CISSP Physical Security 4 — Questions and Answers
Question 1: Which type of lock is MOST resistant to lock-picking attacks?
- Standard pin tumbler lock
- Combination dial lock
- High-security disc detainer lock (Correct answer)
- Magnetic key lock
Correct answer: High-security disc detainer lock
High-security disc detainer locks use rotating discs with tight tolerances, making them significantly more resistant to picking tools.
Question 2: A CISSP candidate is reviewing a data center's power redundancy. Which configuration provides the HIGHEST availability?
- Single UPS with generator backup
- Dual utility feeds with UPS and generator (2N configuration) (Correct answer)
- Generator with no UPS
- UPS with surge protection only
Correct answer: Dual utility feeds with UPS and generator (2N configuration)
A 2N configuration with dual utility feeds, UPS, and generator provides full redundancy with no single point of failure for power.
Question 3: When designing a secure parking lot adjacent to a corporate facility, which CPTED principle reduces the risk of theft and assault?
- Installing boom gates at the entrance
- Ensuring adequate lighting throughout the lot (Correct answer)
- Requiring employee ID for parking access
- Painting parking spaces with designated colors
Correct answer: Ensuring adequate lighting throughout the lot
Adequate lighting removes dark hiding spots, increases natural surveillance, and is a core CPTED deterrent for parking area crime.
Question 4: Which document formally defines the requirements for physical security controls that a co-location (colo) facility must meet?
- Business Impact Analysis (BIA)
- Service Level Agreement (SLA) (Correct answer)
- Disaster Recovery Plan (DRP)
- Data Classification Policy
Correct answer: Service Level Agreement (SLA)
An SLA with the colo provider formally specifies the physical security, uptime, and environmental controls the facility must maintain.
Question 5: A security team discovers that someone has been using a cloned RFID badge to access the building. Which control would BEST prevent this attack?
- Switching to longer PIN codes
- Implementing multi-factor authentication (badge + biometric) (Correct answer)
- Adding more CCTV cameras at entrances
- Increasing security guard patrols
Correct answer: Implementing multi-factor authentication (badge + biometric)
Multi-factor authentication combines something-you-have (badge) with something-you-are (biometric), so a cloned badge alone is insufficient.
Question 6: What is the MAIN purpose of a raised floor in a data center?
- Provide fire suppression access
- Allow for cable management and cool air distribution underneath (Correct answer)
- Protect against flooding
- Support heavy server rack loads
Correct answer: Allow for cable management and cool air distribution underneath
Raised floors create a plenum space for routing power and network cables and for distributing conditioned air to equipment.
Question 7: Which class of fire extinguisher is specifically rated for electrical equipment fires?
- Class A
- Class B
- Class C (Correct answer)
- Class D
Correct answer: Class C
Class C extinguishers use non-conductive agents and are designed for fires involving energized electrical equipment.
CISSP Physical Security 4
Which type of lock is MOST resistant to lock-picking attacks?