What a daft responce, it is not confidential information anyway.

And if lack of knowledge of the workings of thouse controls is considered to be a aspect of the security then there is a SERIOUS security problem in the setup.

Wearing a policemans uniform doesn't get you into ten downing street, wearing a natwest uniform doesn't get you behind the counter.

Seriously, I'd actually consider reporting that. [Especially since, with people as silly as that, you never know that she might not have reported security concerns about you 'asking operations questions', etc.]