Security Products & Solutions Knowledge Flashcards
7 cards from real CSS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Security Products & Solutions Knowledge flashcards as text
A customer wants to ensure that only company-managed and compliant devices can connect to their corporate Wi-Fi. Which solution enforces this requirement?
Answer: Network Access Control (NAC)
NAC evaluates endpoint compliance (patch level, antivirus status, device ownership) before granting network access, blocking or quarantining non-compliant devices.
Which fire suppression system is preferred for protecting server rooms and data centers because it does not damage electronic equipment?
Answer: Clean agent suppression system (e.g., FM-200)
Clean agent systems discharge a gaseous suppressant that extinguishes fire without water or residue, preventing damage to sensitive electronic equipment.
What does 'defense in depth' mean in the context of a security solution proposal?
Answer: Layering multiple security controls so that if one fails, others still protect the environment
Defense in depth applies multiple overlapping security layers—physical, network, endpoint, and application—so an attacker must defeat several controls to succeed.
A retail client wants to monitor customer traffic patterns and dwell time in store sections. Which advanced video analytics feature supports this?
Answer: People counting and heat mapping
People counting and heat mapping analytics track customer flow and identify high-traffic zones, helping retailers optimize store layouts and staffing.
Which wireless security protocol should be recommended for a new enterprise Wi-Fi deployment to provide the strongest encryption?
Answer: WPA3-Enterprise with AES-256
WPA3-Enterprise with AES-256 provides the strongest currently available Wi-Fi encryption and authentication, using individualized data encryption per session.
What is the role of a Certificate Authority (CA) in a Public Key Infrastructure (PKI)?
Answer: Issuing and managing digital certificates that verify identities
A CA is a trusted entity that issues digital certificates binding a public key to an identity, enabling secure encrypted communications and authentication.
A prospect is concerned about employees tailgating through secured doors. Which physical security solution directly addresses this threat?
Answer: Security mantrap / portal with anti-passback control
A mantrap (airlock/portal) allows only one person to enter at a time, and anti-passback rules prevent credential sharing, directly eliminating tailgating.