2.1 - Physical Security

Question 1

Access control vestibule

Answer 1

• All doors normally unlocked
  – Opening one door causes others to lock
• All doors normally locked
  – Unlocking one door prevents others
  from being unlocked
• One door open / other locked
  – When one is open, the other cannot be unlocked
• One at a time, controlled groups
  – Managed control through an area

Question 2

Badge reader

Answer 2

• Magnetic swipe, RFID, or NFC
  – Many different identification methods
• Different applications
  – Time clocks
  – Security guard patrols
  – Door access

Question 3

Video surveillance

Answer 3

• CCTV (Closed circuit television)
  – Can replace physical guards
• Camera features are important
  – Object detection can identify a license plate or
  person’s face
• Often many different cameras
  – Networked together and recorded over time
• Motion detection
  – Radio reflection or passive infrared
  – Useful in areas not often in use

Question 4

Alarm systems

Answer 4

• Circuit-based
  – Circuit is opened or closed
  – Door, window, fence
  – Useful on the perimeter
• Motion detection
  – Identify motion without a camera
• Duress
  – Triggered by a person
  – The big red button

Question 5

Door locks

Answer 5

• Conventional - Lock and key
• Deadbolt - Physical bolt
• Electronic - Keyless, PIN
• Token-based - RFID badge, magnetic swipe card, or key fob
• Biometric - Hand, fingers or retina
• Multi-factor - Smart card and PIN

Question 6

Equipment locks

Answer 6

• Data center hardware is usually managed by different
  groups
  – Responsibility lies with the owner
• Racks can be installed together
  – Side-to-side
• Enclosed cabinets with locks
  – Ventilation on front, back, top, and bottom

Question 7

Guards and access lists

Answer 7

• Security guard
  – Physical protection at the reception area of a facility
  – Validates identification of existing employees
  – Provides guest access
• ID badge
  – Picture, name, other details
  – Must be worn at all times
• Access list
  – Physical list of names
  – Enforced by security guard
• Maintains a visitor log

Question 8

Barricades / bollards

Answer 8

• Prevent access
  – There are limits to the prevention
• Channel people through a specific access point
  – And keep out other things
  – Allow people, prevent cars and trucks
• Identify safety concerns
  – And prevent injuries
• Can be used to an extreme
  – Concrete barriers / bollards
  – Moats

Question 9

Fences

Answer 9

• Build a perimeter
  – Usually very obvious
  – May not be what you’re looking for
• Transparent or opaque
  – See through the fence (or not)
• Robust
  – Difficult to cut the fence
• Prevent climbing
  – Razor wire
  – Build it high