Access Control Flashcards
6 cards from real SIA GUARD practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Access Control flashcards as text
What are the three categories of access control measures?
Answer: Physical, electronic, and procedural
Access control uses three categories: Physical (locks, barriers, fences), Electronic (card readers, biometrics, keypads), and Procedural (visitor policies, sign-in procedures, escort requirements).
What is a 'biometric' access control system?
Answer: A system that verifies identity using unique physical characteristics such as fingerprints, iris scans, or facial recognition
Biometric systems use unique physical characteristics to verify identity — such as fingerprints, iris patterns, facial geometry, or hand geometry. They are highly secure because biological features cannot be easily shared or duplicated.
What should a security guard do when a delivery driver arrives at a controlled access point?
Answer: Verify their identity, check the delivery is expected, log their details, issue a temporary pass, and direct them to the correct delivery point
The guard should verify the driver's identity and the delivery details, check with the relevant person that the delivery is expected, log the driver's details, issue a temporary pass, and direct them to the correct delivery area.
What does 'defence in depth' mean in the context of access control?
Answer: Using multiple layers of security measures so that if one layer fails, others still provide protection
Defence in depth means implementing multiple layers of security — perimeter fencing, CCTV, patrols, access control, intruder alarms, etc. If one layer is breached, subsequent layers continue to provide protection.
What is the purpose of a 'sign-out' procedure for visitors?
Answer: To ensure all visitors have left the premises, retrieve visitor passes, and maintain an accurate record of who is on site
The sign-out procedure ensures all visitors are accounted for (critical during evacuations), retrieves and deactivates visitor passes, records departure times, and maintains an accurate record of who is currently on site.
What is 'social engineering' in the context of access control?
Answer: Manipulating people through deception to gain unauthorised access — such as pretending to be a contractor or authority figure
Social engineering exploits human psychology rather than technical vulnerabilities. Examples include impersonating contractors, pretending to be from IT support, or creating a fake emergency to bypass security procedures.