CISSP Physical Security 3 — Questions and Answers
Question 1: Which fire suppression agent is MOST appropriate for a server room to minimize equipment damage?
- Water sprinklers
- Dry chemical extinguisher
- Clean agent (e.g., FM-200) (Correct answer)
- CO2 system
Correct answer: Clean agent (e.g., FM-200)
Clean agents like FM-200 suppress fire without leaving residue or causing electrical damage, making them ideal for data centers.
Question 2: A security audit finds that terminated employees' access badges are not being deactivated promptly. Which process addresses this?
- Implementing two-factor authentication on all doors
- Establishing an offboarding procedure that includes immediate badge deactivation (Correct answer)
- Deploying security cameras at all entrances
- Issuing temporary badges to all employees
Correct answer: Establishing an offboarding procedure that includes immediate badge deactivation
A formal offboarding process that immediately revokes physical access credentials prevents unauthorized entry by former employees.
Question 3: What is the MAIN security advantage of using a biometric system over a PIN-based access system?
- Biometrics are less expensive to deploy
- Biometric credentials cannot be shared or stolen as easily as PINs (Correct answer)
- Biometric systems have zero false acceptance rates
- Biometrics do not require network connectivity
Correct answer: Biometric credentials cannot be shared or stolen as easily as PINs
Biometric credentials are tied to an individual's unique physical traits, making them far harder to share, guess, or steal than PINs.
Question 4: An organization wants to protect its perimeter from vehicle ramming attacks. Which control is MOST effective?
- Chain-link fence
- Security guard patrol
- Bollards or concrete barriers (Correct answer)
- CCTV with license plate recognition
Correct answer: Bollards or concrete barriers
Bollards and reinforced concrete barriers physically stop vehicles and are specifically rated to withstand ramming attacks.
Question 5: Which environmental control is CRITICAL to preventing hardware failures in a data center?
- Uninterruptible power supply (UPS)
- Proper temperature and humidity control (HVAC) (Correct answer)
- Cable management systems
- Raised flooring
Correct answer: Proper temperature and humidity control (HVAC)
Maintaining proper temperature and humidity prevents overheating and static discharge, the primary environmental causes of hardware failure.
Question 6: A visitor arrives at a secure facility and is escorted to a meeting room. Which physical security principle does escorting visitors implement?
- Defense in depth
- Separation of duties
- Need-to-know access control
- Least privilege through physical supervision (Correct answer)
Correct answer: Least privilege through physical supervision
Escorting visitors ensures they only access areas necessary for their purpose and cannot roam unsupervised, enforcing least privilege physically.
Question 7: What does the term 'dead man's door' refer to in physical security?
- An emergency exit that triggers an alarm when opened
- A mantrap that traps an intruder once unauthorized entry is detected (Correct answer)
- A door that automatically locks if power fails
- A secondary exit used only during fire evacuations
Correct answer: A mantrap that traps an intruder once unauthorized entry is detected
A dead man's door (or mantrap) captures a person between two interlocked doors when unauthorized access is detected, preventing entry or exit.
CISSP Physical Security 3
Which fire suppression agent is MOST appropriate for a server room to minimize equipment damage?