Securing Physical Spaces unit test
A test on this unit alone, marked as a percentage and a letter grade — for the test your class is actually sitting, rather than for May. Answer everything, then submit once: seeing the answer to question 3 before attempting question 4 makes the final percentage meaningless.
Bollards and barriers
Clean desk policy
Secure server room requirements
Motion and door sensors
Fire suppression for equipment
Why physical security is security
Safe and secure cabinet
Deterrent, preventive, detective, corrective
Asset tracking and inventory
Signage
Site redundancy
Compensating control
Short answer 1. Define or explain: Screen locking
3 ptsShort answer 2. Define or explain: Breach detection in physical space
3 ptsShort answer 3. Define or explain: Uninterruptible power supply (UPS)
3 ptsShort answer 4. Define or explain: Cable lock
3 ptsFree response
6 ptsDuring a walkthrough of a small business, an auditor observes the following. The server closet door is propped open with a chair because the room runs hot. A badge reader controls the main entrance, but visitors are admitted by whoever is nearest the door and there is no sign-in log. A cardboard box in the hallway holds a dozen decommissioned hard drives awaiting disposal.
Identify TWO physical security vulnerabilities and explain the consequence of each.
Define tailgating and describe one control that specifically addresses it.
Explain the risk posed by the discarded drives and describe TWO acceptable methods of media sanitization.
Explain why an attacker with physical access to a device can often defeat its logical security controls.
Explain how environmental controls contribute to security, naming the element of the CIA triad they protect.
Explain how the principle of least privilege applies to physical access.