Design site and facility security controls including wiring closets, server rooms, power, HVAC, fire prevention, and environmental issues - CISSP Security Architecture and Engineering

Design site and facility security controls including wiring closets, server rooms, power, HVAC, fire prevention, and environmental issues.

Design facility security controls for wiring closets, server rooms, and data centres covering HVAC specifications, fire suppression systems, power redundancy, and environmental monitoring. Select the appropriate fire suppression agent for a given server room scenario, balancing equipment safety against personnel safety.

data center securityHVACfire suppressionpower redundancyenvironmental controls

Practice question for this objective

Free sampleSecurity Architecture and Engineeringmedium

A pharmaceutical company is commissioning a small server room that houses systems supporting clinical trial data. The room contains tape archives, paper-based standard operating procedures in a wall cabinet, and approximately twenty staff who work in adjacent open-plan offices. The facilities team has costed three fire suppression options and asks the security manager to recommend the BEST primary suppression for the room itself.

AA pre-action sprinkler system charged with water only when smoke detection trips, with manual abort stations on the room exit.
BA clean agent gaseous system using an inert gas blend designed to the local concentration and egress standards, with audible and visual pre-discharge warnings. Correct
CA high-pressure carbon dioxide total flooding system sized to the room volume with a thirty-second pre-discharge delay.
DA dry chemical system using monoammonium phosphate powder discharged through ceiling nozzles across the room.

Select clean agent suppression for occupied IT spaces that hold sensitive media and active electronics. Suppression selection balances fire effectiveness, life safety in occupied spaces, and damage to protected assets. Clean agents extinguish by inerting or heat absorption without water or residue and are designed to a safe concentration for human exposure when egress and warning controls are present. They are therefore the preferred primary system for occupied server rooms holding tapes, paper, and live equipment, while sprinklers play a secondary structural role.

Why A is wrong: Pre-action sprinklers are safer than wet pipe in IT spaces, but water discharge will still damage tapes and electronics. Where a clean agent is justified by the asset value, pre-action is normally a secondary, life-safety backstop rather than the primary choice.

Why B is correct: A clean agent system suppresses fire without water damage to tapes, media, or running electronics, and is designed to remain within safe oxygen and exposure limits for occupants when local egress and warning requirements are met. For a small, occupied IT room with high-value media, this is the BEST primary suppression.

Why C is wrong: Carbon dioxide is effective but lethal at design concentrations and is not appropriate as the primary system in a normally occupied space. Modern codes restrict its use to unoccupied risks, so it fails the occupancy constraint of this scenario.

Why D is wrong: Dry chemical powder contaminates electronics and media, is extremely difficult to clean up, and is rarely chosen for clean IT environments. It would suppress fire but at unacceptable cost to the trial data and equipment.

See more CISSP practice questions with worked answers.

Examworthy is not affiliated with or endorsed by (ISC)2. Original, blueprint-aligned practice material only.

Design site and facility security controls including wiring closets, server rooms, power, HVAC, fire prevention, and environmental issues.

Practice question for this objective

More in this domain