2.7 - Physical Security Controls

Question 1

Name several ways to control access.

Answer 1

1) Barricade/ Bollards
2) Access Control Vestibule
3) Alarms
4) Signs
5) Video surveillance
6) Industrial Camouflage
7) Guards, ID badges, and Access Lists
8) Biometrics
9) Door access controls
10) Cable locks
11) USB data blocker
12) Proper Lighting
13) Fencing
14) Sensors
15) Drones

Question 2

What are some of the reasons to use signs?

Answer 2

Personal Safety
Specific instructions/ Access Control
Informational

Question 3

Define Industrial Camouflage.

Answer 3

Concealing a data center by making it seem unimportant.

Question 4

Why should you have more than one guard?

Answer 4

1) Minimize exposure to an attack
2) No single person has access to a physical asset

Question 5

What are some ways to control access through a door?

Answer 5

1) Lock and key
2) Deadbolt
3) Electronic PIN
4) Token-based (RFID, magnetic swipe card, or key
fob)
5) Biometric
6) Multifactor

Question 6

What are cable locks?

Answer 6

Locks that are designed to be put onto a device to prevent it from being stolen.

Question 7

What is a USB data blocker?

Answer 7

It blocks the data portion of the USB and only allows the use of the power.

Question 8

What is a Faraday cage?

Answer 8

A mesh of conductive material that cancels the electromagnetic field’s effect on the interior. It does not block all signatures and blocks cellular.

Question 9

What is a Screened Subnet?

Answer 9

Formerly DMZ

A subnet on the network that has extra security and is limited in what it can do because it is outward facing.

Question 10

What is a Protected Distribution System (PDS)?

Answer 10

Securing common cabling to prevent it from being cut or tapped. This includes all forms of cabling. It can be secured via conduit or something else.

Question 11

What is an Air gap?

Answer 11

A physical separation between networks. It makes it impossible for someone on one network to gain access to this network.