this because it improves network security, but it does not solve the stated physical security problem.
- D. Incorrect.
Incorrect. Cloud-managing firewall rules may improve administrative flexibility, but it does not reduce the need to secure the physical network closet. The switches, patch panels, and firewall appliance still require physical protection from tampering, theft, or accidental disconnection.