Physical Security ACCISO Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Why is physical security considered a critical component of an organization's overall information security program?

   • AIt protects the physical infrastructure and media that store and process information, preventing unauthorized physical access and damage
   • BIt ensures that all employees have unrestricted access to server rooms and network closets
   • CIt eliminates the need for logical access controls such as passwords and encryption
   • DIt is primarily concerned with protecting the organization's brand reputation from negative publicity
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company's physical security policy requires that all visitors be escorted in restricted areas. During a routine audit, the security team finds that a visitor was left unescorted in a lab for 15 minutes because the escort was called away. Which policy revision best addresses this recurring issue?

   • ARequire visitors to wear visible badges and rely on employees to report unescorted visitors.
   • BProhibit all visitors from entering restricted areas, regardless of purpose.
   • CImplement a policy that escorts must transfer visitor responsibility to another authorized employee before leaving the area.
   • DIncrease the frequency of security patrols in restricted areas.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following is an example of a physical security control that acts as a barrier?

   • AA firewall configured to block unauthorized network traffic
   • BA security guard verifying employee badges at the entrance
   • CA perimeter fence surrounding a data center
   • DA biometric fingerprint scanner on a server room door
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which regulatory standard commonly requires organizations to implement physical security controls to protect cardholder data?

   • ASOX
   • BGDPR
   • CPCI DSS
   • DHIPAA
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A logistics company's distribution center is located in a flood-prone area. The IT manager is concerned about the risk of water damage to the server room, which is in the basement. The company has a business continuity plan that requires the server room to be operational during a flood event. Which control is most directly aligned with mitigating this specific threat?

   • APurchase a portable generator to provide backup power during the flood.
   • BRelocate the server room to a higher floor or a location above the flood plain.
   • CPlace servers on raised platforms and install sump pumps in the basement.
   • DInstall water sensors in the server room that trigger an alarm and automatically shut down critical systems.
   Reveal Solution Discussion Select an answer first