exam questions

Exam CISSP All Questions

View all questions & answers for the CISSP exam

Exam CISSP topic 1 question 271 discussion

Actual exam question from ISC's CISSP
Question #: 271
Topic #: 1
[All CISSP Questions]

A security professional has reviewed a recent site assessment and has noted that a server room on the second floor of a building has Heating, Ventilation, and Air
Conditioning (HVAC) intakes on the ground level that have ultraviolet light fi lters installed, Aero-K Fire suppression in the server room, and pre-action fire suppression on floors above the server room. Which of the following changes can the security professional recommend to reduce risk associated with these conditions?

  • A. Remove the ultraviolet light filters on the HVAC intake and replace the fire suppression system on the upper floors with a dry system
  • B. Elevate the HVAC intake by constructing a plenum or external shaft over it and convert the server room fire suppression to a pre-action system
  • C. Add additional ultraviolet light fi lters to the HVAC intake supply and return ducts and change server room fire suppression to FM-200
  • D. Apply additional physical security around the HVAC intakes and update upper floor fire suppression to FM-200
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Voxycs
Highly Voted 1 year, 3 months ago
I have no idea what I just read...I asked ChatGPT and it said B. I hope this question doesn't show up on my test lol
upvoted 9 times
Jayelv
2 weeks, 4 days ago
Good to know this type of question will now show in the exam. This is difficult you dont have enough exposure with the system.
upvoted 1 times
...
Bietchasup
1 month, 2 weeks ago
right.... I'll just take the L on this one but im going with A
upvoted 1 times
...
...
stickerbush1970
Highly Voted 2 years, 4 months ago
Selected Answer: D
Agree with D
upvoted 7 times
jackdryan
1 year, 8 months ago
D is correct
upvoted 1 times
...
...
imather
Most Recent 5 days, 14 hours ago
Selected Answer: D
Using reasoning and knowledge of fire suppression systems, little knowledge on gases used for suppression. A - there is no reason to remove the UV filter. Pre-action is good for environments with people and electronics as it provides reliability and protection against alarms. A dry system does not have a two stage release and is intead used in places prone to freezing. B - the first option is neutral, but a server room should not use water as that will destroy the equipment C - There is no given reason to add additional UV filters, we are not told how many they have or are needed, upgrading to FM-200 is neutral. D - extra security is good, using a gas suppression instead of water in the upper rooms will help reduce damage to both the upper room and prevent flooding to the server room.
upvoted 1 times
...
deeden
5 months, 1 week ago
Selected Answer: D
Risks & Potential Impacts: 1. Ground Level HVAC Intakes: Susceptible to contaminants or sabotage, posing risks to hardware due to poor air quality. 2. Fire Suppression Systems: Inadequate or overly aggressive fire suppression can lead to equipment damage either by the fire itself or the suppression method. Wow this is really hard decision. I like the idea of protecting HVAC intake by elevation, but I don't like the idea of pre-action in server room because it is water-based. I would like to salvage as much equipment as possible in case of an actual fire. For those who asked, FM-200 has a better response time. Aero-K usually require a certain time delay with alarm mechanism to seal the room before discharging. Both are clean, no residue, and safe around humans and electronics.
upvoted 2 times
...
JohnBentass
7 months, 1 week ago
B. Elevate the HVAC intake by constructing a plenum or external shaft over it and convert the server room fire suppression to a pre-action system Here's why: Elevating the HVAC Intake: By constructing a plenum or external shaft over the HVAC intake, you can raise it above ground level. This helps protect against potential contaminants or threats that may be introduced at ground level, such as smoke, debris, or intentional sabotage. Converting to Pre-Action Fire Suppression: Pre-action fire suppression systems require the activation of a detection system (like smoke detectors) before water is released. This helps prevent accidental discharge and water damage in sensitive areas like server rooms. Pre-action systems are commonly used in areas housing critical equipment
upvoted 1 times
...
marziparzi
9 months, 2 weeks ago
Selected Answer: B
I'm leaning toward B instead of D because I cannot find anything online about how FM-200 is preferred over Aero-K
upvoted 1 times
deeden
5 months, 1 week ago
Choosing between Aero-K and FM-200 for a server room depends on specific requirements and priorities: Aero-K: Pros: Effective in suppressing fires without residue; safe for use around electronic equipment. Cons: Requires room sealing to maintain concentration long enough to extinguish the fire, which could be challenging in some environments. FM-200: Pros: Very fast acting, clean agent that leaves no residue, minimizing downtime and equipment damage. Cons: Higher cost and potential for environmental impact as it is a greenhouse gas. Considerations: If rapid response and minimal cleanup are paramount, FM-200 might be the better choice due to its fast extinguishing capabilities and lack of residue. If the focus is on environmental impact and cost, Aero-K could be preferred.
upvoted 1 times
...
...
SSimko
11 months, 3 weeks ago
Selected Answer: A
A is the correct answer and here is why: https://www.hvac.com/expert-advice/hvac-uv-lights-do-they-work-and-are-they-worth-it/ "An ultraviolet (UV) light emits powerful rays of energy that kill bacteria, fungi, and viruses. They are commonly used in both home and commercial spaces." https://www.colocationamerica.com/blog/different-fire-supression-systems-in-data-centers "With this being said, dry pipe fire sprinkler systems are one of the best options for data centers and other operations housing electronic equipment."
upvoted 2 times
...
YesPlease
1 year ago
Selected Answer: D
Answer D) Apply additional physical security around the HVAC intakes and update upper floor fire suppression to FM-200 A is wrong because even though the pipe is dry at the moment, it still works with water. B is wrong because a pre-action system just has a few more protections in place to prevent an accidental release of water, but it still works with water C is wrong cause the ultraviolet light filters kill germs and have nothing to do with anything
upvoted 4 times
deeden
5 months, 1 week ago
I agree with D. I don't think server are at risk with germs :) it's the risk of sabotage because the intake is at ground level. Also, I would like to salvage as much as I can in case of actual firewall, meaning no water whatsoever inside the server room.
upvoted 1 times
...
YesPlease
1 year ago
and FM-200 is considered "safe" for humans so it shouldn't matter if it circulates in the HVAC to other areas as the HVAC may not be dedicated to the server room. (it should be though)
upvoted 2 times
dm808
9 months, 3 weeks ago
secondly to it being safe for humans, fm200 doesnt leave a residue and is safe for electronics.. so if it's deployed that should minimize any cleanup, repair, and replacement of material.
upvoted 1 times
...
...
...
Soleandheel
1 year, 1 month ago
D. Apply additional physical security around the HVAC intakes and update the upper floor fire suppression to FM-200. This option addresses the security concerns related to the HVAC intakes by adding physical security measures. It also enhances the fire suppression system on the upper floors with FM-200, which is a clean agent fire suppression system commonly used for protecting critical IT equipment like servers. Option D provides a balanced approach that addresses both security and fire suppression requirements in the context of a server room's protection.
upvoted 1 times
...
InclusiveSTEAM
1 year, 3 months ago
B is the answer. The change that can reduce risk from the described server room conditions is to elevate the HVAC intake and convert the server room to a pre-action fire suppression system, option B. Raising the intake mitigates ground-level contaminants and floods. Pre-action only releases suppressant when smoke is detected, avoiding accidental discharge. By relocating the intake and tailoring server room suppression sensitivity, threats from water, contaminants, and false discharges are directly addressed. The other options either reduce protections or do not directly resolve the cited server room vulnerabilities -Removing the UV filters eliminates that contamination control. Dry pipes have slow water flow. -Additional UV and FM-200 provide minimal added protection considering costs. -Physical security does not address the noted risks.
upvoted 1 times
...
Rollingalx
1 year, 11 months ago
Why not B? Elevating the HVAC intake by constructing a plenum or external shaft over it will help prevent any potential malicious actor or intruder from introducing harmful materials, such as flammable liquids or gases, into the HVAC system from outside. This will improve the security of the server room by reducing the risk of unauthorized access to the HVAC system. In addition, converting the server room fire suppression to a pre-action system will help minimize the potential damage caused by accidental activation of the fire suppression system
upvoted 3 times
liledag
1 year, 9 months ago
I got B as well
upvoted 1 times
cryptofetti
1 year, 9 months ago
Leaning towards B - By elevating the HVAC intake through constructing a plenum or external shaft, the risk associated with it can be reduced as it will be less susceptible to tampering and malicious activities. A pre-action fire suppression system on the server room would help mitigate the risk of accidental discharges from the suppression system as it only discharges water when there is a fire alarm or detection from the smoke detector.
upvoted 1 times
...
...
...
Skinbaggy
2 years, 1 month ago
https://www.vfpfire.com/systems-dry-pipe.php Recommend D as A dry will still dump water which you are trying to mitigate
upvoted 1 times
...
tutor
2 years, 2 months ago
Selected Answer: D
changed my mind with to switch to fm-200
upvoted 1 times
...
tutor
2 years, 2 months ago
Selected Answer: A
I think its a because the floors above the server room are pre-action which means water, last I checked water bad for server rooms, so the other information is garbage in the answer.
upvoted 4 times
...
DracoL
2 years, 2 months ago
the question and answer doesnt make sense. UV-C lighting systems are not an exotic, new technology. They have been used extensively since the mid-1990s to significantly improve HVAC airflow and heat-exchange efficiency, which can reduce energy use by up to 35 percent. UV-C by itself doesn’t save energy; rather, it restores cooling capacity and airflow to increase the potential for energy savings. https://www.esmagazine.com/articles/99118-ultraviolet-energy-an-important-addition-to-the-data-center-cooling-equation. So it doesnt make sense to remove the Ultraviolet filter as it helps maintain the consistency of the HVAC performance.
upvoted 1 times
...
franbarpro
2 years, 2 months ago
Gas suppression systems operate to starve the fire of oxygen. In the past, Halon was the choice for gas suppression systems; however, Halon leaves residue and depletes the ozone layer. Aero-K: Uses an aerosol of microscopic potassium compounds in a carrier gas released from small canisters mounted on walls near the ceiling. The Aero-K generators are not pressurized until fire is detected. The Aero-K system uses multiple fire detectors and will not release until a fire is “confirmed” by two or more detectors (limiting accidental discharge). The gas is noncorrosive, so it does not damage metals or other materials. It does not harm electronic devices or media. More important, Aero-K is nontoxic and does not injure personnel. FM-200: Is a colorless, liquefied compressed gas. It is stored as a liquid and dispensed into the hazard as a colorless, electrically nonconductive vapor that is clear and does not obscure vision. It leaves no residue and has acceptable toxicity for use in occupied spaces at design concentration. FM-200 does not displace oxygen and, therefore, is safe for use in occupied
upvoted 1 times
Hava_2013
2 years, 2 months ago
so, you chose "D", then?
upvoted 1 times
...
sand_d
2 years, 1 month ago
It looks to me that Aero0K doesn't have any bad effect towards human, same as FM-200. So, why everyone prefer chnging answer to D, when part of the answer doesn't make any sense.
upvoted 1 times
...
...
techgig22
2 years, 3 months ago
A is correct answer
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago