Security Services Access Control 2 — Questions and Answers
Question 1: What is an 'access control list' (ACL)?
- A list of security violations
- A register that specifies who is permitted or denied access to specific resources (Correct answer)
- A guard's daily patrol log
- A list of emergency contacts
Correct answer: A register that specifies who is permitted or denied access to specific resources
An ACL is a table of rules that specifies which users or systems are granted or denied access to particular resources or areas.
Question 2: What is 'credential management' in access control?
- Managing employee salaries and benefits
- The process of issuing, tracking, and revoking access credentials (Correct answer)
- Storing passwords in a database only
- Managing security guard schedules
Correct answer: The process of issuing, tracking, and revoking access credentials
Credential management involves the complete lifecycle of access credentials including issuance, tracking, updating, and revoking when no longer needed.
Question 3: What should be done with an access card when an employee is terminated?
- Keep it active for a few weeks just in case
- Return it to the employee as a memento
- Immediately deactivate or revoke the access card (Correct answer)
- Leave it active until the end of the billing month
Correct answer: Immediately deactivate or revoke the access card
Access credentials must be immediately revoked upon employee termination to prevent unauthorized access to the facility.
Question 4: What is 'multi-factor authentication' (MFA)?
- Using multiple passwords on one account
- Verifying identity using two or more different types of authentication factors (Correct answer)
- Having multiple security guards verify entry
- Using multiple access cards at once
Correct answer: Verifying identity using two or more different types of authentication factors
MFA requires two or more verification factors from different categories to significantly increase security beyond a single password.
Question 5: What is the purpose of an audit trail in access control systems?
- To provide entertainment for security managers
- To record a log of all access events for accountability and investigation (Correct answer)
- To schedule security guard patrols
- To count how many people enter the building daily
Correct answer: To record a log of all access events for accountability and investigation
An audit trail records all access events including who accessed what, when, and from where, enabling accountability and forensic investigation.
Question 6: What does 'segregation of duties' mean in access control?
- Separating security guards by shift
- Dividing tasks so no single person has complete control over a critical process (Correct answer)
- Creating separate security zones for different departments
- Assigning different uniforms to different teams
Correct answer: Dividing tasks so no single person has complete control over a critical process
Segregation of duties divides critical tasks among multiple people to prevent fraud, errors, and unauthorized activities by any single individual.
Security Services Access Control 2
What is an 'access control list' (ACL)?