A company's data center is located in a region with frequent thunderstorms and occasional power surges. The CISO wants to protect the servers from power-related damage and ensure availability during short outages. Which environmental control is most appropriate?

Install surge protectors and an uninterruptible power supply (UPS) for all critical servers.

Use power strips with on/off switches for all servers.

Rely on the building's main circuit breaker for protection.

Install a backup generator but no surge protection.

A company is selecting a site for a new data center that will house critical servers. The region is prone to flooding and occasional tornadoes. The CISO must choose a location that minimizes environmental risks and supports business continuity. Which site selection and facility design choice is the most appropriate?

A location in a basement of an existing building to protect from tornadoes.

A location near a river for easy access to cooling water.

A location in a remote area with no nearby infrastructure to reduce the risk of cascading failures.

A location on elevated ground away from flood plains, with reinforced walls and a roof designed to withstand high winds.

A company has a strong cybersecurity program but physical security is managed separately. The CISO wants to integrate physical security with the overall information security strategy. What is the first step?

Create a separate physical security budget

Conduct a joint risk assessment that includes both physical and cyber threats

Install more CCTV cameras in the data center

Require all employees to use multi-factor authentication

A company is designing a new headquarters and wants to minimize the risk of physical intrusions and environmental hazards. The site is in a seismic zone and near a busy road. Which facility design choice is most appropriate?

Design the building with a flat roof to reduce construction costs.

Use large windows on the ground floor to improve visibility and natural light.

Place the building close to the road to facilitate emergency access.

Locate the building away from the road with a secure perimeter, and design the structure to meet seismic building codes.

EC-CouncilCertified Chief Information Security Officer

Domain 4Objective 2

Physical Security CCISO Practice Questions (Page 1)

Part of the Information Security Core Competencies domain, which makes up ~33% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~20–33 in this domain), expect 3–4 from this objective — we provide 58 practice questions to prepare you well beyond it. (estimate)

58questions here

12free pages

10concepts

10 Concepts in This Objective

Physical Security Fundamentals
Physical Security Threats and Risks
Physical Security Controls
Facility Design and Site Selection
Access Control Systems
Surveillance and Monitoring
Environmental and Life Safety
Physical Security Policies and Procedures
Physical Security Audits and Assessments
Integration with Information Security

Questions 1–5

1foundation · easy
Which technology is commonly used to detect unauthorized entry through a door or window?
Select an answer first
2application · medium
A company's data center is located in a region with frequent thunderstorms and occasional power surges. The CISO wants to protect the servers from power-related damage and ensure availability during short outages. Which environmental control is most appropriate?
Select an answer first
3application · medium
A company is selecting a site for a new data center that will house critical servers. The region is prone to flooding and occasional tornadoes. The CISO must choose a location that minimizes environmental risks and supports business continuity. Which site selection and facility design choice is the most appropriate?
Select an answer first
4application · medium
A company has a strong cybersecurity program but physical security is managed separately. The CISO wants to integrate physical security with the overall information security strategy. What is the first step?
Select an answer first
5application · medium
A company is designing a new headquarters and wants to minimize the risk of physical intrusions and environmental hazards. The site is in a seismic zone and near a busy road. Which facility design choice is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.

Physical Security CCISO Practice Questions (Page 1)

Questions 1–5

Which technology is commonly used to detect unauthorized entry through a door or window?

A company's data center is located in a region with frequent thunderstorms and occasional power surges. The CISO wants to protect the servers from power-related damage and ensure availability during short outages. Which environmental control is most appropriate?

A company has a strong cybersecurity program but physical security is managed separately. The CISO wants to integrate physical security with the overall information security strategy. What is the first step?

A company is designing a new headquarters and wants to minimize the risk of physical intrusions and environmental hazards. The site is in a seismic zone and near a busy road. Which facility design choice is most appropriate?

Keep studying — Information Security Core Competencies