Physical Security and Device Protection Flashcards

What is the risk of leaving a computer unattended and logged in at work?

Answer: An unauthorized person can access your files, email, and applications using your identity

An unattended logged-in computer allows anyone with physical access to act under your credentials, potentially causing data breaches or unauthorized changes.

What is a BIOS/UEFI password used for?

Answer: Preventing unauthorized users from booting the computer or changing firmware settings

A BIOS/UEFI password prevents unauthorized individuals from booting the system or altering low-level firmware settings before the OS loads.

Why should you avoid charging personal devices on public USB charging stations?

Answer: They may perform 'juice jacking,' installing malware or stealing data through the USB connection

Juice jacking exploits the data-transfer capability of USB connections to transfer malware or extract data while your device charges.

What step should you take before donating or disposing of an old computer?

Answer: Perform a secure wipe or destroy the hard drive to prevent data recovery

Standard deletion and quick formatting leave data recoverable with common tools; a secure wipe (multiple overwrites) or physical destruction ensures data cannot be retrieved.

Which of the following behaviors best demonstrates good physical security awareness?

Answer: Challenging or reporting unfamiliar individuals in restricted areas

Challenging or reporting unfamiliar people in secured areas helps enforce access controls and prevents tailgating and unauthorized physical access.

What is the purpose of a 'visitor log' at a secure facility?

Answer: To create an auditable record of who entered the facility and when

A visitor log provides an accountability trail that can be reviewed after a security incident to determine who had physical access during a given period.