Physical Security Controls

Why is physical security important to protecting data?

• Physical access to data will negate the security advantages of the cloud.

• Information resides on physical assets, linking physical and information security.

• Social engineering can negate any information security controls.

• None of the above.

Why is proper interior and exterior lighting important?

• It can detect people who are where they don’t belong.

•  It shows who is in a restricted space.

• It allows more people and activities to be observed.

• It is needed for the use of closed-circuit television cameras.

Your organization has experienced multiple incidents of graffiti tagging and people loitering in the parking lot despite the chain-link fence surrounding it. What is the best solution to the issue?

• “No Trespassing” signage

• More guard stations

• Additional external lighting

• Changing the chain-link fencing to anti-scale fencing

After a physical security incident, what critical data can security guards commonly provide?

• Employee ID information

• Access logs of who has entered and exited the building

• Alarm codes

• Blueprints showing unmonitored areas of the building

Alarms are effective only if which of the following is true?

• They alert on abnormal conditions.

• Every entrance is monitored with a sensor.

• They are not tied to the information systems.

• They are tuned to provide accurate and useful alerts.

You are implementing a test lab at your organization for early alpha software development. To prevent any of the development code from inadvertently getting put on production computers, what should you implement?

• Air gap

• Strict firewalls

• Protected distribution

• Patch management

What is the security benefit of a Faraday cage?

• Prevents attack by EMP

• Prevents accessing a device using a wireless network or cell connection

• Works better than anti-scale fencing

• Prevents stack overflows by EMI

What is an example of a human-based screened subnet (DMZ)?

• A visitor’s lobby that is separated from a company office by a receptionist

• Hallways between the company lobby and offices

• A server room with a locked door

• The networking cabinets in the facility

What is a primary problem with biometrics?

• Technically, biometrics are difficult to implement.

• The human body changes over time.

• Biometrics are easily faked.

• Biometrics can’t be loaned or delegated.

What should you do to protect your IP-based CCTV system from a DDoS attack?

• Reconfigure your firewalls.

• Connect it to an intrusion detection system.

• Require multifactor authentication to access the CCTV system.

• Place all CCTV components on a separate network.