ITPEC IP April 2019 Question 58
For confidential information that is managed in an information system, which of the following is an appropriate measure that is taken from the facility management perspective to prevent information leakage?
Explanation
Entrance and exit control for the building that has a computer room — facility management protects the physical site, so it prevents leakage by keeping unauthorised people away from the equipment.
Facility management looks after the buildings and equipment an information system runs in: power (UPS, generators), air conditioning, fire and disaster protection, and physical security such as entry control with ID cards or biometrics, surveillance cameras and locked racks. Controlling who enters the building keeps outsiders away from the servers, storage media and printed documents that hold the confidential information.
Answer (b)
Why not others:
- •(a) Antivirus software — a technical measure on the computers, not the facility
- •(c) ID and password management — logical access control inside the information system
- •(d) Encryption of electronic documents — a technical measure applied to the data itself
Key rule: Security measures are physical (the site: locks, entry control, cameras), technical (in the system: authentication, encryption, antivirus) or human (rules, education); facility management owns the physical ones.
Service Management · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.