Physical Security of BES Cyber Systems GCIP Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A facility has a room containing BES Cyber Systems with a badge reader at the entrance. The security manager wants to ensure that only authorized personnel can enter, and that access is logged. The manager also wants to prevent unauthorized individuals from following an authorized person through the door. Which additional control should be implemented?

   • AA door contact sensor that triggers an alarm if the door is held open too long
   • BA security guard stationed at the entrance
   • CA video camera at the entrance
   • DA mantrap with two interlocking doors
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A BES Cyber System room is protected by a badge reader. A visitor needs to enter the room to perform a task. The visitor does not have a badge. What is the most appropriate action?

   • AHave the visitor wait until an employee can let them in without a badge.
   • BLet the visitor enter using an employee's badge.
   • CProp the door open so the visitor can enter without a badge.
   • DIssue a temporary badge to the visitor and require an escort.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A security operations center (SOC) monitors alarms from the physical security systems protecting BES Cyber Systems. The SOC receives an alert that a door in the server room was opened outside of normal business hours. The SOC analyst checks the video feed and sees an employee with a badge entering the room. What should the analyst do?

   • AIgnore the alert because the employee has a valid badge
   • BDisable the employee's badge immediately to prevent further access
   • CContact the employee directly to ask why they are in the room
   • DLog the event, verify the employee's authorization for after-hours access, and escalate if not authorized
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A security manager is reviewing the maintenance records for the physical security systems protecting BES Cyber Systems. The records show that the video surveillance system has not been tested for recording quality in 18 months, although the plan requires annual testing. What should the manager do?

   • AAssume the system is working because no issues have been reported
   • BUpdate the physical security plan to remove the annual testing requirement
   • CReplace the entire surveillance system to ensure it is working
   • DSchedule a test immediately and document the missed testing interval
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A security team wants to monitor a BES Cyber System room using a camera. They want to be able to identify individuals who enter the room. What is the most important consideration?

   • APlace the camera at the door to capture a clear view of each person's face.
   • BUse a camera with a wide-angle lens to capture the entire room.
   • CPlace the camera behind the door to capture people as they enter.
   • DRecord video at a low resolution to save storage space.
   Reveal Solution Discussion Select an answer first