ITPEC IP October 2023 Question 35
All employees are registered in an entry control system with biometric authentication, and the employees who are allowed to enter each room within the company are specified. The exit from a room is not controlled. Among the following lists of the descriptions A through D, which is the list that contains all and only the items that can be achieved by the entry control system?
Explanation
A and C — an entry-only system can decide and log every attempt to enter a room, but it never sees anyone leave.
At each door the employee presents a biometric trait; the system identifies the person and checks whether they are allowed into that room. So it can open only for authorized employees (A) and log every attempt with the person's identity, refused ones included (C). The length of a stay (B) needs an exit time, and the number of people inside (D) needs entries minus exits. Exits are not controlled, so neither can be worked out.
Answer (b)
Why not others:
- •(a) A, B, C — includes B: with no exit record there is no end time, so the stay cannot be measured
- •(c) A, D — includes D, which needs exits as well as entries, and omits C, which the system can record
- •(d) B, C, D — omits A, the basic function of access control, and includes B and D, which both need exit data
Key rule: Knowing who is inside or how long they stayed requires recording both ends of a visit; entry-only control yields authorization and a log of entry attempts, nothing more.
Security · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.