Physical Flashcards
Fences
Fences-
3-4’= deter;
5-7’ prevent;
8’ with 3 strands of outward slanting barbed wire for critical areas
Gates
Gates- Class I (residential); Class II (commercial); Class III (industrial/limited); Class IV (restricted/airport/prison)
Bollards
Bollards- strong post for stopping cars
Lights
Lights-
o Fresnel- directional; originally used in lighthouses
o Lumen- amount of light one candle creates
o Footcandle- one lumen per square foot
o Lux- one lumen per square meter
CCTV
CCTV (closed circuit TV)- detective
o Tube Cameras (aka CRT cameras)- not to be confused with CRT displays
o CCD (charged-couple device)- modern, digital, mechanical irises
o Depth of field- the area that is in focus
o Field of view- the entire area viewed by the camera
o More light allows larger depth of field because smaller aperture places more image in focus
o VHS backs up tube cameras
o DVR or NVR (Network Video Recorder) backs up CCD
Key Bitting code
Bitting code- represents the depth of cut; 0 (shallow) – 9 (deep)
Pin tumbler lock
Pin tumbler lock- correct key makes driver pins and key pins align
Warded locks
Ward/Warded locks- must turn a key through channels
Skeleton key
Skeleton key- opens a variety of warded locks
Deadbolt
Deadbolt- rigid bolt
Lock bumping
Lock bumping- uses shaved down key inserted into keyhole, bumps key to make pins jumps while quickly turning the key
Master key
Master key- opens all locks in a security zone
Core key
Core key- removes interchangeable core locks
Combination locks
Combination locks- limited accountability for shared combos; button/keypad locks are vulnerable due to wear showing combo
Smart cards
Smart cards (aka ICC- integrated Circuit Card) o Contact cards must be inserted into a reader o Contactless cards are read wirelessly (RFID- radio freq ID) o Many international credit cards are smart cards
Magnetic Stripe cards
Magnetic Stripe cards (aka swipe cards)
o Passive, contain information on magnetic strip
o Many credit cards in the US are magnetic
Mantrap
Mantrap- physical control with 2 doors unlocked in sequence
Tailgating
Tailgating (aka piggybacking)- unauthorized person follows an authorized; combine social engineering (carrying boxes)
Turnstile
Turnstile- prevents tailgating; must be designed for safe egress
Motion detector & perimeter alarms
Motion detector & perimeter alarms
o Ultrasonic and microwave work like Doppler radar; active sensor
o Photoelectric sends a beam of light across a monitored space to a photoelectric sensor; alerts when beam is broken; active sensor
o PIR (passive infrared sensor)- detects infrared energy created by body heat
o Magnetic door/window alarms- matched sensor; e current flows when closed
Doors and windows
Doors and windows
o Egress must be unimpeded
o Glass alternative- plexiglass (acrylic) and polycarbonate (eg Lexan)
Fail secure
Fail secure: Fails locked. No evacuation. Only in facilities where value of what is being protected exceeds human life. On the CISSP exam never choose fail secure . Fail soft/safe is the best choice
Fail Soft
Fail Soft: Opens outward, but door is locked to bar return
Fail Safe
Fail Safe: Door fails open (easiest to evacuate)
Walls, floors, ceilings
Walls, floors, ceilings
o Walls should go floor to ceiling (slab to slab) to prevent entry via floor or ceiling
o Walls should be strong (not sheetrock) with appropriate fire rating (not less than 1 hour)
Guards
Guards
o Professional guards have training
o Pseudogaurd (mall cops) have no formal training
o Guard orders should be complete & clear; aware of security risks
CPTED
CPTED (Crime Prevention Through Environmental Design)- Provides instruction on direction of the use of: o Organizational (People) o Mechanical (Technology, hardware) o Natural Design (landscaping, natural environment)
4Ds
4Ds-
o Deter- Fencing, lighting, security guards, guard dogs, signs, etc
o Delay- increase the time and effort needed to commit the crime
o Detect- e.g. cause the person to make more noise
o Deny- remove the rewards received from a crime opportunity
Site Selection issues
Site Selection issues
o Greenfield is undeveloped lot of land
o Topography- physical shape of land; use it to steer ingress and egress
o Utility reliability- UPS (uninterruptible power supply) provides short term protection
o Local crime rates
Site design issues
Site design issues
o Telecom demarcation; shared demarc
o Site marking- data centers usually not marked externally
o Shared tenancy pose security issues; wireless security
o Optimally, a data center would be on floor 2 or 3 (middle floors) to avoid floods, traffic, fire
electrical faults
electrical faults o blackout- prolonged loss of power o brownout- prolonged low voltage o fault- short loss of power o surge- prolonged high voltage o spike- short high voltage o sag- short low voltage
surge protector
surge protector- protect from surges; shorts the power down to acceptable level
UPS
UPS (uninterruptible power supply)- temp backup; also refine/protect against e faults; use batteries or fuel cells; used as bridge to generator power
Generator
Generator- used for longer periods than UPS
EMI
Electromagnetic interference (EMI)- crosstalk caused by magnetism from cables run too close; impacts integrity and confidentiality; fiber optic is not susceptible to EMI
HVAC
HVAC (Heating Ventilation & AC)- closed loop (recirculating air) to reduce airborn contaminants
Positive pressure
Positive pressure & drainage- air and water should be expelled from building so water/air drains away from building
Heat & humidity
Heat & humidity- 68-77 F; 40-55% humidity
Static
Static- caused by low humidity; improper grounding
Corrosion
Corrosion- caused by high humidity & condensation
Airborne contaminants
Airborne contaminants- cause overheating, static buildup, corrosion; mitigated by positive pressure
Smoke detector
Smoke detector- ionization (radioactive source creates small e charge) or photoelectric (LED & photosensor that generates a small charge when receiving the light)
Flame detector
Flame detector- detect infrared or ultraviolet light; requires line of sight
Class A Extinguisher
Class A Extinguisher- common combustible (wood, paper); extinguished using water or soda acid
Class B Extinguisher
Class B Extinguisher - burning alchohol, oil, petroleum products; extinguished with gas (CO2, Halon/substitute) or soda acid
Class C Extinguisher
Class C Extinguisher - electrical; extinguished with non-conductive agent (CO2, Halon/substitute)
Class C Extinguisher (Europe)
Class C Extinguisher (Europe)- flammable gases; extinguished with gas (CO2, Halon/substitute) or soda acid
Class E Extinguisher (Europe)
Class E Extinguisher (Europe)- electrical; extinguished with non-conductive agent (CO2, Halon/substitute)
Class D Extinguisher
Class D Extinguisher - burning metals; extinguished with dry powder
Class K Extinguisher
Class K Extinguisher - kitchen fire with oil or grease; wet chemicals
Fire Suppression agents
Fire Suppression agents- reduce temp; reduce Oxygen; reduce fuel supply; interfere w/ chemical reaction
Water
Water- lowers temp below ignition or kindling point
Soda acid
Soda acid- (old giant brass pressurized extinguisher)- lower temp and reduces oxygen
Dry powder
Dry powder- eg sodium chloride; lowering temp and reduce oxygen
Wet chemical
Wet chemical- eg potassium acetate & water; lowers tempature
CO2
CO2- removes oxygen; risk of suffocating personnel; All gas systems (CO2, Halon)- should use a countdown sys to get people out
Halon
Halon- ozone depleting; chemical reaction that consumes energy and lowers temp
o 1989 Montreal Accord banned halon by 1994;
o Halon substitutes- Argon, FE-13, FM-200, Inergen
Wet pipe sprinkler systems
Wet pipe- water up to sprinkler head; glass bulb breaks/melts at temp
Dry pipe sprinkler systems
Dry pipe- pipes filled with compressed air; used where water may freeze
Deluge sprinkler systems
Deluge- water is held back by deluge valve opened when fire alarm is triggered, not good for data centers
Preaction sprinkler systems
Preaction- combination of wet, dry, deluge; require 2 triggers to release water; used in areas (data centers and museums) where discharge would be expensive
PASS
Portable fire extinguisher
PASS- Pull the pin, Aim low, Squeeze the handle, Sweep the fire