Deck 16: Physical and Infrastructure Security

Question 1

Physical security must also prevent any type of physical access or
intrusion that can compromise logical security.

Answer 1

True

Question 2

High humidity does not pose a threat to electrical and electronic
equipment as long as the computer's temperature stays within the optimal range.

Answer 2

False

Question 3

The CHUID is a PIV card data object.

Answer 3

True

Question 4

To implement a physical security program an organization must
conduct a risk assessment to determine the amount of resources to devote to physical security and the allocation of those resources against the various threats.

Question 5

For information systems,the role of logical security is to protect the
physical assets that support the storage and processing of information.

Question 6

A person that becomes statically charged can damage electronic
equipment by an electric discharge.

Question 7

The direct flame is the only threat from fire.

Question 8

Low-intensity devices such as cellular telephones do not interfere with
electronic equipment.

Question 9

Physical security must prevent misuse of the physical infrastructure
that leads to the misuse or damage of the protected information.

Question 10

________ security protects computer-based data from software-based and communication-based threats.

A)Infrastructure
B)Premises
C)Physical
D)Logical

Question 11

________ includes data processing and storage equipment,transmission and networking facilities,and offline storage media.

A)Supporting facilities
B)Physical facilities
C)Information system hardware
D)Infrastructure facilities

Question 12

Unauthorized physical access can lead to other threats.

Question 13

If a computer's temperature gets too cold the system can undergo
thermal shock when it is turned on.

Question 14

Misuse of the physical infrastructure includes vandalism,theft of
equipment,theft by copying,theft of services,and unauthorized entry.

Question 15

Human-caused threats are less predictable than other types of physical
threats.

Question 16

________ security provides perimeter security,access control,smoke and fire detection,fire suppression,some environmental protection,and usually surveillance systems,alarms,and guards.

A)Premises
B)Infrastructure
C)Logical
D)Physical

Question 17

_______ facilities include electrical power,communication services,and environmental controls such as heat and humidity.

A)Supporting
B)Information
C)Physical
D)All of the above

Question 18

The optimal temperature for computer systems is between 10 and 32
degrees Fahrenheit.

Question 19

Relative humidity should be maintained between ________ to avoid the threats from both low and high humidity.

A)20% and 80%
B)40% and 60%
C)50% and 50%
D)30% and 70%

Question 20

Physical access control should address not just computers and other IS
equipment but also locations of wiring used to connect systems,equipment and distribution systems,telephone and communications lines,backup media,and documents.

Question 21

The security classification for a restricted area containing a security interest is _____.

A)controlled
B)exclusion
C)unrestricted
D)limited

Question 22

Eavesdropping and wiretapping fall into the ________ category.

A)theft
B)vandalism
C)misuse
D)unauthorized physical access

Question 23

The role of physical security is affected by the operating location of the information system,which can be characterized as ______ .

A)static
B)portable
C)mobile
D)all of the above

Question 24

_______ should be located on the floor of computer rooms as well as under raised floors,and should cut off power automatically in the event of a flood.

A)Smoke detectors
B)UPS
C)Water sensors
D)Equipment power off switches

Question 25

________ threats are specifically designed to overcome prevention measures and seek the most vulnerable point of attack.

A)Human-caused
B)Technical
C)EMI
D)Environmental

Question 26

_______ includes destruction of equipment and data.

A)Misuse
B)Vandalism
C)Theft
D)Unauthorized physical access

Question 27

Tornados,tropical cyclones,earthquakes,blizzards,lightning,and floods are all types of ________ disasters.

Question 28

_________ threats encompass conditions in the environment that can damage or interrupt the service of information systems and the data they contain.

Question 29

_________ security,also called infrastructure security,protects the information systems that contain data and the people who use,operate,and maintain the systems.

Question 30

Human-caused threats can be grouped into the following categories: unauthorized physical access,theft,_________ and misuse.

Question 31

Noise along a power supply line,motors,fans,heavy equipment,microwave relay antennas,and other computers are all sources of _________.

Question 32

Power utility problems can be grouped into three categories: undervoltage,overvoltage,and ________.

Question 33

A restricted area within close proximity of a security interest has a classification of ______.

A)exclusion
B)controlled
C)limited
D)unrestricted

Question 34

Physical security threats are organized into three categories: environmental threats,human-caused threats,and _________ threats.

Question 35

_______ threats encompass threats related to electrical power and electromagnetic emission.

Question 36

A prevalent concern that is often overlooked is ________.

A)overvoltage
B)undervoltage
C)dust
D)noise

Question 37

The ______ is an optional key that may be present on any PIV card,does not require PIN entry,and whose purpose is to authenticate the card and therefore its possessor.

A)VIS
B)BIO
C)CHUID
D)CAK

Question 38

________ physical threats are more difficult to deal with than environmental and technical threats.

Question 39

An _______ condition occurs when the IS equipment receives less voltage than is required for normal operation.

Question 40

An area of a facility that has no security interest is classified as _________.

A)unrestricted
B)controlled
C)limited
D)exclusion

Question 41

______ authentication is implemented by using a fingerprint or iris data object sent from the PIV card to the PACS.

Question 42

To deal with the threat of smoke,the responsible manager should install _______ in every room that contains computer equipment as well as under raised floors and over suspended ceilings.

Question 43

The most essential element of recovery from physical security breaches is ____.

Question 44

A(n)________ is a battery backup unit that can maintain power to processors,monitors,and other equipment and can also function as a surge protector,power noise filter,and an automatic shutdown device.

Question 45

The _______ authentication has an attendant supervise the use of the PIV card and the submission of the PIN and the sample biometric by the cardholder.