Physical Security Concepts and Attack Vectors NDE Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A startup's office has an open-plan layout, and employees often leave laptops on their desks overnight. The office is cleaned by an external janitorial service after hours. The startup wants to reduce the risk of laptop theft without making the office inconvenient for employees. Which control is most appropriate?

   • AInstall a CCTV camera that records the office overnight.
   • BProvide lockable docking stations or cable locks for each employee's laptop.
   • CRequire all employees to take their laptops home every night.
   • DAsk the janitorial service to sign a non-disclosure agreement.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A startup operates in a co-working space where the server rack is in a shared utility closet. The closet door is locked with a key that many tenants have. The startup wants to protect its equipment without relocating. Which measure is most effective?

   • AAsk the co-working space to change the closet lock monthly.
   • BLabel the rack with the company name and 'Do Not Touch'.
   • CPlace a camera inside the closet pointing at the rack.
   • DInstall a lockable rack enclosure with individual access control.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An attacker waits outside a secure door and, when an employee swipes their badge, the attacker slips in behind them before the door closes. Which control would most directly prevent this?

   • ARequire employees to wear visible ID badges.
   • BInstall a turnstile that allows only one person per authentication.
   • CUse a door that closes slowly.
   • DAdd a security camera at the entrance.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company's data center is located in a region prone to earthquakes. The company wants to protect its servers from physical damage caused by seismic activity. Which physical security control is most relevant?

   • AInstall seismic bracing and shock-absorbing racks for the server equipment.
   • BPlace a security guard at the data center entrance.
   • CDeploy a fire suppression system using water sprinklers.
   • DAdd a biometric access control system to the data center door.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company's data center is in a building that also houses other tenants. The data center has its own entrance, but the loading dock is shared. A vendor delivering equipment is asked to wait in the loading dock area, which is accessible to other tenants. The vendor has a laptop with sensitive data. What is the greatest risk?

   • AThe vendor's laptop could be stolen by another tenant.
   • BThe vendor could social engineer the receptionist.
   • CThe vendor could sabotage the building's power supply.
   • DThe vendor could tailgate an employee into the data center.
   Reveal Solution Discussion Select an answer first