Physical security exam with correct ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
answers
Equipment - correct answers ✔✔Lighting, weapons, ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
closed circuit TV, fences, and locking mechanisms are ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
examples of what category of countermeasure? ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
Asset Owner - correct answers ✔✔An asset value should
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
be assigned based on the perspective of the
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
___________?
False - correct answers ✔✔TRUE or FALSE. You are the
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
one who decides what constitutes an acceptable level of
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
risk for an organization's assets.
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
What is the adversary's goal? * ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
What are the vulnerabilities of the risk management
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
system?
What level of risk are the adversaries likely to accept? *
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
,Are the adversaries willing to risk getting caught? * -
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
correct answers ✔✔Which of the following questions are
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
used to identify and adversary's intent?
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
Countermeasure Analysis Chart - correct answers ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
✔✔After you've completed all other steps, what final ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
chart would you use to summarize and record your
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
information in order to get the total cost for all ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
countermeasures.
Companies - correct answers ✔✔To assist in analyzing ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
threat data, adversaries are typically grouped into all
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
EXCEPT which of the following categories? ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
Companies
Organizations
Governments ||\\||\\
Individuals
,Risk - correct answers ✔✔After completing the
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
vulnerability assessment in the risk management process, ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
the next step is the __________ assessment.
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
Vulnerability Assessment - correct answers ✔✔After ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
completing the threat assessment step of the risk ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
management process, what step should be completed ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
next?
1. Facilities - correct answers ✔✔Which of the following is
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
one of the five categories of assets?
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
1. Facilities
||\\||\\
2. Countermeasures
||\\||\\
3. Vulnerabilities
||\\||\\
3. Has the adversary been suspected of attacking or
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
exploiting assets? - correct answers ✔✔Which of the ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
following is NOT a good interview question for ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
determining and adversary's history? ||\\||\\ ||\\||\\ ||\\||\\
, 1. Does the adversary have the weapons or tools for
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
exploiting or attacking an asset? ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
2. Has the adversary attacked or exploited assets and
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
personnel before? ||\\||\\
3. Has the adversary been suspected of attacking or
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
exploiting assets? ||\\||\\
4. Might some foreseeable event cause the adversary to
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
attempt an attack in the future? ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
3. Asset is assessed as 80 (critical), threat is assessed as
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
.24 (low), and the vulnerability is assessed as .37
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
(medium). - correct answers ✔✔Using the formula ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
R=(I[TxV]) which of the examples below poses the highest ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
risk?
1. Asset is assessed as 3 (low), threat is assessed as .75
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
(critical), and the vulnerability is assessed as .74 (high). ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
2. Asset is assessed as 13 (medium), threat is assessed as
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
.50 (high), and the vulnerability is assessed as .74 (high).
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
answers
Equipment - correct answers ✔✔Lighting, weapons, ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
closed circuit TV, fences, and locking mechanisms are ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
examples of what category of countermeasure? ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
Asset Owner - correct answers ✔✔An asset value should
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
be assigned based on the perspective of the
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
___________?
False - correct answers ✔✔TRUE or FALSE. You are the
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
one who decides what constitutes an acceptable level of
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
risk for an organization's assets.
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
What is the adversary's goal? * ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
What are the vulnerabilities of the risk management
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
system?
What level of risk are the adversaries likely to accept? *
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
,Are the adversaries willing to risk getting caught? * -
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
correct answers ✔✔Which of the following questions are
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
used to identify and adversary's intent?
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
Countermeasure Analysis Chart - correct answers ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
✔✔After you've completed all other steps, what final ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
chart would you use to summarize and record your
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
information in order to get the total cost for all ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
countermeasures.
Companies - correct answers ✔✔To assist in analyzing ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
threat data, adversaries are typically grouped into all
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
EXCEPT which of the following categories? ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
Companies
Organizations
Governments ||\\||\\
Individuals
,Risk - correct answers ✔✔After completing the
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
vulnerability assessment in the risk management process, ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
the next step is the __________ assessment.
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
Vulnerability Assessment - correct answers ✔✔After ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
completing the threat assessment step of the risk ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
management process, what step should be completed ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
next?
1. Facilities - correct answers ✔✔Which of the following is
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
one of the five categories of assets?
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
1. Facilities
||\\||\\
2. Countermeasures
||\\||\\
3. Vulnerabilities
||\\||\\
3. Has the adversary been suspected of attacking or
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
exploiting assets? - correct answers ✔✔Which of the ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
following is NOT a good interview question for ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
determining and adversary's history? ||\\||\\ ||\\||\\ ||\\||\\
, 1. Does the adversary have the weapons or tools for
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
exploiting or attacking an asset? ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
2. Has the adversary attacked or exploited assets and
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
personnel before? ||\\||\\
3. Has the adversary been suspected of attacking or
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
exploiting assets? ||\\||\\
4. Might some foreseeable event cause the adversary to
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
attempt an attack in the future? ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
3. Asset is assessed as 80 (critical), threat is assessed as
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
.24 (low), and the vulnerability is assessed as .37
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
(medium). - correct answers ✔✔Using the formula ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
R=(I[TxV]) which of the examples below poses the highest ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
risk?
1. Asset is assessed as 3 (low), threat is assessed as .75
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
(critical), and the vulnerability is assessed as .74 (high). ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
2. Asset is assessed as 13 (medium), threat is assessed as
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
.50 (high), and the vulnerability is assessed as .74 (high).
||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\ ||\\||\\
