A systems administrator is reviewing the physical security design for a new high-security data center. A key requirement is to prevent tailgating into the server room and to provide a mechanism to isolate and detain an unauthorized individual if they manage to bypass an initial authentication point. Which of the following physical security controls BEST meets this specific requirement?
A security guard posted at the server room door
A mantrap
A biometric scanner with a turnstile
A combination of security cameras and an RFID card reader
The correct answer is a mantrap. A mantrap is a physical access control system with two interlocking doors where the first door must close before the second one opens. This design is specifically intended to prevent tailgating by allowing only one person to pass through at a time. Furthermore, if an individual fails the secondary authentication check within the vestibule, the system can be configured to lock both doors, effectively isolating and detaining the person until security personnel can respond. A biometric scanner with a turnstile prevents tailgating but does not provide the capability to trap or detain an individual. A security guard is a human control and, while effective, is not an automated mechanism and is susceptible to social engineering. A combination of security cameras and an RFID reader are detective controls that record access events but do not physically prevent tailgating or detain an intruder.