CISSP Exam QuestionsBrowse all questions from this exam

CISSP Exam - Question 180


What is considered a compensating control for not having electrical surge protectors installed?

Show Answer
Correct Answer: D

A compensating control for not having electrical surge protectors installed should provide an alternative solution to ensure continuity of power and protect systems from power-related issues. Having backup diesel generators installed to the site will ensure that power is maintained even during electrical surges or outages, protecting equipment and minimizing downtime. This solution addresses the immediate impact of power disruptions effectively.

Discussion

17 comments
Sign in to comment
Bhuraw
Oct 29, 2022

very very unreal scenario. They haven't money for Surge protectors but want DR capabilities

Mann0302
Dec 7, 2022

Exactly, the question doesn't even make sense smh.

jackdryan
May 13, 2023

B is correct

klarak
Apr 19, 2024

Exactly. Dumb question. Still, won't keep it off the exam...

Humongous1593Option: B
Oct 12, 2022

Key here is "the site". If surge hits and nothing is protecting the hardware the entire site could be down and PSU fried. DR site would be elsewhere and be unaffected.

74gjd_37Option: D
Sep 23, 2023

In a scenario where a surge hits and nothing is protecting the hardware, then the entire site could potentially go down, which could result in damage to PSUs and other equipment. However, from a compensating control perspective in the context of the CISSP exam, backup diesel generators are often considered to be a valid compensating control for mitigating the loss of power that can result from electrical surges.

Dam0sOption: B
Oct 3, 2023

If an electrical surge occurs, the systems themselves could be fried. An alternate source of power like a diesel generator will not help. They only solution to frying your actual systems from these options is an alternate DR site.

sphenixfireOption: B
Dec 2, 2022

to be clear and correct: every answer is incorrect. "hot" means equiped with configuration which means needs to be running (offline prepared config. is not possible in real life). for "warm" it would be correct.

oudmaster
Dec 10, 2022

I am not sure, but keep in mind the question did not mention about cost-effective solution.

IvanchunOption: B
Dec 26, 2022

B, Surge is prolonged excess power, A,C,D not protect for this.

HughJassoleOption: D
Jun 2, 2023

It looks like D. "provide equivalent or comparable protection for a system" https://csrc.nist.gov/glossary/term/compensating_controls If a surge happens and electricity goes out, the generator will continue supplying power.

MShaabanOption: B
Aug 6, 2023

Answer is B.

homeyslOption: B
Oct 18, 2023

Other answers don't make sense with the given scenario

ZonasOption: D
Dec 1, 2023

D is correct

SoleandheelOption: B
Dec 11, 2023

In the event of electrical surges that could potentially damage systems, a hot DR environment provides redundancy by replicating critical systems and data in a separate location. This ensures that essential services can quickly fail over to the DR environment, minimizing downtime and data loss.

Soleandheel
Dec 11, 2023

B. Having a hot disaster recovery (DR) environment for the site

maawar83Option: C
Jan 3, 2024

Agree the question does not make a lot of sense.. but thinking for cost effective and considering that no surge protectors... it is very expensive to have hot disaster recovery DR... looking at C. active-active to clusters... can ensure data protection and integrity and availability considering that clusters are connected to different power sources.. I think C. can be a good answer as well.

629f731Option: D
Jan 10, 2024

If we think as a Manager, and the main problem is power failures, a "compensatory control" that is, not the best solution but something that helps when the best option which is a DR site is not viable, is having "backup diesel generators ". I go with D

Vasyamba1Option: D
Mar 23, 2024

I don't think B is a correct answer. Imagine you are a manager, you come to the director of the company and he said "Look, we don't have surge protectors. What are we going to do when a surge happens?" You say "No worries, we will just move to another buillding!" :)

eboehmOption: C
Apr 9, 2024

interesting that literally every question here seems wrong. The question isnt about loss of power. Does literally no one know what a surge protector does? Surge protector is not a control protecting the entire building. Therefore a DR hot site and a backup generator is overkill. A generator would be a compensating control for UPS but not a surge protector. Surge protectors are controls that protect a piece of equipment. Therefore a valid compensating control would be having redundancy for that system. AKA active/active clusters ---> network equipment can apply to servers as well

CCNPWILLOption: D
Jun 4, 2024

HOT site is better than having diesel generators? i mean thats not a realistic implementation of this. Having backup ANY kind of generators would be suffice generally and is a more realistic answer to such scenario. I have to go against the grain. D