A hospital's data center is located in a basement. The facility has a backup generator, but the generator is also in the basement. During a recent flood, the generator failed because it was submerged. What is the most critical improvement to prevent this from recurring?

Add more sump pumps in the basement

Relocate the generator to a higher floor or rooftop

Purchase a portable generator that can be moved during a flood

Install a water leak detection system in the basement

During a physical security audit, an assessor finds that the main entrance has a single glass door with no security guard, and the receptionist cannot see the door from their desk. What is the most significant vulnerability?

The glass door can be easily broken

Unauthorized individuals can enter without being challenged

The receptionist might not hear the doorbell

What is the typical first step in developing a physical security policy?

Conduct a risk assessment to identify assets and threats

A hospital's IT department is responsible for the server room that hosts patient records. The room has a fire suppression system, but the CISO is concerned about the risk of water damage from sprinklers and the impact of a power outage on life-safety systems. Which set of environmental controls should be implemented?

Use standard sprinklers and rely on the building's main power supply.

Install a pre-action or gas-based fire suppression system and connect critical servers to an uninterruptible power supply (UPS) with a backup generator.

Implement a manual fire extinguisher program and use surge protectors for all equipment.

Install smoke detectors only and place servers on the floor to avoid water damage.

A company has a high rate of false alarms from its intrusion detection system, causing security staff to become desensitized and ignore alerts. The CISO wants to improve the effectiveness of the system. Which approach is most appropriate?

Adjust the sensitivity of the sensors and implement a verification process, such as using CCTV to confirm an alarm before dispatching a response.

Increase the sensitivity of the sensors to catch more potential intrusions.

Disable the intrusion detection system and rely on CCTV monitoring.

Replace the security staff with automated response systems.

EC-CouncilCertified Chief Information Security Officer

Domain 4Objective 2

Physical Security CCISO Practice Questions (Page 11)

Part of the Information Security Core Competencies domain, which makes up ~33% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~20–33 in this domain), expect 3–4 from this objective — we provide 58 practice questions to prepare you well beyond it. (estimate)

58questions here

12free pages

10concepts

10 Concepts in This Objective

Physical Security Fundamentals
Physical Security Threats and Risks
Physical Security Controls
Facility Design and Site Selection
Access Control Systems
Surveillance and Monitoring
Environmental and Life Safety
Physical Security Policies and Procedures
Physical Security Audits and Assessments
Integration with Information Security

Questions 51–55

51expert · hard
A hospital's data center is located in a basement. The facility has a backup generator, but the generator is also in the basement. During a recent flood, the generator failed because it was submerged. What is the most critical improvement to prevent this from recurring?
Select an answer first
52application · medium
During a physical security audit, an assessor finds that the main entrance has a single glass door with no security guard, and the receptionist cannot see the door from their desk. What is the most significant vulnerability?
Select an answer first
53foundation · easy
What is the typical first step in developing a physical security policy?
Select an answer first
54application · medium
A hospital's IT department is responsible for the server room that hosts patient records. The room has a fire suppression system, but the CISO is concerned about the risk of water damage from sprinklers and the impact of a power outage on life-safety systems. Which set of environmental controls should be implemented?
Select an answer first
55expert · hard
A company has a high rate of false alarms from its intrusion detection system, causing security staff to become desensitized and ignore alerts. The CISO wants to improve the effectiveness of the system. Which approach is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.