220-1202 Physical Security Controls Practice Test 2 — 15 Questions

Question 1

During a routine security audit, you find that an employee has taped their door lock open to avoid using their badge every time they leave for a break. What is the most immediate security concern with this practice?

Accepted Answer

Unauthorized persons can enter without credentials. Propping a door open bypasses access control systems, allowing unauthorized individuals to enter without credentials. This is a common physical security violation that undermines the entire access control mechanism.

Answer

The employee might lose their badge

Answer

It violates company badge policy

Answer

The door lock may break from being forced open

Question 2

A technician is tasked with securing a shared office printer that stores sensitive documents on its hard drive. The printer is in an open area. Which physical security measure should be prioritized to protect the data on the printer?

Accepted Answer

Place the printer in a locked room. Printers with hard drives can retain copies of printed documents. Physically securing the printer in a locked room or cabinet prevents unauthorized persons from removing the drive or accessing the device directly.

Answer

Enable secure print release with a PIN

Answer

Encrypt the printer's hard drive

Answer

Use a cable lock on the printer

Question 3

A technician is deploying laptops for a sales team that works remotely from coffee shops and client sites. The laptops contain sensitive customer data. Which physical security control is most practical for these mobile devices?

Accepted Answer

Attach a cable lock to the laptop. For mobile devices, a Kensington lock (cable lock) is a standard, lightweight physical security measure that can be used in various locations to tether the laptop to a fixed object, deterring opportunistic theft.

Answer

Install a laptop tracking software

Answer

Use a biometric fingerprint reader on the laptop

Answer

Require a smart card for login

Question 4

A technician is configuring a new server room and needs to ensure that only authorized personnel can physically access it. The company wants a solution that does not require replacement of keys or cards if one is lost. Which access control method best meets this requirement?

Accepted Answer

Implement a biometric fingerprint reader. Biometric systems use unique physical traits (fingerprint, retina) that cannot be lost or easily duplicated. This eliminates the need to reissue credentials if a card or key is lost, though biometrics have their own management challenges.

Answer

Use a combination lock

Answer

Install a smart card system

Answer

Use a keypad with a PIN code

Question 5

A company is moving to a new office and wants to secure its server room against both unauthorized entry and environmental hazards. Which combination of physical controls should be implemented?

Accepted Answer

An electronic badge reader and a temperature sensor. Physical security for server rooms should include access control (e.g., electronic lock) and environmental monitoring (e.g., temperature/humidity sensors) to protect equipment. This addresses both security and operational continuity.

Answer

A key lock and a fire extinguisher

Answer

A biometric scanner and a security camera

Answer

A combination lock and a humidity monitor

Question 6

An organization experiences a data breach when an attacker physically removes hard drives from a decommissioned server that was placed in a storage area without being properly sanitized. What physical security control should have been implemented?

Accepted Answer

Use a degausser to erase the hard drives before disposal.. Proper disposal procedures, such as degaussing or physical destruction, ensure that data on decommissioned drives cannot be recovered. This scenario tests understanding of the full lifecycle of physical media security.

Answer

Install a surveillance camera in the storage area.

Answer

Require a smart card to access the storage area.

Answer

Apply tamper-evident seals to the server chassis.

Question 7

A small business wants to secure its network switch located in a shared office area. The switch has no built-in lock. Which combination of physical controls provides the best protection against unauthorized tampering?

Accepted Answer

Place the switch in a lockable cabinet and enable MAC address filtering.. A lockable cabinet prevents physical access to the switch, and port security prevents unauthorized devices from connecting to the network. This question tests layered physical and logical security for network infrastructure.

Answer

Use a cable lock to secure the switch to the desk.

Answer

Install a privacy filter on the switch's LED display.

Answer

Apply tamper-evident tape over the switch's vents.

Question 8

A company is deploying new laptops to remote workers. They need to ensure that if a laptop is stolen, the data on it cannot be accessed. Which two physical security controls should be configured before shipment?

Accepted Answer

Full-disk encryption and a BIOS/UEFI password.. Full-disk encryption protects data at rest, and a BIOS/UEFI password prevents unauthorized booting or tampering with boot settings. This question tests the combination of controls needed for remote device security.

Answer

Cable lock and privacy filter.

Answer

Smart card reader and biometric scanner.

Answer

Asset tracking tag and a Kensington lock slot.

Question 9

A user complains that their computer is running slowly and they see a USB drive they don't recognize plugged into the front port. What is the first step a technician should take to address this potential security issue?

Accepted Answer

Ask the user to unplug the USB drive immediately.. Immediately removing an unknown USB device is crucial to prevent potential malware infections or data theft. This scenario tests incident response procedures for physical media threats.

Answer

Run a full antivirus scan on the computer.

Answer

Check the USB drive's contents to see what it contains.

Answer

Disable the USB ports in the BIOS.

Question 10

During a routine security walkthrough, you notice that an employee has propped open a secured door to the server room with a doorstop to allow easy access for a cleaning crew. What is the most immediate action you should take?

Accepted Answer

Remove the doorstop and close the door.. Propping open a secured door bypasses all physical access controls, creating an immediate security risk. The first step is to close the door to restore security, then address the policy violation.

Answer

Document the incident and report it to the security manager.

Answer

Reprimand the employee who propped the door.

Answer

Install a door alarm that sounds if the door is open too long.

Question 11

A helpdesk technician receives a call from an employee who says their smart card stopped working for building access. The employee is in a hurry and asks the technician to remotely disable the card and issue a temporary PIN for the day. What should the technician do first?

Accepted Answer

Ask the employee to visit the security office in person with a photo ID.. Verifying the caller's identity before making any access changes is a critical security practice to prevent social engineering attacks. This scenario tests the balance between customer service and security protocol.

Answer

Disable the smart card and provide a temporary PIN as requested.

Answer

Reset the smart card remotely and test it with a badge reader.

Answer

Send a temporary PIN via email to the employee's company address.

Question 12

A retail store wants to protect its point-of-sale (POS) terminals from unauthorized physical access during off-hours. The terminals are in an open area with no lockable cabinets. Which control should be prioritized?

Accepted Answer

Use tamper-evident seals on the terminal casings.. Tamper-evident seals provide a visible indicator if a device has been opened, deterring unauthorized physical access to internal components. This question tests understanding of physical security for unattended devices.

Answer

Install a privacy screen on each POS terminal.

Answer

Require a smart card to power on the terminal.

Answer

Enable a screensaver with a password.

Question 13

During a security audit, you discover that a supply closet containing spare hard drives has a door that can be opened with a standard paperclip. What is the most appropriate recommendation to address this vulnerability?

Accepted Answer

Upgrade the lock to a tamper-resistant electronic lock.. A privacy filter prevents shoulder surfing by limiting the viewing angle of a monitor, protecting sensitive data from being seen by unauthorized individuals. This scenario tests knowledge of visual data protection controls.

Answer

Replace the door with a solid-core door and install a deadbolt.

Answer

Install a privacy filter on the closet door window.

Answer

Place a sign on the door warning of security cameras.

Question 14

A user reports that their laptop was stolen from their desk overnight. The security team reviews badge logs and finds no after-hours access to the floor. What physical security control should be implemented to prevent this from recurring?

Accepted Answer

Use a cable lock to secure the laptop to the desk.. Cable locks are simple, effective physical security controls that deter theft by anchoring portable devices to a fixed object. This scenario tests the understanding of basic physical security measures for endpoint devices.

Answer

Install a biometric fingerprint reader on the laptop.

Answer

Require a smart card to log in to the laptop.

Answer

Enable full-disk encryption on the laptop.

Question 15

A company wants to secure its server room door so that only authorized personnel can enter. They need a system that can be quickly revoked if an employee leaves and that logs entry attempts. Which physical security control best meets these requirements?

Accepted Answer

An electronic key card system.. Electronic key card systems provide both access control and audit trails, making them ideal for environments where access needs to be centrally managed and logged. This question tests the ability to match a security requirement to the appropriate control.

Answer

A combination lock with a shared code.

Answer

A biometric fingerprint scanner.

Answer

A physical key and lock system.