Physical and Environmental Security CISA Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An e-commerce company's server room is located in a basement. The room has a water leak detection system, but the sensor is placed near the main door. The building's sprinkler system is a standard wet-pipe type. The IS auditor is concerned about water damage to the servers. Which recommendation would BEST reduce the risk of water damage?

   • AReplace the wet-pipe sprinkler system with a pre-action system that requires two triggers before releasing water.
   • BInstall waterproof covers over all server racks.
   • CEnsure the server room has a floor drain and that the room is watertight.
   • DRelocate the water leak sensors to the areas most likely to experience water ingress, such as under the raised floor and near piping.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A hospital's data center is in a region with a high risk of earthquakes. The building is not seismically reinforced. The IS auditor is assessing the risk to critical patient systems. The hospital has a limited budget and must choose one primary mitigation. Which option provides the BEST balance of risk reduction and cost?

   • AInstall seismic bracing for server racks and critical equipment.
   • BMove the data center to a different building that is seismically reinforced.
   • CDevelop a detailed disaster recovery plan and conduct regular drills.
   • DPurchase earthquake insurance to cover potential equipment damage.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A manufacturing company's main data center is located in a region that experiences occasional flooding. The data center is on the ground floor. The IS auditor is assessing the risk of water damage. Which control would be MOST effective in preventing water damage to the servers?

   • AEnsure the building has a sump pump and a backup power source for it.
   • BPlace servers on raised platforms that are at least 12 inches off the floor.
   • CRelocate the data center to a higher floor or a location not prone to flooding.
   • DInstall water leak detection sensors under the raised floor and connect them to an alarm system.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which physical control is specifically designed to detect and deter unauthorized entry into a restricted area?

   • AA motion sensor
   • BA mantraps
   • CA biometric reader
   • DA CCTV camera
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A data center has a raised floor with cooling units that maintain a constant temperature. The IS auditor is reviewing the environmental controls. The auditor notices that the temperature and humidity sensors are located near the cooling units, not in the center of the room. What is the MOST significant risk associated with this sensor placement?

   • AThe sensors will be more prone to physical damage from maintenance staff.
   • BThe sensors will be unable to communicate with the central monitoring system.
   • CThe sensors may not detect hot spots in the middle of the room, leading to equipment overheating.
   • DThe sensors will be affected by the vibration of the cooling units, causing inaccurate readings.
   Reveal Solution Discussion Select an answer first