In a layered physical security approach, what is the primary function of detection controls?

To physically block an intruder from entering

To provide a visual record for legal purposes

To alert security personnel to an unauthorized access attempt

To repair damage after an incident

A company has a high-security research lab. The lab is protected by a biometric access control system. However, the CISO is concerned that a malicious insider could tailgate behind an authorized employee. The company also wants to maintain a fast entry process to avoid bottlenecks. Which solution best addresses tailgating while minimizing friction?

Install a mantrap portal with a single-person capacity and biometric verification

Require employees to use a smart card and PIN at the door

Post a security guard at the entrance to visually confirm each person

Add a second biometric reader inside the lab to re-verify identity

Which of the following is a common physical security threat to information systems?

Unauthorized physical access to server rooms

During a physical security audit of a corporate headquarters, the auditor finds that the main entrance has a receptionist but no visitor sign-in process, and that the server room door is propped open for convenience. The CISO needs to address these findings. Which action should be taken first?

Hire additional security guards to monitor the entrance and the server room.

Install a biometric reader on the server room door and a camera at the main entrance.

Develop and enforce a policy requiring visitor registration and mandating that all doors to restricted areas remain closed and locked.

Conduct a risk assessment to identify all possible physical threats.

A data center is located in a region with extreme heat. The cooling system is critical to prevent server overheating. The CISO is considering adding a backup cooling system but has a limited budget. Which approach is most cost-effective while ensuring availability?

Install additional servers to distribute the heat load.

Rely on the primary cooling system and perform regular maintenance.

Purchase a full redundant cooling system that can operate indefinitely.

Install a backup cooling unit that can maintain the required temperature for a limited time, and implement a monitoring system that alerts staff to cooling failures.

EC-CouncilCertified Chief Information Security Officer

Domain 4Objective 2

Physical Security CCISO Practice Questions (Page 4)

Part of the Information Security Core Competencies domain, which makes up ~33% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~20–33 in this domain), expect 3–4 from this objective — we provide 58 practice questions to prepare you well beyond it. (estimate)

58questions here

12free pages

10concepts

10 Concepts in This Objective

Physical Security Fundamentals
Physical Security Threats and Risks
Physical Security Controls
Facility Design and Site Selection
Access Control Systems
Surveillance and Monitoring
Environmental and Life Safety
Physical Security Policies and Procedures
Physical Security Audits and Assessments
Integration with Information Security

Questions 16–20

16foundation · easy
In a layered physical security approach, what is the primary function of detection controls?
Select an answer first
17expert · hard
A company has a high-security research lab. The lab is protected by a biometric access control system. However, the CISO is concerned that a malicious insider could tailgate behind an authorized employee. The company also wants to maintain a fast entry process to avoid bottlenecks. Which solution best addresses tailgating while minimizing friction?
Select an answer first
18foundation · easy
Which of the following is a common physical security threat to information systems?
Select an answer first
19application · medium
During a physical security audit of a corporate headquarters, the auditor finds that the main entrance has a receptionist but no visitor sign-in process, and that the server room door is propped open for convenience. The CISO needs to address these findings. Which action should be taken first?
Select an answer first
20expert · hard
A data center is located in a region with extreme heat. The cooling system is critical to prevent server overheating. The CISO is considering adding a backup cooling system but has a limited budget. Which approach is most cost-effective while ensuring availability?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.