Securing Physical Spaces unit test
A test on this unit alone, marked as a percentage and a letter grade — for the test your class is actually sitting, rather than for May. Answer everything, then submit once: seeing the answer to question 3 before attempting question 4 makes the final percentage meaningless.
Breach detection in physical space
Visitor management
Environmental controls (HVAC)
Asset tracking and inventory
Two-person control
Fire suppression for equipment
Bollards and barriers
Chain of custody
Clean desk policy
Compensating control
Faraday cage
Air gap
Short answer 1. Define or explain: Video surveillance (CCTV)
3 ptsShort answer 2. Define or explain: Site redundancy
3 ptsShort answer 3. Define or explain: Tamper-evident seal
3 ptsShort answer 4. Define or explain: Access control vestibule (mantrap)
3 ptsFree response
6 ptsDuring a walkthrough of a small business, an auditor observes the following. The server closet door is propped open with a chair because the room runs hot. A badge reader controls the main entrance, but visitors are admitted by whoever is nearest the door and there is no sign-in log. A cardboard box in the hallway holds a dozen decommissioned hard drives awaiting disposal.
Identify TWO physical security vulnerabilities and explain the consequence of each.
Define tailgating and describe one control that specifically addresses it.
Explain the risk posed by the discarded drives and describe TWO acceptable methods of media sanitization.
Explain why an attacker with physical access to a device can often defeat its logical security controls.
Explain how environmental controls contribute to security, naming the element of the CIA triad they protect.
Explain how the principle of least privilege applies to physical access.