QuestionQ20

Network security

A network architect is designing a solution to install network core equipment in a rack within a data center. This equipment is vital to the enterprise and must be as secure as possible to reduce the likelihood that anyone can connect directly to the network core.

The current security configuration includes:

  • A locked building requiring sign-in with a guard and an identification check.
  • A locked data center accessed with a proximity badge and fingerprint scanner.
  • A locked cabinet for which the security guard must call the Chief Information Security Officer (CISO) for authorization to provide the key.

Which additional measure should the architect recommend to make this equipment more secure?

Explanation

Video surveillance focused on the cabinet adds a physical detective and deterrent control. It records access attempts and activity around the network core equipment, supporting investigation and accountability in addition to the existing access restrictions.

Community Discussion

No comments yet. Be the first to start the discussion!