AP Cybersecurity Unit 2 Lesson 4 Quiz

Unit 2 • 2.4 • Quiz

Home›AP Cybersecurity›Unit 2 › 2.4 › Quiz

Lesson 2.4 Quiz: Detecting Physical Attacks

5 questions — Choose and place the controls that detect a physical attack at Delmar Applied Optics

Score: 0 / 0 Answer each question, then check your score below

Scenario Organization

Xtensr Research Labs · Delmar Applied Optics

Xtensr Research Labs is acquiring Delmar Applied Optics. Xtensr’s physical security team has already assessed Delmar’s vulnerabilities and recommended controls to prevent, deter and correct them. What is left is detection: deciding which controls reveal an attack that is under way or has already happened, and where each one has to sit to do that. The building is the same one — a finished-lens vault off the main corridor, an engineering file server on a shelf in an unlocked utility closet, a reception PC in an open area, an unlocked badge controller cabinet in the lobby, a testing bay, and a ground-floor optics bay below street grade.

Q1 Camera Placement

Delmar’s finished-lens vault has one door, opening onto the main corridor. Priya Raman has mounted a single camera inside the vault aimed at the storage racks. A lens tray goes missing overnight, and the recording shows nothing but a gloved hand at a rack. Which change would do the MOST to make the next recording useful for identifying who took it?

(A) Add a second camera inside the vault aimed at the opposite corner, so that no rack is left out of frame (B) Reposition the camera to cover the vault doorway, so that every person entering or leaving is recorded face-on (C) Replace the camera with a higher-resolution model on the same mount, pointed at the same angle (D) Post a sign in the corridor announcing that the vault entrance is under continuous video surveillance

Camera placement is decided by asking what the camera would capture an adversary doing, and whether that footage would name anyone. The rack-facing angle records the act but not the actor. The doorway is the vault’s only point of ingress and egress, so a camera covering it records the face of everyone who goes in or comes out — which is why points of ingress and egress are the default placement for a camera.

(A) Incorrect — a second angle records the theft twice. A gloved hand from two directions still identifies no one.

(C) Incorrect — resolution cannot recover what the angle never captured. A sharper picture of the same gloved hand is still a gloved hand.

(D) Incorrect — a surveillance sign deters. It may lower the chance of a next incident, but it adds nothing to the recording when one happens.

Exam Tip: On a camera-placement question, ask what the camera would catch an adversary doing. Coverage, angle and tamper resistance are the three things to weigh, and angle is the one that usually fails.

Q2 Recorded vs. Monitored

Delmar’s new vault camera writes to a local drive that overwrites itself every seven days, and no one watches the feed. Curtis Okafor reports the vault as covered. Consider these three statements:

I. The camera can still support an after-incident investigation, as long as the incident is discovered inside the seven-day retention window.
II. Because no one is watching the feed, the camera will not produce a response while an intrusion is under way.
III. Recording the feed removes the need to monitor it, since the recording captures everything a live viewer would see.

Which statements are correct?

(A) I only (B) II only (C) I and II only (D) II and III only

A camera is most effective when its feed is both recorded and monitored, because the two do different jobs. The recording is what an investigator works from afterward, so I holds — subject to the retention window, since footage that has been overwritten is footage that does not exist. Monitoring is what produces a response during the attack, so II holds too. III fails on that same split: the recording preserves the event, but nobody is watching it happen, so no guard is dispatched and the adversary finishes undisturbed.

(A) Incorrect — I is right, but so is II. An unwatched feed cannot trigger a response mid-incident, which is the whole point of monitoring.

(B) Incorrect — II is right, but discarding I gives up too much. A recording nobody watched live is still the evidence an investigation runs on.

(D) Incorrect — III is the statement that fails. Recording and monitoring are complements, not substitutes; III also contradicts II, which the same option accepts.

Exam Tip: Check roman-numeral options against each other. If an option holds two statements that cannot both be true — here II and III — you can eliminate it before you have finished reading the rest.

Q3 Motion Sensor Placement

Xtensr’s budget covers two motion sensors for the Delmar building and the team has to choose where they go. In which location would a motion sensor be LEAST useful?

(A) The main reception area, which staff, visitors and delivery couriers move through steadily all day (B) The utility closet holding the engineering file server, which is opened only for maintenance (C) The finished-lens vault, which three authorized employees enter in a typical week (D) The ground-floor optics bay, which is unlocked only for scheduled test runs

A motion sensor earns its place where movement is unexpected, because there an alert means something. Reception has people moving through it from open to close, so a sensor there would fire all day; an alert that is almost always a false alarm is an alert security learns to ignore, which costs more than having no sensor at all. The other three are low-traffic spaces holding assets Xtensr already flagged, so movement in them is anomalous on its face.

(B) Incorrect — the closet holds the engineering file server and opens only for maintenance, so unscheduled movement inside it is exactly the signal a sensor should catch.

(C) Incorrect — three entries a week is near-zero traffic, so almost any motion the sensor reports is worth someone walking down to check.

(D) Incorrect — the optics bay is opened on a schedule, which makes motion outside those windows anomalous by definition.

Exam Tip: Read a LEAST or EXCEPT stem as “three of these are good — find the one that is not.” For motion sensors the test is traffic: unexpected movement makes an alert meaningful, routine movement makes it noise.

Q4 Guard Placement

Priya Raman drafts this note: “Funding covers one security officer for the night shift. Put the officer on a continuous patrol of the exterior perimeter — that way the badge controller cabinet in the lobby is covered along with everything else.” Which response is the BEST criticism of the note?

(A) The note is sound — a patrolling officer covers more ground in a shift, so the cabinet ends up at least as well protected as it would be by a fixed post (B) The note puts a patrolling officer on a fixed high-value item — a stationary post gives that cabinet constant coverage, and a lobby is exactly the kind of place traffic funnels through (C) The note misuses patrols — patrolling officers belong on interior corridors, while an exterior perimeter is the case that calls for a stationary officer at a fixed observation point (D) The note leaves no written record of what the officer saw on each pass, unlike the entry log a card reader produces automatically

The defect is the match between the type of guard and the thing being guarded. A stationary officer gives constant protection to one area, entrance or high-value item, and works best where traffic funnels — an entry gate, a lobby, the entrance to a more secure area. The unlocked badge controller cabinet is a fixed high-value item sitting in the lobby, which is the textbook case for a stationary post. A patrol reaches it a handful of times a night and leaves it alone in between. Priya’s patrol is not wrong for the perimeter; it is wrong as the answer for the cabinet.

(A) Incorrect — ground covered is not protection delivered. A patrol passes the cabinet a few times a night and leaves it unwatched in between, and the gap is when an adversary would use it.

(C) Incorrect — this reverses the guidance. Patrolling officers suit perimeters and exterior areas; stationary officers suit funnels such as gates, lobbies and entrances to more secure areas.

(D) Incorrect, and this one is the trap: the observation is true. A patrol does not generate a log the way a card reader does. But a stationary post would not generate one either, so the missing record is not what makes this assignment the wrong call.

Exam Tip: A true statement is not automatically the answer. Test a criticism before you pick it — would the flaw it names still be there after the fix you would recommend? If it would, it is not the flaw.

Q5 Employees as Detectors

Curtis Okafor argues that Delmar’s optics technicians should not appear in the detection plan at all, because they are not security staff. Each of the following is a sound argument against Curtis’s position EXCEPT:

(A) People who work in a space every day are often the first to notice someone who does not belong there (B) The technicians are in the testing bay during hours when no one is watching the camera feed (C) Awareness training can teach the technicians what counts as suspicious and whom to alert about it (D) Technicians working in a space give its entrance the same constant coverage a stationary officer would give it

A, B and C are the reasons employees who work in a space belong among the ways an organization detects a physical attack: daily familiarity, presence at hours when other controls are unwatched, and training that turns noticing into a report somebody acts on. D overreaches. A technician faces a bench and a test rig, not the door — employees detect incidentally, while watching one place is a stationary officer’s entire assignment. Treating the two as equivalent is how a building ends up with an entrance nobody is actually watching.

(A) Incorrect — this argues against Curtis. Familiarity with a space is exactly why an employee spots an unfamiliar face before any installed control does.

(B) Incorrect — this argues against Curtis. Employees fill the gap a recorded-but-unmonitored camera leaves: someone is present while the attack is happening.

(C) Incorrect — this argues against Curtis. Training is what converts an employee’s vague sense that something is off into an alert security receives in time to act.

Exam Tip: On an EXCEPT stem, three options support the claim and one does not — so read for the option that claims too much. Here the overreach is equivalence: detecting while doing another job is useful, but it is not a post.

Questions Correct

Course Hub → Course Hub

← Lab 2.4 Course Hub →

AP Cybersecurity Unit 2 • 2.4 • Quiz | APCSExamPrep.com | Built by Tanner Crow, AP CS Teacher (11+ years)
AP® is a registered trademark of the College Board, which was not involved in the production of this content.

AP Cybersecurity · Unit 2 · Lesson 2.4 · Quiz

Lesson•Exercise 1•Exercise 2•Lab•Quiz•Next: 3.1 Network Fundamentals →

Back to:Lesson 2.4 Unit 2 Study Guide Course Guide

Get in Touch

Whether you're a student, parent, or teacher — I'd love to hear from you.

Just want free AP CS resources?

Enter your email below and check the subscribe box — no message needed. Students get daily practice questions and study tips. Teachers get curriculum resources and teaching strategies.

Typically responds within 24 hours

✓

Message Sent!

Thanks for reaching out. I'll get back to you within 24 hours.

Name *

Email *

I am a... (optional)

Which course? (optional)

Phone (optional)

How did you find us? (optional)

🏫 Welcome, fellow educator!

I offer curriculum resources, practice materials, and study guides designed for AP CS teachers. Let me know what you're looking for — whether it's classroom materials, a guest speaker, or Teachers Pay Teachers resources.

Message (optional — leave blank if just subscribing)

Send me free AP CS exam tips — daily practice questions, study resources, and exam strategies. + 20% OFF TUTORING
Unsubscribe anytime.

✉

[email protected]

📚

Courses

AP CSA, CSP, & Cybersecurity

⏱

Response Time

Within 24 hours

Prefer email? Reach me directly at [email protected]