A physical security audit finds that a company's server room door is propped open with a doorstop during the day for convenience. The room contains sensitive data. The auditor also notes that the CCTV camera covering the door is not working. What is the most effective immediate corrective action?

Remove the doorstop and enforce a policy that the door must remain closed and locked

Install a new access control system on the door

Move the sensitive data to another location

What is the primary purpose of physical security in an organization?

To protect personnel, hardware, programs, networks, and data from physical actions and events that could cause serious loss or damage

To replace logical security controls with physical barriers

To monitor employee productivity and behavior

To ensure that all employees have access to the building at all times

Why should physical security be integrated with the overall information security strategy?

To ensure that physical and logical controls are aligned and support each other

To reduce the budget for logical security

To eliminate the need for security policies

To focus solely on perimeter security

A company has a mature cybersecurity program but has not integrated physical security into its incident response plan. A recent break-in at the office resulted in the theft of laptops containing unencrypted data. The CISO wants to prevent this from happening again. Which action is most aligned with defense-in-depth?

Only implement a remote wipe capability for the laptops.

Implement full-disk encryption on all laptops and add physical security controls such as cable locks and access control to the office.

Conduct a physical security audit and implement all recommendations.

Only increase the number of security guards at the office entrance.

A hospital wants to secure its pharmacy, which contains controlled substances. Only pharmacists and authorized staff should enter. The system must provide a high level of identity assurance and be easy to use. Which access control system is most appropriate?

Shared PIN code for the pharmacy team

A physical key that is kept in a lockbox

EC-CouncilCertified Chief Information Security Officer

Domain 4Objective 2

Physical Security CCISO Practice Questions (Page 8)

Part of the Information Security Core Competencies domain, which makes up ~33% of our current practice bank. EC-Council does not publish an official question count, but from its 150-minute exam (~60–100 total, ~20–33 in this domain), expect 3–4 from this objective — we provide 58 practice questions to prepare you well beyond it. (estimate)

58questions here

12free pages

10concepts

10 Concepts in This Objective

Physical Security Fundamentals
Physical Security Threats and Risks
Physical Security Controls
Facility Design and Site Selection
Access Control Systems
Surveillance and Monitoring
Environmental and Life Safety
Physical Security Policies and Procedures
Physical Security Audits and Assessments
Integration with Information Security

Questions 36–40

36expert · hard
A physical security audit finds that a company's server room door is propped open with a doorstop during the day for convenience. The room contains sensitive data. The auditor also notes that the CCTV camera covering the door is not working. What is the most effective immediate corrective action?
Select an answer first
37foundation · easy
What is the primary purpose of physical security in an organization?
Select an answer first
38foundation · easy
Why should physical security be integrated with the overall information security strategy?
Select an answer first
39expert · hard
A company has a mature cybersecurity program but has not integrated physical security into its incident response plan. A recent break-in at the office resulted in the theft of laptops containing unencrypted data. The CISO wants to prevent this from happening again. Which action is most aligned with defense-in-depth?
Select an answer first
40application · medium
A hospital wants to secure its pharmacy, which contains controlled substances. Only pharmacists and authorized staff should enter. The system must provide a high level of identity assurance and be easy to use. Which access control system is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCISO” is a trademark of its owner, used for identification only.