Flashcards in Ch 10 Deck (20)
1. Which of the following is the most important aspect of security?
A. Physical security
B. Intrusion detection
C. Logical security
D. Awareness training
Physical security is the most important aspect of overall security. Without physical security, none of the other aspects of security are sufficient.
2. What method can be used to map out the needs of an organization for a new facility?
A. Log file audit
B. Critical path analysis
C. Risk analysis
Critical path analysis can be used to map out the needs of an organization for a new facility. A critical path analysis is the process of identifying relationships between mission-critical applications, processes, and operations and all of the supporting elements.
3. What infrastructure component is often located in the same position across multiple floors in order to provide a convenient means of linking floor-based networks together?
A. Server room
B. Wiring closet
D. Media cabinets
A wiring closet is the infrastructure component is often located in the same position across multiple floors in order to provide a convenient means of linking floor-based networks together.
4. Which of the following is not a security-focused design element of a facility or site?
A. Separation of work and visitor areas
B. Restricted access to areas with higher value or importance
C. Confidential assets located in the heart or center of a facility
D. Equal access to all locations within a facility
Equal access to all locations within a facility is not a security-focused design element. Each area containing assets or resources of different importance, value, and confidentiality should have a corresponding level of security restriction placed on it.
5. Which of the following does not need to be true in order to maintain the most efficient and secure server room?
A. It must be human compatible.
B. It must include the use of nonwater fire suppressants.
C. The humidity must be kept between 40 and 60 percent.
D. The temperature must be kept between 60 and 75 degrees Fahrenheit.
A computer room does not need to be human compatible to be efficient and secure. Having a human-incompatible server room provides a greater level of protection against attacks.
6. Which of the following is not a typical security measure implemented in relation to a media storage facility containing reusable removable media?
A. Employing a librarian or custodian
B. Using a check-in/check-out process
D. Using sanitization tools on returned media
Hashing is not a typical security measure implemented in relation to a media storage facility containing reusable removable media. Hashing is used when it is necessary to verify the integrity of a dataset, while data on reusable removable media should be removed and not retained. Usually the security features for a media storage facility include using a librarian or custodian, using a check-in/check-out process, and using sanitization tools on returned media.
7. Which of the following is a double set of doors that is often protected by a guard and is used to contain a subject until their identity and authentication is verified?
D. Proximity detector
A mantrap is a double set of doors that is often protected by a guard and used to contain a subject until their identity and authentication is verified.
8. What is the most common form of perimeter security devices or mechanisms?
A. Security guards
Lighting is the most common form of perimeter security devices or mechanisms. Your entire site should be clearly lit. This provides for easy identification of personnel and makes it easier to notice intrusions.
9. Which of the following is not a disadvantage of using security guards?
A. Security guards are usually unaware of the scope of the operations within a facility.
B. Not all environments and facilities support security guards.
C. Not all security guards are themselves reliable.
D. Prescreening, bonding, and training does not guarantee effective and reliable security guards.
Security guards are usually unaware of the scope of the operations within a facility, which supports confidentiality of those operations and thus helps reduce the possibility that a security guard will be involved in the disclosure of confidential information.
10. What is the most common cause of failure for a water-based fire suppression system?
A. Water shortage
C. Ionization detectors
D. Placement of detectors in drop ceilings
The most common cause of failure for a water-based system is human error. If you turn off the water source after a fire and forget to turn it back on, you'll be in trouble for the future. Also, pulling an alarm when there is no fire will trigger damaging water release throughout the office.
11. What is the most common and inexpensive form of physical access control device?
B. Security guard
C. Key locks
Key locks are the most common and inexpensive form of physical access control device. Lighting, security guards, and fences are all much more costly.
12. What type of motion detector senses changes in the electrical or magnetic field surrounding a monitored object?
A capacitance motion detector senses changes in the electrical or magnetic field surrounding a monitored object.
13. Which of the following is not a typical type of alarm that can be triggered for physical security?
There is no such thing as a preventive alarm. Alarms are always triggered in response to a detected intrusion or attack.
14. No matter what form of physical access control is used, a security guard or other monitoring system must be deployed to prevent all but which of the following?
No matter what form of physical access control is used, a security guard or other monitoring system must be deployed to prevent abuse, masquerading, and piggybacking. Espionage cannot be prevented by physical access controls.
15. What is the most important goal of all security solutions?
A. Prevention of disclosure
B. Maintaining integrity
C. Human safety
D. Sustaining availability
Human safety is the most important goal of all security solutions.
16. What is the ideal humidity range for a computer room?
A. 20–40 percent
B. 40–60 percent
C. 60–75 percent
D. 80–95 percent
The humidity in a computer room should ideally be from 40 to 60 percent.
17. At what voltage level can static electricity cause destruction of data stored on hard drives?
Destruction of data stored on hard drives can be caused by 1,500 volts of static electricity.
18. A Type B fire extinguisher may use all except which of the following suppression mediums?
C. Halon or an acceptable halon substitute
D. Soda acid
Water is never the suppression medium in Type B fire extinguishers because they are used on liquid fires.
19. What is the best type of water-based fire suppression system for a computer facility?
A. Wet pipe system
B. Dry pipe system
C. Preaction system
D. Deluge system
A preaction system is the best type of water-based fire suppression system for a computer facility.