FR FieldReady Academy
Unit 1ConceptsObjective 1.27 min read

Physical Security and Deception

Unit 1: Security Foundations. Lesson 4 of 54 in SecPlus Academy.

Software cannot protect a server someone can carry away. Physical controls guard the building, and deception controls turn the attacker's curiosity against them.

Perimeter and entry

  • Bollards: short posts that stop vehicles from ramming an entrance.
  • Fencing: defines the boundary and slows intruders; height and design set how serious it is.
  • Lighting: removes hiding places and makes cameras useful at night.
  • Access control vestibule: two doors where only one opens at a time, so one badge admits one person and nobody can tailgate. Older name: mantrap.
  • Access badge: proves identity at doors and logs entry. Combine with a PIN or biometric for high-security rooms.
  • Security guard: the only control that can make judgment calls and respond in the moment.
  • Video surveillance: deters when visible, detects when reviewed, supports investigations.

Sensors

  • Infrared: detects body heat moving through a space.
  • Pressure: detects weight on a floor plate or mat.
  • Microwave: sends out waves and detects changes in the reflection when something moves.
  • Ultrasonic: the same idea with sound waves.

Deception technology

Decoys that look valuable, do nothing real, and alert the moment they are touched.

  • Honeypot: a decoy system that attracts attackers so their tools and methods can be studied.
  • Honeynet: a whole decoy network of honeypots.
  • Honeyfile: a bait document, such as "passwords.xlsx," that alerts when opened or copied.
  • Honeytoken: a fake credential, API key, or database record that should never be used; any use proves a breach.
Exam tip: "prevent tailgating" is an access control vestibule. "Stop a vehicle" is bollards. "Detect that someone is browsing the file share they should not be in" is a honeyfile. Nothing legitimate ever touches a honeytoken, so any hit is a true positive.
Remember
Bollards stop cars, vestibules stop tailgating, guards make decisions. Sensors: infrared heat, pressure weight, microwave and ultrasonic motion. Honeypot, honeynet, honeyfile, honeytoken: touched means breached.
Deeper explanation

Physical Security and Deception, explained slowly

The layer software cannot fix

If someone can walk into the server room, encryption on the wire does not matter. Physical security is the first layer, and the exam covers it as a short list of devices and a set of sensors. Deception technology is bundled here because, like a tripwire, it is a control that waits.

Perimeter to door to room

Perimeter    fencing, bollards, lighting, cameras
Entrance     guard, badge reader, access control vestibule
Inside       locked rooms, cabinets, sensors, cameras
  • Bollards are the short concrete or steel posts in front of buildings. Their only job is to stop a vehicle, whether a ram raid or an accident.
  • Fencing marks the boundary and buys time. A low decorative fence deters casual entry; a tall fence with a top guard deters serious entry.
  • Lighting takes away hiding places and gives cameras something to see.
  • Video surveillance works three ways: visible cameras deter, live monitoring detects, and recordings support investigations.
  • Access badge: proves identity to a reader and creates a log. Combine it with a PIN or fingerprint for sensitive rooms so a stolen badge alone is useless.
  • Security guard: the only control that can think. Guards verify identities, notice odd behavior, and respond.
  • Access control vestibule: two interlocking doors. The outer door must close before the inner door opens, and one badge admits one person, so nobody can slip in behind an employee. This is the specific answer to tailgating.

Sensors: how each one notices you

Infrared     detects body heat crossing the field of view
Pressure     detects weight on a floor plate, mat, or step
Microwave    emits waves and detects the change in reflection when something moves
Ultrasonic   the same principle with sound above human hearing

Microwave and ultrasonic both watch for movement through reflected energy; infrared watches for heat; pressure watches for weight. A question that says "triggered when someone steps on it" is pressure; "detects heat signatures" is infrared.

Deception: controls that are never touched legitimately

The idea is a tripwire nobody has a reason to cross. Because no legitimate process ever touches a decoy, any touch is a true positive.

  • Honeypot: a system that looks like a real server, records everything an attacker does, and holds nothing of value. You learn their tools and targets.
  • Honeynet: several honeypots arranged as a fake network, so the attacker's lateral movement can be watched.
  • Honeyfile: a document with an irresistible name such as "executive_salaries.xlsx" that alerts when opened, copied, or emailed.
  • Honeytoken: a fake credential, API key, or database row planted where an attacker would find it. If it is ever used, someone stole it.

How the exam asks it

  • "Prevent an unauthorized person from following an employee through the door." Access control vestibule.
  • "Stop a vehicle from driving into the lobby." Bollards.
  • "Detect an attacker browsing a file server without alerting on normal use." Honeyfile.
  • "Identify that a database was breached when a fake account is used." Honeytoken.

What to memorize

  • Bollards stop cars, vestibules stop tailgating, guards make judgment calls.
  • Infrared heat, pressure weight, microwave and ultrasonic motion.
  • Honeypot, honeynet, honeyfile, honeytoken: any use means breach.