What is the purpose of a secure controlled access system and how should keys be managed?

• A. Prevent unauthorized entry.
• B. Keys should be logged, assigned to trained personnel.
• C. Use key control procedures.
• D. Prevent unauthorized entry; keys should be logged, assigned to trained personnel, and secured under control; use key control procedures.

Answer: (D)

This item focuses on keeping restricted areas safe by controlling who can enter and by managing the keys that unlock those areas. The strongest choice captures both the purpose and the practical steps to achieve it: prevent unauthorized entry, and implement a comprehensive key management approach. That means logging every key issued, assigning keys only to trained and authorized personnel, keeping keys secured under control when not in use, and following formal key control procedures for issuing, returning, duplicating, and auditing keys. This combination creates an accountable, traceable system that reduces the risk of lost or stolen keys and unauthorized access.

Saying only that entry should be prevented misses the necessary process side. Merely logging and assigning keys addresses accountability but not the full security picture, and focusing only on procedures without the clear goal of preventing unauthorized entry leaves the purpose ambiguous. The most complete answer ties the goal directly to how keys are managed, ensuring both access control and solid stewardship of keys.