Chapter 4

You are about to enter your office building through a back entrance. A man dressed as a plumber asks you to let him in so he can fix the restroom. What should you do?

Which of the following are solutions that address physical security?

Which of the following is not an example of a physical barrier access control mechanism?

Which of the following can be used to stop piggybacking at a front entrance where employees should swipe smart cards to gain entry?

Which option is a secure doorway that can be used in coordination with a mantrap to allow easy egress from a secured environment while actively preventing re-entrance through the exit portal?

What is the primary benefit of CCTV?

You want to use CCTV to increase your physical security. You want the ablity to remotely control the camera position. Which camera type should you choose?

You want to use CCTV to increase the physical security of your building. Which of the following camera types would offer the sharpest image at the greatest distance under the lowest lighting conditions?

Which of the following CCTV camera types lets you adjust the distance that the camera can see (in other words, zoom in or out)?

Which of the following allows for easy exit of an area in the event of an emergency, but prevents entry?

Which of the following controls is an example of a physical access control method?

Hardened carrier

biometric authentication

Barricades

Emergency escape plans

Alarmed carriers

anti-passback system

Emergency lighting

Exterior floodlights

Which of the following is the most important thing to do to prevent console access to the router?

Your company has five salesman who work out of the office and frequently leave their laptops laying on their desks in their cubicles. You are concerned that someone might walk by and take one of these laptops. Which of the following is the best protection to implement to address your concerns?

You are an IT consultant. You are visiting a new client's site to become familiar with their network. As you walk around their facility, you note the following: When you enter the facility, a receptionist greets you and directs you down the hallway to the office manager's cubicle. The receptionist uses a notebook system that is secured to her desk with a cable lock. The office manager informs you that the organization's servers are kept in a locked closet. Only she has the key to the closet. When you arrive on site, you will be required to get the key from her to access the closet. She informs you that server backups are configured to run each night. A rotation of external USB hard disks are used as the backup media. You notice that the organization's network switch is kept in an empty cubicle adjacent to the office manager's workspace. You notice that a router/firewall/content filter all-in-one device has been implemented in the server closet to protect the internal network from external attacks. Which security-related recommendations should you make to this client?

You are an IT consultant. You are visiting a new client's site to become familiar with their network. As you walk around their facility, you note the following: • When you enter the facility, a receptionist greets you and escorts you through a locked door to the work area, where the office manager sits. • The office manager informs you that the organization's servers are kept in a locked closet. An access card is required to enter the server closet. • She informs you that server backups are configured to run each night. A rotation of tapes are used as the backup media. • You notice the organization's network switch is kept in the server closet. • You notice that a router/firewall/content filter UTM device has been implemented in the server closet to protect the internal network from external attacks. The office manager informs you that her desktop system will no longer boot and asks you to repair or replace it, recovering as much data as possible in the process. You take the workstation back to your office to work on it. Which security-related recommendations should you make to this client?

A malicious user in your organization was able to use the Trinity Rescue Kit to change the password on a department manager's computer in the finance department. The user was able to copy data containing bank account information and social security numbers. The user then destroyed data be resetting the computer. The department manager was at lunch at the time and had enabled the lock screen to require a password to gain access to the computer. Which additional measure should the manager have taken to prevent data theft?

Your networking closet contains your network routers, switches, bridges, and some servers. You want to make sure an attacker is not able to gain physical access to the equipment in the networking closet and prevent anyone from reconfiguring the network to set up remote access or backdoor access. Which of the following measures are the best way to secure your networking equipment from unauthorized physical access? (Select two. Each measure is part of a complete solution.)

An attacker is using an eavesdropping technique called Van Eck phreaking on a networking closet. Which of the following describes what the attacker is doing?

One of the ways attackers can access unencrypted data being transmitted on your network is by collecting electronic emissions that come from your networking closet or Ethernet cables. Which of the following is NOT a good solution to this problem?

Physical security is an obvious requirement for network security, but it is often easy to overlook or forget to plan for it. Which of the following is NOT a benefit of physical security?

To keep your data center safe, you have done the following: Restricted physical access to employees who strictly need to get in the data center Required employees to enter a password using a pin pad to enter the data center Deployed a Faraday cage to keep sensitive network devices safe from external electrical fields Which of the following measures will NOT improve physical security in the data center?

You walk by the server room and notice that a fire started. What should you do first?

Which of the following fire extinguisher types is best used for the electrical fires that might result when working with computer components?

Which of the following fire extinguisher suppressant types is best used for electrical fires that might result when working with computer components?

Which of the following fire extinguisher types poses a safety risk to users in the area?

What is the recommended humidity level for server rooms?

Components within your server room are failing at a rapid pace. You discover that the humidity in the server room is at 60% and the temperature is at 80 degrees. What should you do?

You maintain the network for an industrial manufacturing company. You are concerned about the dust in the area getting into the server components and affecting the ability of the network. Which of the following should you implement?

Which of the following statements about ESD is not correct?

Which of the following is the least effective power loss protection for computer systems?

Beside protecting a computer from under voltages, a typical UPS also performs which two actions?