← All CISSP Flashcard Decks

Physical Security Flashcards

7 cards from real CISSP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Physical Security flashcards as text
  1. An organization is selecting a backup site for disaster recovery. Which site type offers the FASTEST recovery time but at the HIGHEST cost?

    Answer: Hot site

    A hot site is a fully operational duplicate facility with live data replication, enabling near-immediate failover at the highest cost.

  2. What physical security risk does 'shoulder surfing' represent?

    Answer: Observing sensitive information displayed on a screen or entered on a keypad

    Shoulder surfing involves directly observing a target entering PINs, passwords, or viewing confidential data on a screen.

  3. Which standard provides the framework for physical and environmental security controls referenced in CISSP domain knowledge?

    Answer: ISO/IEC 27001

    ISO/IEC 27001 Annex A.11 specifically addresses physical and environmental security controls and is a globally recognized standard.

  4. A security professional is assessing the risk of TEMPEST attacks against a government facility. What is the PRIMARY concern?

    Answer: Interception of electromagnetic emanations from electronic equipment

    TEMPEST attacks exploit unintentional electromagnetic emissions from equipment to reconstruct data without physical access.

  5. What is the BEST practice for securing a wiring closet in a commercial office building?

    Answer: Lock the closet and restrict access to authorized IT personnel only

    Wiring closets contain network and telephony infrastructure; physical access must be restricted to prevent tampering or wiretapping.

  6. During a fire evacuation, which principle should override the normal physical security access controls?

    Answer: Life safety takes precedence over asset protection

    Life safety is the highest priority; security controls must not impede safe evacuation even if they temporarily reduce physical security.

  7. Which physical security control is MOST effective against dumpster diving attacks?

    Answer: Cross-cut shredding of all sensitive documents before disposal

    Cross-cut shredding renders discarded documents unreadable, eliminating the information value of anything recovered from trash.