Chapter 3.9

Question 1

physical controls

Answer 1

Physical security controls can be touched. Both the alarm and door locks are physically touchable security controls. The alarm is in place to alert the facility in the event of a breach. The door locks ensure no one leaves the area.

Question 2

Administrative controls

Answer 2

Administrative controls are company policy and procedures that guide employee actions. Weekly vulnerability assessments are an example of an administrative control.

Question 3

Control diversity

Answer 3

Control diversity includes the use of multiple control types such as administrative, technical and physical, working together to create a layered security practice.

Question 4

Technical controls

Answer 4

Technical controls are safeguards implemented by the system through the use of hardware, software and firmware. Firewalls, intrusion detection systems and intrusion prevention systems are considered technical controls.

Question 5

hot and cold aisles

Answer 5

Hot and cold aisles are arranged with all the hardware expelling heat toward one aisle where the exhaust vents are placed. The other side of the aisle is designated for cool air. Avoiding the mixture of warm and cold air helps to improve the efficiency of the entire operation and reduce costs.

Question 6

HVAC

Answer 6

Heating Ventilation and Air Conditioning (HVAC) can also enhance the availability of systems in a data center. HVAC is a costly option and will not work alone to cool the data center.

Question 7

fire suppression system

Answer 7

A fire suppression system monitors a protected area for fire activity and provides the means to extinguish a fire upon alert.

Question 8

airgap

Answer 8

An airgap provides complete physical isolation from other systems. There is no connection of any type. Secure networks, or those that house sensitive information, are typically separated from unsecure networks via airgap.