CompTIA Server+ (SK0-005)Security and Disaster RecoveryMedium
A server in a high-security data center needs to be protected from unauthorized physical access. Which of the following physical security measures would be most effective in preventing an attacker from tampering with the server's internal components without detection?
- AVisitor log and escort policy
- BBiometric access control for the server room door
- CRack-mounted server with a locking front bezel
- DCCTV surveillance with motion detection
Show answer & explanationAnswer & explanation
Correct answer: C. Rack-mounted server with a locking front bezel
While other options protect the room, a locking front bezel on a rack-mounted server directly prevents an attacker from opening the server chassis and tampering with internal components like hard drives or memory, even if they gain access to the server room itself. This provides a direct layer of protection at the server level.
Why the other options are wrong
- A. Controls who enters the facility, but not direct access to the server once past initial checks.
- B. Protects entry to the room, not direct access to the server's internals once inside.
- D. Deters and records activity, but doesn't physically prevent tampering.
Server Physical Security
Measures taken to protect server hardware from unauthorized physical access, damage, or theft.
- Includes server room access controls, rack security, and environmental controls.
- Aims to prevent tampering, theft, and environmental harm.
- Often multi-layered, combining various techniques.
Memory trick: Server Security: Layer it up, from room to rack!