📖 What is Mantrap?
A Mantrap is a physical security access control system consisting of a small space with two interlocking doors. The first door must close and lock before the second door can be opened, preventing unauthorized 'tailgating' into a secure area.
"This is a primary physical control used to prevent unauthorized entry by trapping an intruder between two secure points for verification."
📚 Certification: Certified in Cybersecurity (CC)
🔑 What are the Key Concepts of Mantrap?
- ▸ Primary goal is to prevent tailgating and piggybacking by isolating individuals in a small vestibule before granting access to a secure area.
- ▸ Utilizes an interlocking door mechanism where the second door cannot be opened until the first door is completely closed and locked.
- ▸ Often integrates multi-factor authentication, such as combining a badge reader with biometric scanners, to verify identity between the two doors.
- ▸ Serves as a critical physical control for high-security environments like data centers, server rooms, and secure government facilities.
- ▸ Acts as a preventive control that can also function as a detective control if security personnel monitor the vestibule via CCTV.
🎯 How does Mantrap appear on the CC Exam?
You may be asked to identify the most effective physical security control to prevent tailgating in a high-security data center environment where simple badge readers are insufficient to stop unauthorized followers.
A scenario might describe an intruder following an authorized employee into a secure facility; you will be required to select the specific physical control that would have intercepted the intruder.
Expect questions regarding the 'Defense in Depth' strategy, where you must determine how a mantrap fits into a layered physical security approach alongside perimeter fences, security guards, and surveillance cameras.
❓ Frequently Asked Questions
What is the difference between tailgating and piggybacking in the context of a mantrap?
Tailgating occurs when an unauthorized person follows someone without their knowledge, whereas piggybacking happens with the authorized person's consent. A mantrap prevents both by requiring individual authentication for every person entering the secure area.
Can a mantrap be used as a standalone security measure for a data center?
No, it should be part of a defense-in-depth strategy. While it prevents unauthorized entry, it must be paired with other controls like CCTV, motion sensors, and internal locks to ensure comprehensive security.