CSM Physical Security & Access Control Flashcards
6 cards from real CSM practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 CSM Physical Security & Access Control flashcards as text
Which perimeter security element is designed to prevent vehicle ramming attacks against a building?
Answer: Crash-rated bollards
Crash-rated bollards are engineered to stop vehicles at specified speeds and weights, protecting buildings from vehicle-borne attacks.
The Crime Prevention Through Environmental Design (CPTED) strategy of 'natural surveillance' is best achieved by:
Answer: Designing spaces to maximize visibility and eliminate concealment opportunities
Natural surveillance uses landscaping, lighting, and architectural design to maximize sightlines so potential offenders feel observed without relying on technology.
When classifying security zones in a facility, which zone typically requires the highest level of access restriction?
Answer: Restricted/secure zone
Restricted or secure zones house the most sensitive assets and require the most stringent access controls, typically limited to vetted personnel with a specific need.
A key card reader that logs every entry and exit attempt, including failed attempts, supports which security principle?
Answer: Accountability and auditability
Logging all access attempts creates an audit trail that supports accountability, enabling security managers to investigate incidents and detect anomalies.
What is the primary purpose of conducting periodic access control list (ACL) reviews?
Answer: To ensure access rights remain appropriate as roles change and remove unnecessary permissions
Regular ACL reviews identify and revoke stale or excess permissions caused by role changes, terminations, or privilege creep, maintaining the principle of least privilege.
According to ASIS standards, what is the recommended action when an employee's access card is reported lost or stolen?
Answer: Immediately deactivate the card and issue a replacement after identity verification
Immediate deactivation eliminates the window of opportunity for unauthorized use, while re-issuance after verification ensures the legitimate user regains access quickly.