A physical security audit reveals that the organization's CCTV system records at a low resolution and retains footage for only 7 days. What is the most likely risk associated with this finding?

Inability to identify suspects or provide evidence after an incident

The CCTV system is vulnerable to hacking

The CCTV system may not be compliant with privacy regulations

High storage costs due to long retention

In the context of information security, why is physical security considered a foundational layer?

Because it protects the hardware and facilities that host information systems, without which logical controls cannot function

Because it focuses solely on employee safety, not data

Because it is the only control needed to secure data

Because it is mandated by law in all countries

Which activity is typically part of a physical security assessment?

Reviewing access control logs and visitor records

Designing a new firewall rule set

A retail store has experienced several after-hours break-ins. The existing CCTV system records continuously, but the footage is only reviewed after an incident. The store manager wants to receive real-time alerts when someone enters the building after hours. Which control should be implemented?

Post signs indicating that the premises are monitored.

Install door and window sensors that trigger an alarm and send an immediate notification to the manager's phone.

Upgrade the CCTV cameras to higher resolution.

Add more lighting around the store exterior.

What is the primary goal of a physical security audit?

To punish employees who violate security policies

To promote the organization's security program

To identify vulnerabilities and assess the effectiveness of existing controls

To replace all physical security controls

EC-CouncilCertified Chief Information Security Officer

Domain 4Objective 2

Physical Security CCISO Practice Questions (Page 3)

Part of the Information Security Core Competencies domain, which makes up ~33% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~20–33 in this domain), expect 3–4 from this objective — we provide 58 practice questions to prepare you well beyond it. (estimate)

58questions here

12free pages

10concepts

10 Concepts in This Objective

Physical Security Fundamentals
Physical Security Threats and Risks
Physical Security Controls
Facility Design and Site Selection
Access Control Systems
Surveillance and Monitoring
Environmental and Life Safety
Physical Security Policies and Procedures
Physical Security Audits and Assessments
Integration with Information Security

Questions 11–15

11application · medium
A physical security audit reveals that the organization's CCTV system records at a low resolution and retains footage for only 7 days. What is the most likely risk associated with this finding?
Select an answer first
12foundation · easy
In the context of information security, why is physical security considered a foundational layer?
Select an answer first
13foundation · easy
Which activity is typically part of a physical security assessment?
Select an answer first
14application · medium
A retail store has experienced several after-hours break-ins. The existing CCTV system records continuously, but the footage is only reviewed after an incident. The store manager wants to receive real-time alerts when someone enters the building after hours. Which control should be implemented?
Select an answer first
15foundation · easy
What is the primary goal of a physical security audit?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.