CSCU Physical Security and Device Protection 1 — Questions and Answers
Question 1: What is 'shoulder surfing' in information security?
- A type of phishing email attack
- Observing someone's screen or keyboard to steal information (Correct answer)
- A technique for bypassing firewall rules
- Remotely accessing a computer without permission
Correct answer: Observing someone's screen or keyboard to steal information
Shoulder surfing involves physically watching someone enter sensitive information such as passwords or PINs.
Question 2: What is the purpose of a privacy screen filter on a laptop?
- To enhance screen brightness
- To prevent people nearby from viewing your screen from an angle (Correct answer)
- To block blue light for eye protection
- To waterproof the display
Correct answer: To prevent people nearby from viewing your screen from an angle
A privacy screen filter narrows the viewing angle so only the person directly in front can read the display, countering shoulder surfing.
Question 3: What does 'clean desk policy' mean in a workplace security context?
- Requiring employees to keep their workspace physically tidy
- Ensuring no sensitive documents or devices are left unattended or visible when not in use (Correct answer)
- Restricting food and drinks near computers
- Mandatory desk sanitization each morning
Correct answer: Ensuring no sensitive documents or devices are left unattended or visible when not in use
A clean desk policy requires employees to secure or remove sensitive materials from their desks when they step away, reducing the risk of unauthorized access.
Question 4: Why should you lock your computer screen when stepping away, even briefly?
- To save battery power
- To prevent unauthorized access to your open files and applications (Correct answer)
- To speed up the processor
- To prevent screen burn-in
Correct answer: To prevent unauthorized access to your open files and applications
Locking your screen requires re-authentication to regain access, preventing anyone nearby from viewing or using your open session.
Question 5: What is a Kensington lock used for?
- Encrypting files on a laptop
- Physically securing a laptop to a desk or fixed object to prevent theft (Correct answer)
- Locking USB ports to prevent unauthorized devices
- Securing a password manager vault
Correct answer: Physically securing a laptop to a desk or fixed object to prevent theft
A Kensington lock is a cable security system that physically tethers a laptop to a desk, deterring opportunistic theft in public spaces.
Question 6: Which of the following best describes 'tailgating' in physical security?
- Following someone's browsing history to gather information
- An unauthorized person following an authorized employee through a secured entry (Correct answer)
- Sending emails that mimic a supervisor's tone
- Accessing a network by following wireless signals
Correct answer: An unauthorized person following an authorized employee through a secured entry
Tailgating occurs when an unauthorized person physically follows an authorized individual into a restricted area without using their own credentials.
CSCU Physical Security and Device Protection 1
What is 'shoulder surfing' in information security?