Week 11 (Security in the Physical Domain)

Question 1

What does the Physical Security Domain Address?

Answer 1

The threats, vulnerabilities, and countermeasures that can be utilized to physically protect an enterprise’s resources and sensitive information.

Question 2

What do the Resources of an Enterprise include?

Answer 2

People, the facility in which they work, and the data, equipment, support systems, media, and supplies they utilise.

Question 3

What does Physical Security describe?

Answer 3

Measures that are designed to deny access to unauthorised personnel (including attackers) from physically accessing a building, facility, resources, or stored information; and guidance on how to design structures to resist potentially hostile acts.

Question 4

What is the Security Controls Framework? (AAA)

Answer 4

AAA stands for Authentication, Authorisation and Accounting.
Authentication - create access lists and identification mechanisms to allow approved persons through barriers.
Authorisation - Create barriers around a resource so that access can be controlled through defined entry and exit points.
Accounting - Keep record of when entry/exit points are used and detect security breaches.

Question 5

What does IPDRR stand for?

Answer 5

Identify, Protect, Detect, Respond, Recover

Question 6

What are the