A turnstile is a physical access control barrier that admits one person at a time, usually after they badge in, to prevent multiple people from entering a restricted space on a single authorization.
A turnstile is a physical barrier at an entry point that only lets one person pass per authorized credential. Think of the gates you push through at a subway station or a stadium. In a secure building, you badge in, the turnstile unlocks, and exactly one body gets through before it locks again.
That "one person at a time" rule is the whole point. Most physical attacks rely on getting more people through a door than were actually authorized. A turnstile makes that physically awkward or impossible, which is why it shows up in Unit 2 as a control against the social-engineering attacks described in topic 2.2.
Turnstiles live in Unit 2: Securing Spaces, specifically topic 2.2 (Physical Vulnerabilities and Attacks). They directly support AP Cybersecurity 2.2.A, identifying common physical attacks, because a turnstile is a countermeasure to piggybacking and tailgating (EK 2.2.A.2). They also matter for AP Cybersecurity 2.2.B and AP Cybersecurity 2.2.C: physical access can bypass technical controls (EK 2.2.C.1), so a barrier that controls who actually enters a space lowers the risk of unauthorized access to sensitive systems. The big theme here is that strong passwords and firewalls mean nothing if an adversary can just walk into the server room behind someone else.
Keep studying AP Cybersecurity Unit 2
Visual cheatsheet
view galleryPiggybacking and tailgating (Unit 2)
A turnstile is basically the physical answer to piggybacking. Since piggybacking relies on slipping through a held-open door behind an authorized person, a one-person-per-badge turnstile removes the held door entirely.
Badge access (Unit 2)
Turnstiles and badge readers are a team. The badge proves you're authorized, and the turnstile enforces that only the badge holder, not a crowd, actually walks through.
Access control vestibule (Unit 2)
Both solve the same problem in different ways. A vestibule (mantrap) traps you between two doors so only one person clears at a time, while a turnstile uses a rotating or retracting barrier for the same one-at-a-time effect.
Physical perimeter (Unit 2)
A turnstile is one layer in a larger physical perimeter that also includes fencing, bollards, and locks. It controls people at the entrance, while those other controls keep vehicles and intruders away from the building entirely.
Expect turnstiles in multiple-choice questions that ask you to match a physical control to the attack it stops. A classic stem describes someone trying to follow an employee into a restricted area, then asks which control prevents it. Turnstile (or access control vestibule) is the answer because both enforce one person per authorization. No released FRQ has used this term verbatim, but it fits any free-response that asks you to recommend physical controls to reduce risk for a sensitive space, exactly the kind of assessment described in 2.2.C. Be ready to explain WHY it works: it physically blocks the extra person rather than just trusting people to be honest.
Both let only one person through at a time, but the mechanism differs. A turnstile is a single rotating or retracting barrier you push through after badging, while an access control vestibule (mantrap) is a small sealed room with two doors where the second door won't open until the first closes and you're verified.
A turnstile is a physical barrier that admits one person per authorized credential, usually paired with a badge reader.
Its main job is stopping piggybacking and tailgating, where an extra person slips into a restricted area behind someone authorized.
On the exam, match turnstiles to attacks that exploit doors being held open or people following others inside.
Turnstiles support AP Cybersecurity 2.2.A by countering the social-engineering physical attacks in EK 2.2.A.2.
Physical controls like turnstiles matter because physical access can bypass technical security entirely (EK 2.2.C.1).
It's a physical access control barrier that lets only one person through at a time after they badge in. In AP Cybersecurity Unit 2, it's a defense against physical attacks where adversaries try to enter a restricted space behind an authorized person.
Yes, that's its core purpose. Piggybacking relies on an attacker following an authorized person through a door, and a turnstile physically allows only one person per badge, so the attacker can't slip through.
Both enforce one person at a time, but a turnstile is a single rotating or retracting gate you push through, while an access control vestibule is a small two-door room (a mantrap) where the second door stays locked until you're verified and the first door closes.
It's a physical control. AP Cybersecurity stresses that physical access can defeat technical controls like passwords and firewalls (EK 2.2.C.1), so physical barriers like turnstiles are a separate, important layer of defense.
It's a go-to example for topic 2.2 questions that ask which control prevents a specific physical attack. You should be able to pair it with badge access and explain that it enforces one person per authorization to block tailgating.
Connect this key term to the AP exam workflow: review the course, practice questions, and check related study tools.