Physical Security Flashcards
7 cards from real CC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Physical Security flashcards as text
How does piggybacking differ from tailgating in physical security?
Answer: Piggybacking is done with the knowledge and consent of the authorized user; tailgating is done without consent
Piggybacking occurs when an authorized user knowingly allows an unauthorized person to follow them through an access point, while tailgating happens without the knowledge or consent of the authorized user.
In which security control category are CCTV cameras primarily classified?
Answer: Detective
CCTV cameras are primarily detective controls because they record and monitor activity to detect security incidents, though they can also serve as a deterrent.
What is a Faraday cage used for in physical security?
Answer: Blocking electromagnetic signals from entering or leaving a shielded area
A Faraday cage is a metal enclosure that blocks electromagnetic fields, preventing signals from being emitted or received, which protects against wireless eavesdropping and signal interception.
Which fire suppression system is most appropriate for a data center to protect electronic equipment?
Answer: Clean agent suppression system (e.g., FM-200)
Clean agent suppression systems like FM-200 or CO2 extinguish fires without leaving residue or using water, protecting expensive electronic equipment from damage.
What is the primary security purpose of maintaining a visitor log at a facility entrance?
Answer: To create an accountability record of who entered the facility and when
Visitor logs create an audit trail documenting who accessed a facility, which supports accountability, incident investigation, and verification of authorized access.
Physical access badges and key cards are classified as which type of authentication factor?
Answer: Something you have
Physical access badges and key cards are possession-based factors, classified as 'something you have' in the three-factor authentication model.
What is the 'two-person rule' (or dual control) in physical security?
Answer: Requiring two authorized individuals to be present to perform certain sensitive operations
The two-person rule requires that two authorized individuals must both be present to access or perform highly sensitive operations, preventing single-person abuse or error.