Security

A network administrator is deploying new high-density servers into a shared multi-tenant colocation facility. Facility personnel provide outer perimeter security and entry logging, but technicians from other companies frequently work in the same server room. To protect the company's hardware from unauthorized direct console access and physical tampering at the device level, which physical security control should the administrator implement?

A network security administrator is tasked with designing physical access controls for an enterprise server vault containing sensitive financial data. The audit requirements demand a solution that physically restricts access to one authenticated individual at a time using an interlocking dual-door entry system, while strictly preventing employees from scanning their access credential and immediately passing it back to an unauthenticated colleague to enter behind them. Which of the following physical security implementations best addresses all of these requirements?

A network administrator needs to enhance the physical security of a network closet. Specifically, the administrator must prevent unauthorized users from plugging unauthorized Ethernet cables into open wall jacks and prevent physical theft of sensitive magnetic backup tapes stored in the room. Which of the following physical security controls should be implemented to meet these two goals? (Select TWO.)

A cybersecurity technician is designing a physical security baseline for an enterprise datacenter facility and employee workstations. Match each physical security control to the specific threat or unauthorized physical security risk it is engineered to prevent.

A helpdesk technician receives a call from an individual claiming to be an executive support specialist who urgently needs a user's network password to resolve a critical server outage. Which type of social engineering attack is being attempted?

Match each enterprise physical security control to the specific threat vector or physical security risk it is designed to mitigate.

Match each physical security control to the specialized security risk or intrusion vector it is primarily designed to mitigate.

A facility manager notices that unauthorized visitors are entering a secure office building by closely following authorized employees through the main entrance door before it closes. Which physical security control should be implemented to specifically prevent this practice?

Match each social engineering threat type on the left to its correct characteristic description on the right.

An IT technician is setting up desktop workstations at a customer-facing service counter where staff members frequently leave their desks unattended to assist clients in the lobby. The facility manager requires a physical security control specifically designed to prevent unauthorized individuals from quickly stealing and carrying away the desktop hardware. Which of the following physical security controls should the technician implement?

A corporate security technician is upgrading physical security access controls for an enterprise data hall housing sensitive financial records. Recent internal audits identified that unauthorized personnel have repeatedly gained entry into the secure hallway by closely following authorized staff through open door swings (tailgating). The security team requires a solution that physically enforces single-person entry per valid credential scan without requiring continuous physical monitoring by security guards. Which of the following physical security controls best meets these requirements?

Match each physical security control to its primary protective function.

A technician reviews security camera footage after an unauthorized rogue device was found connected to a network switch inside a restricted server room. The footage reveals an unbadged visitor carrying a large box who closely followed an authorized administrator through a keycard-secured door before it latched closed. Which of the following social engineering threat types best describes this physical security breach?

An incident response technician has confiscated a powered mobile device suspected of containing unencrypted corporate data relevant to an ongoing investigation. To preserve forensic integrity, the technician must prevent the device from receiving remote signals—such as a remote wipe or locking command via cellular networks, Wi-Fi, or Bluetooth—while transporting it to the digital forensics laboratory. Which physical security control is most effective for this scenario?

A network security technician is hardening the physical security measures for a newly established satellite datacenter. The facility manager specifies two primary security goals: first, preventing unauthorized individuals from gaining entry by closely following authorized staff through outer access points, and second, ensuring that server hardware cannot be removed from equipment enclosures if room perimeter security is compromised. Which of the following physical security controls should the technician implement to meet these specific requirements? (Select TWO.)

A facilities security team is planning physical enhancements for an enterprise data center building located near a heavy traffic intersection. To prevent vehicles from ramming through the main building entrance or damaging structural perimeter walls, which of the following physical security controls should be installed?

A datacenter administrator is designing physical security controls for a ground-floor server room located immediately adjacent to a public parking lot. Compliance regulations mandate that the facility implement measures to prevent physical perimeter breaches caused by vehicle impacts, while also preventing unauthorized interception of high-frequency electromagnetic RF emissions originating from wireless testing hardware inside the facility. Which TWO of the following physical security controls should the administrator implement to satisfy these requirements? (Select TWO.)

An IT security team must update physical security controls at a satellite office based on a recent vulnerability audit. The report mandates deploying controls to specifically address two vulnerabilities: preventing the physical theft of unattended desktop computers located in open work areas, and physically blocking unauthorized media insertion into unused Ethernet and USB ports on network switches. Which of the following physical security controls should the IT team deploy to fulfill these requirements? (Select TWO.)

An executive assistant in the finance department receives an urgent email claiming to be from the company's Chief Executive Officer (CEO). The email states that the CEO is in an emergency board meeting and requires an immediate wire transfer to secure an acquisition, directing the assistant to enter corporate banking credentials into a provided link. A technician inspects the email header and notices the sender's domain uses a subtle typosquatting variation of the legitimate company domain. Which of the following social engineering threat types best describes this attack?

An executive assistant receives an urgent email appearing to come directly from the Chief Executive Officer (CEO) requesting an immediate transfer of funds to a new vendor. Simultaneously, a system administrator discovers that employee web traffic intended for the corporate banking portal is being secretly redirected to a fake login page through altered local host files. Which of the following threat types are demonstrated in this scenario? (Select TWO.)