CISSP Physical Security 5

Question 1

An organization is selecting a backup site for disaster recovery. Which site type offers the FASTEST recovery time but at the HIGHEST cost?

Accepted Answer

Hot site

Answer

A hot site is a fully operational duplicate facility with live data replication, enabling near-immediate failover at the highest cost.

Question 2

What physical security risk does 'shoulder surfing' represent?

Accepted Answer

Observing sensitive information displayed on a screen or entered on a keypad

Answer

Shoulder surfing involves directly observing a target entering PINs, passwords, or viewing confidential data on a screen.

Question 3

Which standard provides the framework for physical and environmental security controls referenced in CISSP domain knowledge?

Accepted Answer

ISO/IEC 27001

Answer

ISO/IEC 27001 Annex A.11 specifically addresses physical and environmental security controls and is a globally recognized standard.

Question 4

A security professional is assessing the risk of TEMPEST attacks against a government facility. What is the PRIMARY concern?

Accepted Answer

Interception of electromagnetic emanations from electronic equipment

Answer

TEMPEST attacks exploit unintentional electromagnetic emissions from equipment to reconstruct data without physical access.

Question 5

What is the BEST practice for securing a wiring closet in a commercial office building?

Accepted Answer

Lock the closet and restrict access to authorized IT personnel only

Answer

Wiring closets contain network and telephony infrastructure; physical access must be restricted to prevent tampering or wiretapping.

CISSP - Certified Information Systems Security Professional Practice Test