Physical Security - CompTIA A+ 220-1002 - 2.1

Mantraps and Physical Security

This section discusses mantraps, a common form of physical security used to manage who is able to move through a particular area at any particular time. It also covers different ways to physically lock and unlock doors.

Mantrap

• A mantrap is a small area with two doors where only one person or very few people are able to move through at any particular time.

• Both doors are unlocked, but as soon as the first door is open, the other door locks.

• The real key with the mantrap is you never have both doors open at the same time.

• You can bring a number of people into the mantrap and then process them.

Physical Locks

• Conventional lock and key or deadbolt are common ways to physically lock and unlock a door solidly in place.

• Electronic locks may be used in environments where there may be many people going in and out of the door.

• Token-based entry involves using some type of device to provide a token or certificate to gain access to that resource.

Token-Based Access Control

This section covers different types of token-based access control methods such as smart cards, USB tokens, hardware or software-based token generators.

Smart Cards

• Smart cards are commonly used with desktop and laptop systems that can be integrated with an ID card.

• Inserting that card into the computer or the door grants access to those resources.

• Often combined with personal identification numbers for added security.

USB Tokens

• A certificate or token would go on the USB drive, which would be inserted to gain access to the resource.

Hardware/Software-Based Token Generators

• Pseudo-random number generators can create random numbers on devices like key fobs.

• Software-based token generators operate on a mobile phone app.

• Your phone itself may be an authentication device.

Security Guards and ID Badges

This section covers the role of security guards in physical security and the use of ID badges to check that people who are in the building are supposed to be there.

Security Guards

• A security guard is responsible for allowing access to or from a particular area.

• They can also be in charge of making sure that only employees are entering the building.

• Guests may check in at the security guard station to gain access to the building.

ID Badges

• Many organizations provide employees with an ID badge that has their name and other information about their employment.

• This is a good way to check that people who are in the building are supposed to be there.

Biometric Authentication

This section discusses biometric authentication and how it works.

How Biometric Authentication Works

• Biometric authentication validates a part of you, such as your voice print or fingerprint.

• The system stores a mathematical representation of your fingerprint rather than an actual image.

• It is difficult to change something biometrically, making it a reliable form of authentication.

• However, biometric authentication is not foolproof and is often combined with other forms of authentication.

Physical Security Measures

This section covers physical security measures that can be used to protect devices and equipment.

Cable Locks

• Cable locks can be used to physically tether devices in an office or mobile environment.

• These locks are not designed to be a long-term security solution but can provide temporary protection.

Data Center Cabinets

• Data center cabinets are usually locked to prevent unauthorized access to the equipment inside.

• The limited amount of room in data centers means that racks are placed close together, making locks necessary for protection.

USB Interface Locks

• Physical locks can be used to connect to USB interfaces on computers.

• These secondary security devices should be used in conjunction with disabling the interfaces in the BIOS of the computer.

Privacy Filters

• Privacy filters can be placed over laptop screens so that only the person directly in front of the screen can see what's on it.

• From a best practice perspective, it's always a good idea to sit where no one's able to see your screen when you're using it.