Download Electronic Access Control Level I Ultimate Exam and more Exams Technology in PDF only on Docsity!
Exam
Question 1. Which component defines the process of verifying a person’s claimed identity before granting access? A) Authorization B) Authentication C) Identification D) Auditing Answer: B Explanation: Authentication is the step where credentials (e.g., password, card, biometric) are checked to confirm identity, whereas identification is the claim of who the user is, and authorization determines what they may do. Question 2. In the three-pillar model of electronic access control, which pillar primarily protects the parking lot entrance and perimeter fencing? A) Interior Security B) Building Perimeter C) Perimeter Security D) Network Security Answer: C Explanation: Perimeter Security includes outer gates, fences, and barriers that keep unauthorized vehicles and individuals away from the facility’s outer boundary. Question 3. A fail-secure lock is designed to: A) Unlock when power is lost B) Remain locked when power is lost C) Open automatically after a set time D) Disable all alarms during a power outage Answer: B Explanation: Fail-secure devices stay locked during a power failure, ensuring security is maintained even without power. Question 4. Which DHS guideline is most directly related to electronic access control during an active-shooter event?
Exam
A) NFPA 72
B) NIST SP 800- 53
C) DHS CBRNE Response Protocol D) DHS “Lockdown and Shelter-in-Place” procedures Answer: D Explanation: DHS “Lockdown and Shelter-in-Place” procedures address immediate system lockdown and controlled egress during an active-shooter situation. Question 5. A 125 kHz RFID card is best described as: A) Proximity card using low-frequency technology B) Smart card with 13.56 MHz communication C) NFC-enabled mobile credential D) Biometric token Answer: A Explanation: 125 kHz cards operate on low-frequency (LF) proximity technology, distinct from high-frequency (HF) 13.56 MHz smart cards. Question 6. Which biometric modality typically requires the least amount of user cooperation for a quick read? A) Fingerprint B) Iris scan C) Facial recognition D) Vein pattern Answer: C Explanation: Facial recognition can be performed at a distance with minimal user action, while fingerprints, iris, and vein scans usually need close alignment. Question 7. Bluetooth Low Energy (BLE) mobile credentials are most vulnerable to which of the following attacks? A) Replay attack without encryption B) Physical card cloning
Exam
Answer: A Explanation: Fail-safe electric strikes can be installed in either cylindrical or mortise lock housings and release when power is applied. Question 11. A pneumatic timer used as a request-to-exit (REX) device primarily provides: A) Immediate door release on button press B) Delayed door opening to allow safe egress C) Power-over-Ethernet (PoE) connectivity D) Bi-directional communication with the controller Answer: B Explanation: Pneumatic timers hold the door open for a preset interval after a button press, ensuring safe egress before the door relocks. Question 12. In a networked access control system, which protocol provides encrypted, bidirectional communication between readers and controllers? A) Wiegand B) RS- 485 C) OSDP D) Modbus TCP Answer: C Explanation: OSDP (Open Supervised Device Protocol) adds encryption and two-way communication, unlike the legacy unencrypted Wiegand. Question 13. When designing a power supply for a door controller, the choice between 12 V and 24 V DC is primarily influenced by: A) The number of users in the system B) The length of the cabling run and voltage drop C) The type of biometric reader used D) The fire rating of the building Answer: B
Exam
Explanation: Higher voltage (24 V) reduces current for the same power, minimizing voltage drop over long cable runs. Question 14. To calculate the required amp-hour (Ah) capacity for a 24-hour battery backup on a controller that draws 200 mA, you would need: A) 4.8 Ah B) 2.4 Ah C) 0.48 Ah D) 20 Ah Answer: A Explanation: 0.2 A × 24 h = 4.8 Ah; this is the minimum battery capacity required for a full day of standby. Question 15. Which NEC article governs low-voltage Class 2 wiring for access control installations? A) Article 210 B) Article 725 C) Article 800 D) Article 500 Answer: B Explanation: NEC Article 725 specifically addresses Class 2 power-limited circuits, including those used for access control. Question 16. According to NFPA 101, an access control system that locks a door must still allow egress within how many seconds after a fire alarm activation? A) 5 seconds B) 10 seconds C) 30 seconds D) 60 seconds Answer: C Explanation: Life Safety Code requires doors to unlock or release within 30 seconds of fire alarm activation to ensure safe egress.
Exam
Question 20. For a 500-ft run of 22-AWG twisted-pair to a door controller, which wire gauge would best limit voltage drop? A) 24 AWG B) 22 AWG C) 20 AWG D) 18 AWG Answer: D Explanation: Larger conductors (lower AWG number) have lower resistance; 18 AWG reduces voltage drop over long distances compared to 22 AWG. Question 21. In a “home-run” wiring topology, each door controller is connected how? A) In series on a single RS-485 bus B) Directly to the central controller via its own dedicated pair C) Through a daisy-chained hub D) Via wireless mesh network Answer: B Explanation: Home-run topology provides a dedicated cable pair from each controller to the main panel, simplifying troubleshooting and reducing bus loading. Question 22. Which IP subnet mask provides 256 usable host addresses? A) 255.255.255. B) 255.255.0. C) 255.255.255. D) 255.0.0. Answer: A Explanation: A /24 subnet mask (255.255.255.0) yields 2⁸ = 256 IP addresses, 254 usable for hosts after network and broadcast addresses. Question 23. Role-based access control (RBAC) in software provisioning primarily controls:
Exam
A) The physical strength of the door lock B) The time of day a door may be opened C) Which users belong to specific permission groups D) The encryption algorithm used for card data Answer: C Explanation: RBAC assigns users to roles or groups, each with defined access rights, simplifying management of permissions. Question 24. Which of the following is a primary cybersecurity measure for protecting an IP-based access control network? A) Installing a higher-capacity maglock B) Using a VLAN to isolate control traffic C) Adding more RFID readers D) Increasing the door’s fire rating Answer: B Explanation: Segregating access control traffic on a dedicated VLAN limits exposure to other network segments and reduces attack surface. Question 25. A multimeter set to measure resistance shows a reading of 0 Ω across an electric strike’s terminals when the door is closed. This indicates: A) The strike is shorted and must be replaced B) The strike is properly energized C) The strike is open-circuit and will not function D) The multimeter is set to the wrong range Answer: A Explanation: Zero resistance across the strike suggests a short circuit; a functional strike should show high resistance when unpowered. Question 26. Ground loops in access control cabling most often cause which symptom? A) Intermittent door latch movement
Exam
D) The system logs the first entry and ignores subsequent ones Answer: B Explanation: “In-out” anti-passback requires the user to exit through a designated exit point before the same credential can be used to re-enter. Question 30. The purpose of a “door-hold” relay in an access control circuit is to: A) Keep the door unlocked for a preset duration after a valid credential B) Provide power to the reader during a power outage C) Detect door forced entry attempts D) Convert AC to DC for the lock driver Answer: A Explanation: A door-hold relay maintains the unlock state for a set time, allowing users to pass through before the lock re-engages. Question 31. Which of the following is NOT a characteristic of a Class 2 circuit as defined by NEC? A) Limited to 30 V DC or 60 V AC B) Maximum power of 100 VA C) Requires a dedicated grounding conductor D) Protected by over-current devices not exceeding 20 A Answer: C Explanation: Class 2 circuits are low-power and do not require a dedicated grounding conductor; they are limited in voltage and power. Question 32. A “panic-bar” integrated with an access control system typically sends a signal to the controller that: A) Locks all doors in the building B. Triggers an alarm and releases the door immediately C) Requests a password from the user D) Activates a fire suppression system
Exam
Answer: B Explanation: Panic-bars are designed for emergency egress; when activated they send a release command and may trigger an alarm. Question 33. In OSDP, the “Secure Channel” feature provides: A) Physical encryption of the wiring conduit B) End-to-end data encryption using AES- 128 C) Redundant power supply to the reader D) Automatic firmware updates over the air Answer: B Explanation: OSDP Secure Channel encrypts data between the reader and controller using AES-128, protecting credentials from interception. Question 34. Which of the following wiring methods is prohibited for use in a hazardous (explosive) environment? A. Plenum-rated UTP B. Shielded twisted pair (STP) in conduit C. Fiber-optic cable D. Mineral-insulated metal-clad (MIMC) cable Answer: A Explanation: Plenum-rated cable is not rated for hazardous locations; mineral-insulated or fiber-optic cables are acceptable. Question 35. A door controller with a “watchdog timer” will: A. Reset the controller if it does not receive a heartbeat signal within a set interval B. Increase the holding force of a maglock automatically C. Log every credential scan to a local SD card D. Disable all biometric readers during a power surge Answer: A Explanation: A watchdog timer monitors system health and forces a reset if the controller becomes unresponsive, enhancing reliability.
Exam
Question 39. An access control system that logs a timestamp, credential ID, and door number for each event is complying with which standard? A. UL 294 B. ISO 9001 C. IEC 61508 D. PCI-DSS Answer: A Explanation: UL 294 requires detailed event logging, including time, credential, and point of access, for auditability. Question 40. Which of the following is a primary cause of “door-forced-open” alarms in an electric strike system? A) Incorrectly set door-hold time B) Strike not receiving sufficient voltage C) Door jamb misalignment causing the latch to bypass the strike D) Over-temperature in the power supply Answer: C Explanation: Misaligned jambs allow the latch to bypass the strike, causing the door to be forced open without proper release, triggering an alarm. Question 41. The term “dead-bolt” in access control refers to: A. A lock that requires power to remain locked B. A mechanical bolt that extends into the frame independent of electrical power C. A magnetic lock that fails safe D. A software lockout for a user account Answer: B Explanation: A dead-bolt is a purely mechanical locking mechanism that extends into the door frame, providing security even if power is lost. Question 42. Which of the following is the most appropriate method for testing a newly installed proximity card reader?
Exam
A. Measuring the resistance across the data lines with a multimeter B. Using a card test device that simulates a 125 kHz tag C. Sending a ping command from the controller to the reader D. Observing the LED flash pattern without a card present Answer: B Explanation: A card test device can emulate a valid tag and confirm the reader correctly reads and forwards the data. Question 43. In a “fail-safe” electromagnetic lock, the door will: A. Remain locked when power is removed B. Unlock automatically when power is removed C. Require a mechanical key to open when powered D. Provide a 10-second delay before unlocking after power loss Answer: B Explanation: Fail-safe maglocks release the door when power is lost, ensuring egress during power failures. Question 44. Which of the following statements about “time-based access schedules” is correct? A. They can only be configured in 24-hour increments B. They allow a credential to be valid only during defined days and times C. They are stored on the card, not the controller D. They require a separate hardware timer module for each door Answer: B Explanation: Time-based schedules define specific days and time windows during which a credential is authorized. Question 45. A “tamper-switch” on a door controller typically detects: A. Unauthorized removal of the controller’s cover B. Excessive voltage on the power line C. Incorrect card format insertion
Exam
Explanation: ADA specifies operable parts be between 15 inches and 48 inches above the floor to be reachable by wheelchair users. Question 49. Which type of cable is required for a “plenum-rated” installation in a drop ceiling? A. CMP (Communications Plenum) B. CMR (Communications Riser) C. CMX (Outdoor) D. CAT-3 unshielded Answer: A Explanation: CMP cable is specifically rated for use in air-handling spaces (plenum) and must be used in drop ceilings to meet fire code. Question 50. A “dual-door” interlock system is used to: A) Allow two users to pass simultaneously B) Prevent the inner door from opening while the outer door is open C) Provide two independent power supplies to a lock D) Enable two different credential types on the same door Answer: B Explanation: Dual-door interlocks ensure that only one door can be open at a time, improving security for high-risk areas. Question 51. In OSDP, the “Secure Channel ID” is used to: A) Identify the specific reader on a multi-reader network B) Authenticate the controller to the central server C. Encrypt data using a unique session key per device D. Set the baud rate for communication Answer: C Explanation: The Secure Channel ID helps establish a unique encryption session for each device, ensuring data confidentiality.
Exam
Question 52. Which of the following power-distribution devices is most appropriate for protecting a 24-V DC access control panel from over-current? A) MCB (Miniature Circuit Breaker) rated for 10 A AC B) PTC (Positive Temperature Coefficient) resettable fuse for 24 V DC C. Surge protector rated for 600 V AC D. A 12-V automotive fuse Answer: B Explanation: A PTC resettable fuse designed for DC applications will protect the panel from over-current while allowing automatic reset after fault clearance. Question 53. The “door-sensor” (often a magnetic reed switch) is primarily used to: A) Trigger the lock to engage when the door is closed B) Measure the door’s weight for anti-tailgating C) Provide a voltage reference for the controller D. Detect the presence of a credential near the door Answer: A Explanation: The door-sensor signals whether the door is open or closed, allowing the controller to lock the door only when it is fully closed. Question 54. A “forced-entry” alarm is typically generated when: A. The door is opened with a valid credential but the lock fails to release B. The door sensor reports open while the lock remains energized C. The maglock’s holding force drops below 200 lbf D. The reader detects a duplicate card ID in the system Answer: B Explanation: If the lock remains energized (locked) while the door sensor indicates the door is open, the system assumes forced entry and raises an alarm. Question 55. Which of the following best describes a “fail-safe” configuration for an emergency exit door?
Exam
B. Multi-application data storage C. Passive RFID operation at 125 kHz D. Mutual authentication with the reader Answer: C Explanation: Smart cards like MIFARE DESFire operate at 13.56 MHz (high-frequency), not 125 kHz. Question 59. A “watchdog timer” in a controller is set to 5 seconds. If the controller’s firmware hangs for 7 seconds, what will happen? A) The controller will continue running with degraded performance B) The watchdog will reset the controller after the 5-second timeout C) The system will generate a false-positive alarm D) The door will remain locked indefinitely Answer: B Explanation: The watchdog monitors activity; exceeding its timeout forces a hardware reset to recover from the hang. Question 60. Which of the following statements about “anti-tailgating” sensors is true? A. They rely on infrared beams that detect multiple people passing simultaneously B. They are only used on exterior doors C. They require biometric verification to function D. They replace the need for any credential readers Answer: A Explanation: Anti-tailgating sensors use infrared or laser beams to detect more than one person crossing the entry point at the same time. Question 61. In a networked access control system, a “DHCP reservation” for a controller ensures: A. The controller always receives the same IP address from the DHCP server B. The controller can operate without a network connection
Exam
C. The controller’s firmware updates automatically D. The controller’s power supply is protected from surges Answer: A Explanation: DHCP reservation binds a specific IP address to the controller’s MAC address, providing a stable network identity. Question 62. Which of the following is the primary reason for using “shielded twisted pair (STP)” instead of “unshielded twisted pair (UTP)” in a noisy industrial environment? A. STP is cheaper than UTP B. STP reduces electromagnetic interference (EMI) that can corrupt data C. STP supports higher bandwidth than UTP D. STP eliminates the need for grounding Answer: B Explanation: The shielding in STP provides a barrier against EMI, improving signal integrity in electrically noisy settings. Question 63. A “bi-directional” communication protocol in access control allows: A. Only the reader to send data to the controller B. The controller to send data to the reader, such as configuration updates C. Data to be transmitted at twice the normal speed D. The use of two separate cables for power and data Answer: B Explanation: Bi-directional protocols (e.g., OSDP) enable both read and write commands, allowing the controller to configure readers or request status. Question 64. When performing a voltage drop calculation for a 100-ft run of 24 V DC to a door controller drawing 0.5 A, which factor is most critical? A. Cable’s temperature rating B. Wire gauge (AWG) C. Number of devices on the same bus
