IPA IP 2022 Question 74
A question IPA Japan published in 令和4年度 ITパスポート試験 公開問題 問74, translated into English. ITPEC is based on the same exams.
In the entry and exit control of an area protected by security, such as a server room, which of the following is used as a measure to prevent tailgating, where other persons also enter the room together on the authentication of one person?
Explanation
Anti-passback — an entry control system that refuses an exit (or a re-entry) that has no matching recorded entry, so people who slipped in behind someone else are caught.
With anti-passback, each person must authenticate on the way in and on the way out, and the system records whether each ID is inside or outside the area. A person who tailgated in has no entry record, so their card is refused when they try to leave; a card cannot be passed back to a second person to enter again either. Since everyone must authenticate individually, tailgating is discouraged.
Answer (a)
Why not others:
- •(b) Callback — a remote access check: the server hangs up and calls back a registered number to confirm the caller
- •(c) Single sign-on — one authentication gives access to several systems; a convenience for users, not physical entry control
- •(d) Backdoor — a hidden way into a system that bypasses authentication, left by an attacker or developer: a threat, not a countermeasure
Key rule: Tailgating (piggybacking) is countered by making every person authenticate: anti-passback that requires a matching entry before an exit, mantraps, and turnstiles that let one person through at a time.
Security · AI-written, may contain errors
This question comes from the past questions IPA Japan publishes, translated into English by ITPEC Practice. ITPEC Practice is an independent study tool and is not affiliated with IPA or ITPEC. See the original paper (PDF) or Report an issue.