Physical Security CCISO Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   When assessing physical security risks, what does the term 'risk' typically represent?

   • AThe number of security cameras installed
   • BThe total cost of security equipment
   • CThe type of locks used on doors
   • DThe likelihood that a threat will exploit a vulnerability, combined with the potential impact
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A company has a policy that allows employees to use their personal smartphones to access the building via a mobile credential. The CISO is concerned about the security of this approach. Which additional control would best mitigate the risk of a lost or stolen phone being used for unauthorized access?

   • ADisable the mobile credential feature on all phones
   • BIssue a separate physical badge to each employee
   • CUse a longer range Bluetooth reader so the phone is detected automatically
   • DRequire a PIN or biometric authentication on the phone before the credential is used
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   How does physical security contribute to defense-in-depth?

   • AIt provides an additional layer of protection that complements logical and administrative controls
   • BIt is only relevant for data centers
   • CIt replaces the need for logical security controls
   • DIt focuses only on external threats
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A small business operates from a leased office space and cannot make structural changes to the building. The CISO wants to improve physical security for the server closet, which is located in a hallway accessible to all employees. Which set of controls is most appropriate given the constraint?

   • AInstall a high-quality lock on the server closet door, add a motion-sensor alarm, and place a CCTV camera in the hallway.
   • BHire a security guard to stand outside the server closet 24/7.
   • CBuild a new wall to create a separate secure room for the server closet.
   • DMove the servers to a cloud provider to eliminate the need for physical security.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the primary purpose of CCTV in a physical security program?

   • ATo physically prevent unauthorized access
   • BTo automatically lock doors when an intruder is detected
   • CTo replace security guards entirely
   • DTo provide a visual record and real-time monitoring of activities
   Reveal Solution Discussion Select an answer first