CNX-001 · Question #2
A network architect is designing a solution to place network core equipment in a rack inside a data center. This equipment is crucial to the enterprise and must be as secure as possible to minimize…
The correct answer is B. Set up a video surveillance system that has cameras focused on the cabinet. The existing controls already provide strong layered physical access controls (building guard, biometric data center entry, CISO-approved cabinet key). The remaining gap is visibility and accountability - knowing who approaches the cabinet and when, even if they have legitimate…
Question
A network architect is designing a solution to place network core equipment in a rack inside a data center. This equipment is crucial to the enterprise and must be as secure as possible to minimize the chance that anyone could connect directly to the network core. The current security setup is:
- In a locked building that requires sign in with a guard and
identification check.
- In a locked data center accessible by a proximity badge and
fingerprint scanner.
- In a locked cabinet that requires the security guard to call the
Chief Information Security Officer (CISO) to get permission to provide the key. Which of the following additional measures should the architect recommend to make this equipment more secure?
Options
- AMake all engineers with access to the data center sign a statement of work.
- BSet up a video surveillance system that has cameras focused on the cabinet.
- CHave the CISO accompany any network engineer that needs to do work in this cabinet.
- DRequire anyone entering the data center for any reason to undergo a background check.
How the community answered
(24 responses)- A4% (1)
- B79% (19)
- C13% (3)
- D4% (1)
Explanation
The existing controls already provide strong layered physical access controls (building guard, biometric data center entry, CISO-approved cabinet key). The remaining gap is visibility and accountability - knowing who approaches the cabinet and when, even if they have legitimate access. Video surveillance with cameras focused on the cabinet addresses this by creating a deterrent effect and providing forensic evidence of any unauthorized or suspicious activity. The other options are administrative controls (statements of work, background checks) that do not add meaningful physical security given the existing strict access regime. Having the CISO accompany engineers is operationally burdensome and impractical.
Topics
Community Discussion
No community discussion yet for this question.