Soru

Zorluk: Çok zorPhysical Security Controls and Environmental Measures

A network security engineer is performing a physical security audit of a high-density transaction processing facility. The audit reveals three distinct vulnerabilities: confidential packet data is leaking via unintended electromagnetic emissions from server chassis, unauthorized employees are frequently tailgating through access doors during shift changes, and intruders could potentially bypass door access controls by crawling through the hollow space above the suspended drop ceiling. Which of the following combinations of physical security measures directly mitigates all three identified vulnerabilities?

  1. Erecting slab-to-slab barrier walls extending from the true floor to the structural ceiling, deploying an anti-tailgating man-trap with interlocking doors, and housing sensitive server clusters within a Faraday enclosure.Cevap
  2. B
    Installing clean-agent gaseous fire suppression systems, deploying motion-detecting CCTV cameras, and configuring anti-passback rules on the electronic badge reader system.
  3. C
    Deploying biometric authentication readers at main entrances, grounding all server racks with ESD grounding straps, and installing locks on plenum air handling units.
  4. D
    Installing environmental monitoring sensors for humidity control, configuring 802.1X port authentication on access switches, and setting up tamper-evident cable conduits.

Cevap

Erecting slab-to-slab barrier walls extending from the true floor to the structural ceiling, deploying an anti-tailgating man-trap with interlocking doors, and housing sensitive server clusters within a Faraday enclosure.
The solution prescribing slab-to-slab walls, an anti-tailgating man-trap, and a Faraday enclosure directly mitigates all three security vulnerabilities. Slab-to-slab walls extend past suspended drop ceilings up to the solid structural deck, preventing intruders from climbing over locked access doors. A man-trap uses interlocking doors to physically enforce one-person entry, eliminating tailgating during high-traffic shift changes. A Faraday enclosure blocks electromagnetic emissions from radiating outside the server room, neutralizing eavesdropping risks.

Adım Adım Çözüm

1
Analyze Vulnerability 1 (Electromagnetic Data Leakage)
Identified the need for electromagnetic shielding (Faraday enclosure or TEMPEST shielding) to block unintended RF emissions from active computing hardware.
Unshielded high-speed data buses and network hardware radiate electromagnetic signals that can be captured externally by specialized eavesdropping gear.
2
Analyze Vulnerability 2 (Tailgating during shift changes)
Identified the requirement for a man-trap (security vestibule) equipped with presence sensors and interlocking doors.
Standard single-door access points allow unauthorized individuals to follow authorized personnel during a door unlock cycle, whereas man-traps physically restrict access to one validated person at a time.
3
Analyze Vulnerability 3 (Drop-ceiling interstitial intrusion)
Identified the need for slab-to-slab physical partition walls extending from the structural subfloor to the upper concrete ceiling slab.
Suspended drop ceilings leave open plenum space above interior walls, allowing intruders to climb over locked doors unless true structural barrier walls are installed.
4
Synthesize Physical Safeguards
Selected the combination featuring slab-to-slab walls, anti-tailgating man-traps, and Faraday enclosures.
This specific combination provides target-specific physical and environmental countermeasures for all three audited vulnerabilities.

Anahtar Kavram

Physical Access Controls, Perimeter Security Barriers, and RF/EM Shielding
Tahmini Süre:2m 0s
Bu soruyu puanla