Certified Information Systems Security Professional (CISSP) — Question 235

A security professional has reviewed a recent site assessment and has noted that a server room on the second floor of a building has Heating, Ventilation, and Air
Conditioning (HVAC) intakes on the ground level that have ultraviolet light fi lters installed, Aero-K Fire suppression in the server room, and pre-action fire suppression on floors above the server room. Which of the following changes can the security professional recommend to reduce risk associated with these conditions?

Answer options

• A. Remove the ultraviolet light filters on the HVAC intake and replace the fire suppression system on the upper floors with a dry system
• B. Elevate the HVAC intake by constructing a plenum or external shaft over it and convert the server room fire suppression to a pre-action system
• C. Add additional ultraviolet light fi lters to the HVAC intake supply and return ducts and change server room fire suppression to FM-200
• D. Apply additional physical security around the HVAC intakes and update upper floor fire suppression to FM-200

Correct answer: D

Explanation

Option D is correct because enhancing physical security around the HVAC intakes and updating the fire suppression on upper floors to FM-200 would effectively reduce risks related to fire and environmental factors. The other options either remove necessary protective measures or do not adequately address the vulnerabilities presented by the current setup.