Exam 16: Physical and Infrastructure Security

________ security provides perimeter security,access control,smoke and fire detection,fire suppression,some environmental protection,and usually surveillance systems,alarms,and guards.

_______ includes destruction of equipment and data.

To implement a physical security program an organization must conduct a risk assessment to determine the amount of resources to devote to physical security and the allocation of those resources against the various threats.

Physical security must also prevent any type of physical access or intrusion that can compromise logical security.

Physical security threats are organized into three categories: environmental threats,human-caused threats,and _________ threats.

An area of a facility that has no security interest is classified as _________.

Tornados,tropical cyclones,earthquakes,blizzards,lightning,and floods are all types of ________ disasters.

An _______ condition occurs when the IS equipment receives less voltage than is required for normal operation.

The optimal temperature for computer systems is between 10 and 32 degrees Fahrenheit.

A prevalent concern that is often overlooked is ________.

_________ security,also called infrastructure security,protects the information systems that contain data and the people who use,operate,and maintain the systems.

A restricted area within close proximity of a security interest has a classification of ______.

Physical access control should address not just computers and other IS equipment but also locations of wiring used to connect systems,equipment and distribution systems,telephone and communications lines,backup media,and documents.

The ______ is an optional key that may be present on any PIV card,does not require PIN entry,and whose purpose is to authenticate the card and therefore its possessor.

_______ should be located on the floor of computer rooms as well as under raised floors,and should cut off power automatically in the event of a flood.

The _______ authentication has an attendant supervise the use of the PIV card and the submission of the PIN and the sample biometric by the cardholder.

_______ facilities include electrical power,communication services,and environmental controls such as heat and humidity.

Power utility problems can be grouped into three categories: undervoltage,overvoltage,and ________.

The CHUID is a PIV card data object.

Human-caused threats are less predictable than other types of physical threats.