MOD 7 - Physical Security Flashcards

1
Q

What does physical security protect against?

A

Physical threats

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are examples of physical threats?

A

Fire/Smoke
Water
Earth Movement (Earthquakes, landslides, volcanoes)
Storms
Explosion/Destruction

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is secure facility plan?

A

Outlines the security needs of your organization and emphasizes methods and mechanisms to employ to provide security.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

How is secure facility plan developed?

A

Through critical path analysis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is critical path analysis?

A

provides complete picture of the interdependencies (links) and interactions necessary to sustain an organization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is technology convergence?

A

the tendency for technology, utilities, solutions and systems to evolve and merge over time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What should security staffs assist with in secure facility plan?

A

site and facility design

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is secure facility plan based on?

A

A layered defense model

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What should you pay attention to when it comes to site selection?

A

Does it meet the needs of an organization?
Are security requirements a top priority?
Location and Construction materials
Low crime area
Proximity to other buildings
Environmental threats
Visibility
Natural Disasters
Facility Design

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is industrial camouflage?

A

An attempt to mask or hide actual function, purpose or operations of a facility by providing a facade.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is Crime Prevention Through Environmental Design (CPTED)?

A

When you structure the physical environment and surroundings to influence individual decisions that potential offenders make before committing any criminal acts.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is Natural access control?

A

Subtle guidance of those entering and leaving a building through placement of entranceways or lights

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is Natural survelliance?

A

Making criminals feel uneasy through the increasing of opportunities for them to be observed

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is Natural territorial reinforcement?

A

An attempt to make the area feel like an inclusive caring community.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the three types of site and facility security controls?

A

Administrative physical security controls
Technical physical security controls
Physical controls for physical security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is Administrative Physical security control?

A

Awareness training, site management, personnel controls, emergency response and procedures

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is technical physical security control?

A

CCTV , access controls, intrusion detection, alarms, air conditioning (HVAC) power supplies..

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is Physical security control

A

Door locks, fencing, lightning, dogs, guards, construction materials

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What are the functional order of control?

A

Deterrence [stop before it happens]
Denial
Detection
Delay
Determine
Decide

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is the difference between non-mission critical and mission critical?

A

Non-mission critical is if an organization can go without the equipment for more than 48 hours any thing less than that is mission critical.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is MTTF?

A

Mean Time to Failure
Expected functional lifetime to perform a repair on a device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is MTTR?

A

Mean Time To Repair
Average length of time to perform a repair on a device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is MTBF?

A

Mean Time Between Failures
Average time between the first and any other failure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

TRUE OR FALSE
MTTF AND MBTF values are the same/fairly similar

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What is a cable plant?

A

A collection of interconnected cables and intermediary devices that establish a physical network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What is Entrance Facility?

A

the entrance point to the building where the cable from the provider connects the internal cable plant

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Equipment room

A

main wiring closet for the building

28
Q

Backbone Distribution System

A

Provides wired connections between the equipment rooms and the telecommunications rooms, including cross-floor connections.

29
Q

Wiring closet

A

serves connection needs of a floor or a section of a large building by providing space for networking equipment and cabling systems.

30
Q

Horizontal Distribution System

A

provides connection between the telecommunication room and work areas

31
Q

Protected Cable distribution or protective distribution systems

A

means by which cables are protected from unauthorized access or harm

32
Q

TRUE OR FALSE?
Server rooms, data centers, communications rooms, wiring closets, server vaults, and IT closets are enclosed, restricted, and protected rooms where your mission-critical servers and network devices are housed

A

True

33
Q

What should you keep in mind when designing a server room?

A

Halotron/PyroGen or other halon-substitute oxygen-displacement fire detection and extinguishing systems
Low temperatures
Little or no lighting
Equipment stacked with little room to maneuver

34
Q

TRUE OR FALSE

Server rooms are not located at core of building and away from gas/water/sewer lines; not ground or top floor or basement

A

False

35
Q

TRUE OR FALSE

Server rooms should have 1 hour minimum fire rating walls

A

True

36
Q

Data Center

A

Could be an external location separate from a server room used to house the bulk of backend computer servers, data storage equipment and network management equipment

37
Q

What are the data center controls?

A

smart/dumb cards, proximity readers, biometrics, intrusion detection systems (IDS), and a design based around defense in depth

38
Q

Smartcards

A

Badges, identification cards, or security IDs are forms of physical identification and/or electronic access control devices.

39
Q

What are weaknesses of smartcards?

A

physical attacks, logical attacks, Trojan horse attacks, or social-engineering attacks

40
Q

Proximity Devices

A

Used to to control physical access, they can be passive device, field powered device or a transponder

41
Q

Intrusion Detection Systems

A

Systems – automated or manual - designed to detect an attempted intrusion, breach, or attack; use of an unauthorized entry/point; or occurrence of some specific event at an unauthorized or abnormal time.

42
Q

What are some physical IDS?

A

security guards, automated access controls, and motion detectors as well as other specialty monitoring techniques.

43
Q

Heartbeat Sensor

A

mechanism by which the communication pathway is either constantly or periodically checked with a test signal. If communication fails, alarm automatically triggers.

44
Q

Motion Detectors

A

Device that senses movement or sound in a specific area

45
Q

What are the different types of motion detectors?

A

Infrared (PIR – passive infrared) or heat-based looks for meaningful changes in heat levels
Wave pattern – monitors for significant changes in the reflected pattern
Capacitance – senses changes in electrical or magnetic field surrounding a monitored object
Photoelectric – senses changes in visible light levels for area
Passive audio – listens for abnormal sounds

46
Q

Intrusion Alarms

A

An alarm is a separate mechanism that triggers a deterrent, a repellent, and/or a notification.

47
Q

What are the different types of intrusion alarms?

A

Deterrent Alarm – shut/lock doors; make further intrusion or attack more difficult
Repellant Alarm – audio sound, bell, light; discourage intruders/force off property
Notification Alarm – silent but record incident data; bring authorized personnel to location
Local Alarm System – broadcast audible alarm (up to 120 decibles/400 ft away; protected from tampering; security team positioned nearby
Central Station System – silent alarm/offsite agents
Auxiliary Station – can be added to centralized or local; when breached emergency services notified

48
Q

What must be in place to monitor access abuse?

A

A security guard

49
Q

What are the different types of access abuse?

A

Masquerading – using someone else’s security ID to gain entry into a facility
Piggybacking – (tailgating) following someone through a secured gate or doorway without being identified or authorized personally

50
Q

How can we prevent access abuse?

A

Creating audit trails and access logs to figure out anomalies
Monitor entry/exit points with security cameras

51
Q

Media storage facilities

A

Designed to securely store blank media, reusable media, and installation media

52
Q

What is a utitilities and HVAC considerations?

A

Equipment damage from power fluctuations can be a common occurrence

53
Q

UPS (Uninterruptable Power Supply)

A

a type of self-charging battery that can be used to supply consistent clean power to sensitive equipment

54
Q

TRUE OR FALSE

A backup battery or a fail over battery is a form of UPS

A

False

55
Q

POWER RELATED TERMS
browse through

A

Fault – momentary loss of power
Blackout – complete loss of power
Sag – momentary low voltage
Brownout – Prolonged low voltage
Spike – momentary high voltage
Surge – prolonged high voltage
Inrush – initial surge of power usually associated with connecting to a power source, whether primary or alternate/secondary
Noise – steady interfering power disturbance or fluctuation
Transient – short duration of line noise disturbance
Clean – nonfluctuating pure power
Ground – Wire in an electrical circuit that is grounded

56
Q

Noise

A

Noise generated by electric current can affect any means of data transmission that relies on electromagnetic transport mechanisms, such as telephone, cellular, television, audio, radio, and network mechanisms.

57
Q

What are the two types of EMI?

A

Common Mode – generated by a difference in power between the hot and ground wires of a power source or operating electrical equipment
Traverse Mode – generated by a difference in power between the hot and neutral wires of a power source or operating electrical equipment

58
Q

RFI

A

Radio-frequency interference – another source of noise and interference that can affect many of the same systems as EMI – RFI generating appliances – fluorescent lights, electrical cables, electric space heaters, computers, elevators, motors, and electric magnet

59
Q

TRUE OR FALSE

Rooms intended to house computers should be kept between 60 and 75 degrees Fahrenheit

A

True

60
Q

TRUE OR FALSE

Humidity should be maintained between 40 and 60 percent

A

True

61
Q
A
62
Q
A
63
Q
A
64
Q
A
65
Q
A