Question

you are a security consultant and have been hired to evaluate an organizations physical security practices. all employees must pass through a locked door to enter the main work area. access is restricted using a biometric fingerprint lock.
a receptionist is located next to the locked door in the reception area. she uses an ipad application to log any security events that may occur. she also uses her ipad to complete work tasks as assigned by the organizations ceo.
what could you do to add an additional layer of security to this organization?
move the receptionists desk into the secured area.
train the receptionist to keep her ipad in a locked drawer.
replace the biometric locks with smart cards.
require users to use workstation screensaver passwords.

Explanation:

The iPad is used for security event logging and work tasks, so securing it prevents unauthorized access to sensitive security or organizational data. Moving the desk into the secured area removes the receptionist from the entry point, which is counterproductive. Replacing biometrics with smart cards reduces security (smart cards can be lost/stolen). Workstation screensaver passwords do not add a layer to the physical entry/immediate security process described.

Answer:

B. Train the receptionist to keep her iPad in a locked drawer.