reflection 4

tamerrabee3

sy0-601-21v1.0.pptx

Home >Computer Science homework help >reflection 4

Explaining Physical Security

Lesson 21

Explain the Importance of Physical Site Security Controls

Topic 21A

1.2 Given a scenario, analyze potential indicators to determine the type of attack

2.7 Explain the importance of physical security controls

Syllabus Objectives Covered

Physical Security Controls

Authentication

Create access lists and identification mechanisms to allow approved persons through barriers

Authorization

Create barriers around a resource so that access can be controlled through defined entry and exit points

Accounting

Keep a record of when entry/exit points are used and detect security breaches

Site layout

Zone-based design to accommodate traffic flows and surveillance

Signage

Industrial camouflage

Barricades and entry/exit points

Bollards

Fencing

Lighting

Make staff feel secure

Assist surveillance

Site Layout, Fencing, and Lighting

Gateways and Locks

Lock types

Physical (conventional/deadbolt)

Electronic

Cipher/combination

Magnetic swipe card

Smart card/proximity reader

Biometric

Access control vestibules/mantraps and turnstiles

Cable locks

Images from user macrovector © 123RF.com.

Smart card attacks

Cloning

Skimming

Card types and vulnerability level

Malicious USB/juice-jacking

USB data blocker

Physical Attacks Against Smart Cards and USB

Alarm and Sensor Systems

Circuit

Open or closed

Detect intrusion through a barrier

Motion detection

Radar or infrared

Detect intrusion in a space

Noise detection

Proximity readers

Duress

Fixed or mobile

Security Guards and Cameras

Security guards

Police entry points

Operate surveillance mechanisms

Respond to alarms

Remote surveillance and monitoring

Video/CCTV

Motion recognition

Object detection

Robot sentries

Drones/UAV

Image by Dario Lo Presti © 123RF.com.

Reception Personnel and ID Badges

Challenge policy

Reception personnel and visitor logs

Sign-in/sign-out

Visitor information

Two-person integrity/control

ID badges

Physical Site Security Controls

Review Activity

Explain the Importance of Physical Host Security Controls

Topic 21B

2.7 Explain the importance of physical security controls

4.1 Given a scenario, use the appropriate tool to assess organizational security (Data sanitization only)

Syllabus Objectives Covered

Secure Areas

Server rooms and data centers

Lockable cabinets

Colocation cages

Air gaps and demilitarized zones

Safes

Vaults

Image © 123RF.com.

Image © Chris Dag and shared with CC BY 2.0 flickr.com/photos/chrisdag/865711871.

Image © 123RF.com.

Protected Distribution and Faraday Cages

Protected cable distribution/protected distribution system (PDS)

Prevent eavesdropping

Prevent/delay cable cutting DoS

Faraday cage

Transient Electromagnetic Pulse Emanation Standard (TEMPEST)

Heating, Ventilation, Air Conditioning

Cooling/warming, humidity, dust control

Optimum temperature and humidity levels

Moisture detection sensors

Temperature detection sensors

HVAC sizing

Equipment wattage

British Thermal Units (BTU)/hour

Air flow

Positive air pressure to remove contaminants

Hot and Cold Aisles

Optimize air flow

Place servers back-to-back

Hot aisle/cold aisle

Do not allow contamination of cooled air by warmed air

Fire Detection and Suppression

Fire safety

Fire exits and evacuation procedures

Fire-resistant building design

Smoke/flame detectors/alarms

Personal fire extinguishers

Class C for use around electrical hazard

Sprinklers

Dry pipe

Pre-action

Halon

Clean Agent

Secure Data Destruction

Media sanitization/remnant removal

Physical destruction

Burning/incineration

Shredding/pulping

Pulverizing

Degaussing

Use of third-parties and certificates of destruction

Photo by monsterkoi on Pixabay.

Data Sanitization Tools

Secure disposal of electronic data remnants

Overwriting/disk wiping

Zero filling

Multiple passes

Secure Erase (SE)

Hard disk drives (HDD)

Solid state drives (SSD)/flash media

Instant Secure Erase (ISE)/crypto erase

Self-encrypting drives (SED)

Delete media encryption key

Screenshot used with permission from LSoft Technologies, Inc.

Physical Host Security Controls

Review Activity

Applied Lab

Managing Incident Response, Mitigation and Recovery

Lab Activity

Summary

Lesson 21