CISSP Physical Security 2 — Questions and Answers
Question 1: A security manager wants to prevent tailgating at a high-security data center entrance. Which control is MOST effective?
- Security guard with sign-in log
- Mantrap (airlock) with one-person-at-a-time enforcement (Correct answer)
- CCTV cameras at the entrance
- Card reader with PIN
Correct answer: Mantrap (airlock) with one-person-at-a-time enforcement
A mantrap physically prevents more than one person from passing through at a time, directly eliminating tailgating opportunities.
Question 2: Which type of motion detector uses radar-like signals to detect movement through walls and objects?
- Passive infrared (PIR)
- Microwave detector (Correct answer)
- Photoelectric sensor
- Vibration detector
Correct answer: Microwave detector
Microwave detectors emit microwave pulses and measure reflections, allowing detection through non-metallic barriers.
Question 3: A data center is located in a flood-prone area. Which site design choice BEST mitigates flood risk?
- Install sump pumps in the server room
- Elevate critical equipment above the base flood elevation (Correct answer)
- Use water-resistant server racks
- Deploy flood sensors and alarms
Correct answer: Elevate critical equipment above the base flood elevation
Elevating critical equipment above the base flood elevation prevents water from reaching hardware even if flooding occurs.
Question 4: What is the PRIMARY purpose of a Faraday cage in a secure facility?
- Prevent unauthorized physical access
- Block electromagnetic signals from entering or leaving (Correct answer)
- Protect against seismic activity
- Shield equipment from power surges
Correct answer: Block electromagnetic signals from entering or leaving
A Faraday cage is a conductive enclosure that attenuates electromagnetic fields, preventing signal eavesdropping and interference.
Question 5: Which access control approach grants physical access based on something the user is?
- Proximity card
- Cipher lock
- Biometric scanner (Correct answer)
- Token device
Correct answer: Biometric scanner
Biometric scanners use physiological or behavioral characteristics (something you are) to authenticate individuals.
Question 6: A company stores backup tapes off-site. Which physical security control is MOST important for the transport process?
- Tamper-evident seals on tape cases
- Encrypting the tapes before transport (Correct answer)
- Using a bonded courier service
- Logging tape serial numbers
Correct answer: Encrypting the tapes before transport
Encrypting tapes ensures that even if they are lost or stolen during transport, the data cannot be read.
Question 7: What does CPTED (Crime Prevention Through Environmental Design) primarily aim to achieve?
- Detect intrusions using surveillance technology
- Deter crime by designing the physical environment to reduce opportunity (Correct answer)
- Respond rapidly to security incidents
- Identify criminals through forensic evidence
Correct answer: Deter crime by designing the physical environment to reduce opportunity
CPTED uses natural surveillance, access control, and territorial reinforcement in facility design to reduce criminal opportunity.
CISSP Physical Security 2
A security manager wants to prevent tailgating at a high-security data center entrance.
Which control is MOST effective?