Physical Security Concepts and Attack Vectors NDE Practice Questions (Page 6)

Questions 26–28

1. 26foundation · easy

   Which statement best defines physical security in the context of protecting an organization's information assets?

   • ASoftware controls that restrict logical access to data stored on servers and endpoints.
   • BEncryption techniques used to protect data at rest and in transit from interception.
   • CMeasures that protect hardware, facilities, and people from physical actions and events that could cause loss or damage to data or systems.
   • DPolicies that define acceptable use of organizational computing resources by employees.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   An attacker impersonates a delivery driver to convince a receptionist to hold a door open, allowing the attacker to enter a restricted office area. Which physical attack vector does this describe?

   • ASocial engineering
   • BEavesdropping
   • CSabotage
   • DTheft
   Reveal Solution Discussion Select an answer first
3. 28application · medium

   A small law firm shares a multi-tenant office building. The firm's server room door uses a keypad lock, and the code is posted on a sticky note inside the reception area for visiting technicians. The office manager wants to reduce the risk of unauthorized access to the server room without spending on new hardware. Which action best addresses the physical security weakness?

   • ARemove the sticky note and require visitors to be escorted by an employee when entering the server room.
   • BInstall a privacy screen on the reception computer so visitors cannot see the sticky note from the front desk.
   • CChange the keypad code monthly and keep the sticky note in the reception area for easy reference.
   • DAsk the building management to add a security guard at the main entrance only.
   Reveal Solution Discussion Select an answer first