CISSP Physical Security Requirements
Which of the following does NOT need to be true in order to maintain the most efficient and secure server room? A.It must be human compatible. B.It must include the use of nonwater fire suppressants. C.The humidity must be kept between 40 and 60 percent. D.The temperature must be kept between 60 and 75 degrees Fahrenheit.
A. It must be human compatible- A computer room does not need to be human compatible to be efficient and secure. Having a human-incompatible server room provides a greater level of protection against attacks.
Which of the following is NOT a typical type of alarm that can be triggered for physical security? A.Preventive B.Deterrent C.Repellant D.Notification
A. Preventive- There is no such thing as a preventive alarm. Alarms are always triggered in response to a detected intrusion or attack.
Which of the following is NOT a disadvantage of using security guards? A. Security guards are usually unaware of the scope of the operations within a facility. B. Not all environments and facilities support security guards. C. Not all security guards are themselves reliable. D. Prescreening, bonding, and training does not guarantee effective and reliable security guards.
A. Security guards are usually unaware of the scope of the operations within a facility, which supports confidentiality of those operations and thus helps reduce the possibility that a security guard will be involved in the disclosure of confidential information.
A Type B fire extinguisher may use all EXCEPT which of the following suppression mediums? A.Water B.CO2 C.Halon or an acceptable halon substitute D.Soda acid
A. Water Water is never the suppression medium in Type B fire extinguishers because they are used on liquid fires. The primary chemical used to fight these fires is monoammonium phosphate, because of its ability to smother fires in these types of materials. Fire extinguishers with a Class B rating are effective against flammable liquid fires.
What is the ideal humidity range for a computer room? A. 20-40 percent B. 40-60 percent C. 60-75 percent D. 80-95 percent
B. 40-60 percent The humidity in a computer room should ideally be from 40 to 60 percent.
No matter what form of physical access control is used, a security guard or other monitoring system must be deployed to prevent all BUT which of the following? A.Piggybacking B.Espionage C.Masquerading D.Abuse
B. Espionage No matter what form of physical access control is used, a security guard or other monitoring system must be deployed to prevent abuse, masquerading, and piggybacking. Espionage cannot be prevented by physical access controls.
What is the most common cause of failure for a water-based fire suppression system? A.Water shortage B.People C.Ionization detectors D.Placement of detectors in drop ceilings
B. People- The most common cause of failure for a water-based system is human error. If you turn off the water source after a fire and forget to turn it back on, you'll be in trouble for the future. Also, pulling an alarm when there is no fire will trigger damaging water release throughout the office.
What infrastructure component is often located in the same position across multiple floors in order to provide a convenient means of linking floor-based networks together? A.Server room B.Wiring closet C.Datacenter D.Media cabinets
B.Wiring closet- A wiring closet is the infrastructure component often located in the same position across multiple floors in order to provide a convenient means of linking floor-based networks together.
Which of the following is not a typical security measure implemented in relation to a media storage facility containing reusable removable media? A.Employing a librarian or custodian B.Using a check-in/check-out process C.Hashing D.Using sanitization tools on returned media
C. Hashing Hashing is not a typical security measure implemented in relation to a media storage facility containing reusable removable media. Hashing is used when it is necessary to verify the integrity of a dataset, while data on reusable removable media should be removed and not retained. Usually the security features for a media storage facility include using a librarian or custodian, using a check-in/check-out process, and using sanitation tools on returned media. Consider encryption with data at rest.
What is the most important goal of all security solutions? A.Prevention of disclosure B.Maintaining integrity C.Human safety D.Sustaining availability
C. Human safety is the most important goal of all security solutions.
What is the most common and inexpensive form of physical access control device? A.Lighting B.Security guard C.Key locks D.Fences
C. Key locks Key locks are the most common and inexpensive form of physical access control device. Lighting, security guards, and fences are all much more costly.
Which of the following is a double set of doors that is often protected by a guard and is used to contain a subject until their identity and authentication is verified? A.Gate B.Turnstile C.Mantrap D.Proximity detector
C. Mantrap A mantrap is a double set of doors that is often protected by a guard and used to contain a subject until their identity and authentication is verified.
What is the best type of water-based fire suppression system for a computer facility? A. Wet pipe system B. Dry pipe system C. Preaction system D. Deluge system
C. Preaction system A preaction system is the best type of water-based fire suppression system for a computer facility. Pre-action fire sprinkler systems employ the basic concept of a dry pipe system in that water is not normally contained within the pipes
What method can be used to map out the needs of an organization for a new facility? A.Log file audit B.Critical path analysis C.Risk analysis D.Inventory
Critical Path Analysis- Critical path analysis can be used to map out the needs of an organization for a new facility. A critical path analysis is the process of identifying relationships between mission-critical applications, processes, and operations and all of the supporting elements.
At what voltage level can static electricity cause destruction of data stored on hard drives? A.4,000 v B.17,000 v C.40 v D.1,500 v
D. 1,500 v Destruction of data stored on hard drives can be caused by 1,500 volts of static electricity.
What type of motion detector senses changes in the electrical or magnetic field surrounding a monitored object? A.Wave B.Photoelectric C.Heat D.Capacitance
D. Capacitance- A capacitance motion detector senses changes in the electrical or magnetic field surrounding a monitored object.
Which of the following is NOT a security-focused design element of a facility or site? A.Separation of work and visitor areas B.Restricted access to areas with higher value or importance C.Confidential assets located in the heart or center of a facility D.Equal access to all locations within a facility
D. Equal access to all locations within a facility is not a security-focused design element. Each area containing assets or resources of different importance, value, and confidentiality should have a corresponding level of security restriction placed on it.
Which of the following is typically NOT a culprit in causing damage to computer equipment in the event of a fire and a triggered suppression? A. Heat B. Suppression medium C. Smoke D. Light
D. Light Light is usually not damaging to most computer equipment, but fire, smoke, and the suppression medium (typically water) are very destructive.
What is the most common form of perimeter security devices or mechanisms? A.Security guards B.Fences C.CCTV D.Lighting
D. Lighting- Lighting is the most common form of perimeter security device or mechanism. Your entire site should be clearly lit. This provides for easy identification of personnel and makes it easier to notice intrusions.
Which of the following is the most important aspect of security? A.Physical security B.Intrusion detection C.Logical security D.Awareness training
Physical security- Physical security is the most important aspect of overall security. Without physical security, none of the other aspects of security are sufficient.
