Physical Access Controls

Question 1

Define “external labels”.

Answer 1

A tag placed on data storage media (floppy disks, magnetic tape, CDs, etc.) designed to prevent inadvertent use of the wrong file.

Question 2

What purpose does setting file attributes serve?

Answer 2

This logically restricts the ability of the user to read, write, update, and/or delete records in a file.

Question 3

Define “internal labels” (header and trailer labels).

Answer 3

Descriptive information stored at the beginning and end of a file that identifies the file, the number of records in the file, and provides data enabling detection of processing errors.

Question 4

Define “social engineering”.

Answer 4

A set of techniques used by attackers to fool employees into giving them access to information resources.

Question 5

Describe a good location site for a computer operations facility.

Answer 5

Climate controlled including air-conditioned; away from risk of natural disasters (fire, flood, humidity), away from windows. Not on a top floor or basement.

Question 6

What considerations should be given by an organization regarding fire-suppression systems?

Answer 6

Such systems are required in IT operations. Need to be appropriate for electrical fires (not halon). Should be periodically inspected.

Question 7

What purpose do file protection rings or locks serve?

Answer 7

Physically prevent the media from being overwritten.

Question 8

Describe four electrical system risks.

Answer 8

1. Failure (outage)
2. Reduced voltage (brownout)
3. Sags, spikes, and surges
4. Electromagnetic interference (EMI)