CC Physical Security 3

Question 1

Which concept in physical security mirrors the 'defense in depth' principle by using multiple layers of physical barriers?

Accepted Answer

Layered concentric zones of physical protection

Answer

Layered concentric zones (perimeter → outer building → inner areas → critical assets) ensure that an attacker must defeat multiple controls to reach a target, mirroring defense in depth.

Question 2

What physical security threat does 'dumpster diving' represent?

Accepted Answer

Searching discarded materials for sensitive information such as documents or storage media

Answer

Dumpster diving involves searching through an organization's discarded trash to find sensitive information such as organizational charts, passwords, or financial data.

Question 3

What is the purpose of a 'hot aisle/cold aisle' configuration in a data center?

Accepted Answer

To manage airflow and cooling efficiency by organizing equipment orientation

Answer

Hot aisle/cold aisle configurations align server racks so that cold air is drawn in from the front (cold aisle) and hot exhaust air exits from the back (hot aisle), optimizing cooling efficiency.

Question 4

What is TEMPEST in the context of physical and information security?

Accepted Answer

A set of standards addressing unintentional electromagnetic emissions from electronic equipment that could reveal data

Answer

TEMPEST refers to government standards for protecting against the unintentional electromagnetic emissions from electronic devices that could be intercepted to reconstruct data being processed.

Question 5

Which physical control best describes a fence, wall, or locked door used to stop unauthorized access before it occurs?

Accepted Answer

Preventive control

Answer

Fences, walls, and locked doors are preventive controls because they physically stop or deter unauthorized access before it can occur.

ISC2 CC Practice Test

ISC2 CC Practice Test

CC Physical Security 3