Cissp-Domain 4-Physical (Environmental) Security

Front 1

at a strategic (Corp) level, the challenges for the information security professiona lincude:

Back 1

understanding the discipline of PHysical security and building effect working relationships with thos who manage environmental and physical security

Front 2

objective of physical, environment and procedural security

Back 2

CIA

Front 3

T/F physical threats include environmental conditions

Back 3

True

Front 4

three basic threat types:

Back 4

1) Natural/environmental
2) threats from utility systems
3) man-made and political threats

Front 5

water leakage, humidity, dust, excessive high/low temps, power fluctuations/loss

Back 5

environmental threats

Front 6

75 percent of all attacks by insiders are

Back 6

accidental

Front 7

main aim of physical and procedural security is to

Back 7

integrate w/ technical system security proving defense in depth

Front 8

furthest physical extent that the organization can control

Back 8

outermost perimeter

Front 9

areas withing that require some add'l form of protection

Back 9

inner permeter

Front 10

areas such as suites or rooms

Back 10

restricted areas

Front 11

benefits of using existing measures in a new security strategy includes:

Back 11

cost-effectiveness, any problem have been id'd and theh provied visible deterrent

Front 12

Defense in depth adresses what four aims:

Back 12

1) id and authentication individual w/ physical acces to tne enviroment
2) authorizing those indidivuals
3) monitoring ana accounting for action w/in the env
4) proving a contingency capability in the env

Front 13

ways to minimize turnover at guard posts

Back 13

1) specific post orders, performance metrics and reasonable wages

Front 14

rooms requiring special attn

Back 14

central suit, comm center, server rooms

Front 15

procedural controls for offices may include:

Back 15

clear desk procedures
purching of storage media on fax, photocopier and telephone voice mail facilities
end of day security checks

Front 16

countermeasure for water leakage and floodign

Back 16

Emergency Power off (EPO)

Front 17

Common types of fire and smok detection systems include:

Back 17

ionization (charged smoke particles)
photoelectric (blockage of light by smoke)
heat

Front 18

class fire estinguisher for paper, wood & laminates

Back 18

Class A

Front 19

Fire extinguisher for liquids. Usses gas or soda acid

Back 19

Class B

Front 20

Fire extinguisher for electrical equipment including wiring. uses gas

Back 20

Class C

Front 21

Fire extinguisher for combustible metals uses dry powder

Back 21

Class D

Front 22

Fire extinguisher for commercial kitchens

Back 22

Class K

Front 23

how to mitigate risk of fire suppression to h/w

Back 23

- ensure systems are segregated by zone
- time delay before water

Front 24

considerations for walls,fences,barriers

Back 24

- see all parts of barrier (CCTV, guard, other means)
- ensure lanscaping doesn't impede LoS
- chain -link fence is properly taught
- combo of barrier types

Front 25

Personnel barriers include

Back 25

turnstiles and mantraps

Front 26

factor for determining type of access control to use at personnel barriers

Back 26

- # staff who need to pass at peak times
- swift exit in event of a fire

Front 27

most vulnerable type of locking system

Back 27

Key and deadbolt (due to lost/stolen key)

Front 28

type of locks that can be used to permin only authorized individual to gain access and can be programmed to limit certain times

Back 28

smart locks

Front 29

T/F smart lock use a central database

Back 29

false

Front 30

NVR

Back 30

network video recorder

Front 31

DVR

Back 31

digital video recorder

Front 32

type of IDS using foid or wire contact placed across dor or window frames..triggers when broken

Back 32

electrical circuit

Front 33

IDS using photoelectric cell that receives a small light source across the secure boundary..

Back 33

Light beam

Front 34

IDS measuring light energy w/in a physical range

Back 34

Passive Infrared Detector (PIR)

Front 35

IDS producuing and monitoring either a measure of distance or an acoustic energy patter

Back 35

Microwave and ultrasonic

Front 36

Procedural and physical security measures for laptops may include:

Back 36

Carrying them in unmarked bags or briefcases
Transporting the hard disk separately from the laptop
tamper detecction measures, tracing software or invisible marking systems
protecting against illicit access w/ tokens
Full disk encryption

Front 37

how to ensure combinations and PIN are changed on prescribed frequency/as ppl join & leave

Back 37

Make records of people with access

Front 38

aside from regular frequency, when should audits of physical security take place

Back 38

when any significant breach of security or change in the risk, working practices, physical infrastructure indicates this may be needed

Front 39

1. Which of these statements best describes the concept of defense in depth or the layered
defense model?

Back 39

A combination of complementary countermeasures

Front 40

2. Sprinkler systems to defeat a fire outbreak may include either a dry pipe or wet pipe
mechanism. Which of these statements is not true of a dry pipe mechanism?

Back 40

It uses gas or powder, rather than a fluid, to choke the fire.

Front 41

3. The geographical location of the site may affect the security requirement if it:
a. May be vulnerable to natural disaster (e.g., a floodplain)
b. Lacks adequate access for, or the logistical support of, emergency services
c. Experiences crime, including burglary, vandalism, street crime, and arson
d. All of the above

Back 41

d. All of the above

Front 42

4. Which of these infrastructure features would most likely present a physical vulnerability for an
information system?
a. Fire escapes, including external and internal stairways
b. The information security architecture
c. The corporate compliance policy
d. The internal telephone network

Back 42

a. Fire escapes, including external and internal stairways

Front 43

Which one of these would be the principal practical benefit of utilizing existing physical or
procedural measures in an information system's security strategy?

Back 43

b. They are already tried, tested, and accepted by staff.

Front 44

6. Which one of these is least likely to provide a physical security barrier for a system?
a. External site perimeter
b. Protected zones (e.g., a floor or suite of rooms) within a building
c. Communications channels
d. Office layout

Back 44

c. Communications channels

Front 45

7. Which of these is a procedural (rather than an administrative or technical) control?
a. System logging
b. Purging storage media on, e.g., fax, photocopier, or voice mail facilities
c. Developing a system security policy
d. Configuring a firewall rule base

Back 45

b. Purging storage media on, e.g., fax, photocopier, or voice mail facilities

Front 46

8. Which of these is not a common type of fire/smoke detection system?
a. Ionization
b. Photoelectric
c. Heat
d. Movement

Back 46

d. Movement

Front 47

9. Which one of these fire extinguisher classes is most appropriate for controlling fires in electrical
equipment or wiring?

Back 47

c. Class C

Front 48

10. Which one of these is the strongest form of protective window glass?

Back 48

d. Embedded wire mesh

Front 49

11. Which one of these physical intruder detection systems reacts to fluctuations of ambient light
energy within its range?

Back 49

c. Passive infrared detector (PIR)

Front 50

12. Which one of these physical locking devices requires the knowledge of a set of numbers and a
rotation sequence to achieve access?

Back 50

b. Combination lock

Front 51

13. Which one of these is the most critical aspect of ensuring the effectiveness of a CCTV system?

Back 51

c. Monitoring of and reaction to camera feeds

Front 52

14. In terms of physical security, which one of these is the best measure to prevent loss of data in a
mobile computing scenario?
a. Carry the laptop in an unmarked bag or briefcase.
b. Carry the laptop's hard disk separately from the laptop.
c. Use tamper detection measures or tracing software.
d. Restrict access via tokens, such as smart cards.

Back 52

b. Carry the laptop's hard disk separately from the laptop.

Front 53

15. Procedural security measures often fail because staff fail to appreciate why they should use
them. Which one of these measures may best address this?

Back 53

b. Security training and awareness

Front 54

what are the elements of a physical protoection system?

Back 54

deter, detect, delay respond

Front 55

to understand protection systems includes`

Back 55

thread definition, target id, and facility characterization

Front 56

laminated glass is made from 2 sheets of oridinary glass bonded to a middle layer of resilient plastic. Where is this recommended for use?

Back 56

street level windows, doorways and other access areas

Front 57

the strategy of forming layer of protection

Back 57

defense-in-depth

Front 58

crime reduction technique used by architects, city planners, landscapers, interrior designers and security professionals

Back 58

crim prevention through environmental design

Front 59

The key to a successful physical protection system is the integration of

Back 59

people, proceedures and equipment

Front 60

what is the primary objective of controlling entry into a facility

Back 60

ensuring only authorized access

Front 61

Security light for CCTV montiry requires at least 1-2fc of illumnination. What about for parking lots/garages

Back 61

5fc

Front 62

what would be the most appropriate interior sensor for a bldg w/ windows along the ground floor

Back 62

acoustic and shock-wave glass-break sensors

Front 63

4 functions of CCTV:

Back 63

visual assessment, surveillance, deterrence and evidentiary archives

Front 64

business face new and complex physical securiy challenges across the full spectrum of ops. Although security tech are not the anwer to all org security blome, if applied appropriately what will they provide?

Back 64

They can ehnahce the security envelope and int he majority of cass will sve the org money

Front 65

what is the means of protectin the physical devices associate with the alarm system through line supervision, encryption or teamper alarming of enclosers and components?

Back 65

Tamper protection

Front 66

Fires need what 3 things

Back 66

Fuel, heat, Oxygen

Front 67

The most secure kind of door is:

Back 67

mantrap

Front 68

Which of the following does not support the goal of clean and steady power?
a) mobile geneators
b) dedicated feeders
c) surge suppressors
d) UPS

Back 68

mobile generators

Front 69

Inital surge of current req'd when there is an increa in power demand

Back 69

in-rush current

Front 70

types of noise

Back 70

EMI and RFI

Front 71

Most serious phsycial threat arising from HVAC systems
a) unauthrized human ingress/degress
b) noxious fumes circulating through the system
c) disease spread thorught eh system
d) failure to operate

Back 71

failure to operate

Front 72

Which of the following types of windows provide the best blast protection?
a) plate class
b) tempered
c) polycarbonate
d) Acrylic

Back 72

Polycarbonate

Front 73

Depth of field means

Back 73

the portion of a picture that can be in sharp focus

Front 74

The bigger the aperature opening (Smaller f-stop), the ___ the depth of field (area in focus)

Back 74

narrower

Front 75

Sprinkery system that allow the elease of large volumes of wahter in a shrt tiem ar called

Back 75

deluge

Front 76

which of the following is currently the most recommended water system for a computer room

Back 76

Preaction

Front 77

which of the following shoud be used to supress the fuel supply of a fire of common combustibles?

Back 77

Soda Acid

Front 78

what is not a feature of Cipher locks
a) hostage alarm
b) key override
c) voice activated
d) master keying

Back 78

voice activated

Front 79

Online UPS

Back 79

power continually running through them and activated immediately if the primary source fails

Front 80

The estimated lifetime of a device or the est timeframe until a compenentw/in a device gives out is called?

Back 80

Mean time before Failure (MTBF)

Front 81

MTTR

Back 81

Mean time to repair

Front 82

A secruity system that uses changes in heat weave in a particular ae to id possible intruders is called a

Back 82

Passive infrared system

Front 83

which of the following lock types prevents the removal of I/O devices by passing cables through a lockable unit?

Back 83

Cable trap

Front 84

Perimeter Intrusion Detection and Assessment Systems (PIDAS) consist of

Back 84

boundary fencing with motion detectors

Front 85

How far should fire extinguishers be located from electrical equipement?

Back 85

50ft

Front 86

What is the last line of defense in a physical security sense?

Back 86

People

Front 87

sytem releasing water extremely fast

Back 87

deluge

Front 88

system where detectors sens disruptions in electromagentic field

Back 88

proximity detector

Front 89

What is the threshold temp at which computer devices will become damaged

Back 89

175F

Front 90

which is not character of a systen sensing proximity card reader

Back 90

User activated

Front 91

After Halon, reflill with what according to Montreal protocol

Back 91

FM-200

Front 92

Lighting is what type of control

Back 92

physical

Front 93

how often should fire extinguishers be inspected

Back 93

quarterly

Front 94

The montreal protocol has declared that Halon should no longer be used because of its negative effects on the ozeon and humans. Which is not a replacement for Halon?
a) NAF-S-III
b) DD3-410
c) Water
d) CEA-410

Back 94

DD3-410

Front 95

The primary goal of all locks is to server as what type of a physical barrier?

Back 95

delay device

Front 96

What provides controlled and un-intercepted interfaces into privileged user functions

Back 96

Trusted paths