Physical Security Flashcards
7 cards from real CISSP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Physical Security flashcards as text
An organization is selecting a backup site for disaster recovery. Which site type offers the FASTEST recovery time but at the HIGHEST cost?
Answer: Hot site
A hot site is a fully operational duplicate facility with live data replication, enabling near-immediate failover at the highest cost.
What physical security risk does 'shoulder surfing' represent?
Answer: Observing sensitive information displayed on a screen or entered on a keypad
Shoulder surfing involves directly observing a target entering PINs, passwords, or viewing confidential data on a screen.
Which standard provides the framework for physical and environmental security controls referenced in CISSP domain knowledge?
Answer: ISO/IEC 27001
ISO/IEC 27001 Annex A.11 specifically addresses physical and environmental security controls and is a globally recognized standard.
A security professional is assessing the risk of TEMPEST attacks against a government facility. What is the PRIMARY concern?
Answer: Interception of electromagnetic emanations from electronic equipment
TEMPEST attacks exploit unintentional electromagnetic emissions from equipment to reconstruct data without physical access.
What is the BEST practice for securing a wiring closet in a commercial office building?
Answer: Lock the closet and restrict access to authorized IT personnel only
Wiring closets contain network and telephony infrastructure; physical access must be restricted to prevent tampering or wiretapping.
During a fire evacuation, which principle should override the normal physical security access controls?
Answer: Life safety takes precedence over asset protection
Life safety is the highest priority; security controls must not impede safe evacuation even if they temporarily reduce physical security.
Which physical security control is MOST effective against dumpster diving attacks?
Answer: Cross-cut shredding of all sensitive documents before disposal
Cross-cut shredding renders discarded documents unreadable, eliminating the information value of anything recovered from trash.