3.9 - Design Site and Facility Security Controls CISSP Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A hospital's data center must remain operational during a prolonged utility outage. The facility currently has a UPS that provides 15 minutes of backup power. Which additional control is MOST important to ensure continued operation?

   • AInstall a backup generator with an automatic transfer switch and a fuel supply contract.
   • BImplement a manual shutdown procedure for non-critical systems.
   • CInstall surge protectors on all critical equipment.
   • DAdd more UPS batteries to extend runtime to 30 minutes.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company is consolidating its network infrastructure and wants to secure its intermediate distribution facility (IDF) that serves a single floor. The IDF contains switches and patch panels. Which control is MOST important to implement?

   • AInstall a lockable cabinet or room and restrict access to network administrators.
   • BInstall a glass door to allow visual inspection of the equipment.
   • CUse a shared key for all building maintenance staff.
   • DPlace the IDF in an open area so that any issues can be easily seen.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A colocation data center offers customers a service level agreement (SLA) that guarantees 99.99% uptime. To meet this SLA, the facility must have redundant power and cooling. Which configuration is MOST appropriate?

   • AA single UPS and a single generator with a manual transfer switch.
   • BRedundant UPS systems with automatic transfer switches and N+1 cooling.
   • CA single power feed with a large UPS that can run for 8 hours.
   • DA single HVAC unit with a backup portable air conditioner.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A company is choosing a location for a new data center. The region is prone to both floods and hurricanes. Which location is MOST appropriate?

   • AAn inland area on elevated ground, away from flood plains.
   • BA basement of a building in a downtown area.
   • CA coastal area with a strong building structure.
   • DA low-lying area near a river, with a raised floor.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which access management practice is most appropriate for a data center?

   • AUsing a single shared access card for the entire IT department
   • BAllowing all employees unrestricted access for convenience
   • CImplementing multi-factor authentication and logging all access
   • DKeeping the door unlocked during business hours
   Reveal Solution Discussion Select an answer first