IPA IP 2021 Question 58
A question IPA Japan published in 令和3年度 ITパスポート試験 公開問題 問58, translated into English. ITPEC is based on the same exams.
Which of the following is an appropriate example of a physical security measure that prevents unauthorized entry into a server room by tailgating?
Explanation
Installing a circle-type security gate — a gate that lets one person through at a time stops a second person from slipping in behind an authorized one.
Tailgating (piggybacking) is entering a restricted area right behind someone who has authenticated, before the door closes. A circle-type security gate is a small cylindrical booth with a door on each side: one person steps in and authenticates, and only then does the inner door open, while sensors detect a second person inside. Each authentication admits exactly one person, so nobody can follow another in.
Answer (a)
Why not others:
- •(b) — locking the racks protects the servers from someone already in the room; it does not stop anyone entering
- •(c) — an entry pass worn in the room is a rule, not a barrier; someone who followed an authorized person through the door is already inside
- •(d) — a log book records only those who choose to sign it; a tailgater simply does not
Key rule: Against tailgating, use a mechanism that admits one person per authentication: a circle-type gate, a mantrap, or anti-passback (no exit without a recorded entry).
Security · AI-written, may contain errors
This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.